When using TCP/IP mode with 8.x-1.x-dev, infected files are checked but the results are not reported in the API.
This allows infected files to be uploaded.

Do not use TCP/IP mode until this issue is fixed.

Note that this issue is publicly reported without a security notification, as 8.x-1.x is currently a dev release and has never had a full release.

Comments

manarth created an issue. See original summary.

manarth’s picture

manarth commented
Issue summary: View changes
manarth’s picture

manarth commented
Status: Needs work » Fixed

Fixed in commit: 2f3300c31284164727d44c365618f5889695eaee

  • manarth committed 2f3300c on 8.x-1.x 
    Issue #2806843: 8.x allows infected files to be uploaded in TCP/IP mode

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.