Clam AntiVirus

File Release Notes and Changelog

Release Name: 0.94

Notes: Sourcefire and the ClamAV team are pleased to announce the release of ClamAV 0.94. The following are the key features and improvements of this version: - Logical Signatures: The logical signature technology uses operators such as AND, OR and NOT to allow the combination of more than one signature into one entry in the signature database resulting in more detailed and flexible pattern matching. - Anti-phishing Technology: Users can now change the priority and reporting of ClamAV's heuristic anti-phishing scanner within the detection engine process. They can choose whether, when scanning a supicious file, ClamAV should stop scanning and report the phish, or continue to scan in case the file contains other malware (clamd: HeuristicScanPrecedence, clamscan: --heuristic-scan-precedence) - Disassembly Engine: The initial version of the disassembly engine improves ClamAV's detection abilities. - PUA Detection: Users can now decide which PUA signatures should be loaded (clamd: ExcludePUA, IncludePUA; clamscan: --exclude-pua, --include-pua) - Data Loss Prevention (DLP): This version includes a new module that, when enabled, scans data for the inclusion of US formated Social Security Numbers and credit card numbers (clamd: StructuredDataDetection, clamscan: --detect-structured; additional fine-tuning options are available) - IPv6 Support: Freshclam now supports IPv6 - Improved Scanning of Scripts: The normalization of scripts now covers JavaScript - Improved QA and Unit Testing: The improved QA process now includes API testing and new library of test files in various formats that are tested on a wide variety of systems (try running 'make check' in the source directory) For more details, please refer to http://www.clamav.net/press/0.94-WhatsNew.pdf and to the ChangeLog. You may need to run 'ldconfig' after installing this version. ** This version drops the special support for Cygwin. Our QA process showed ** serious problems with ClamAV builds under Cygwin due to some low-level ** incompatibilities in the POSIX compatibility layer, resulting in unreliable ** ClamAV behaviour. -- The ClamAV team (http://www.clamav.net/team)

---

Changes: Tue Sep 2 15:11:53 CEST 2008 (tk) ---------------------------------- * V 0.94 Mon Sep 1 20:24:43 CEST 2008 (tk) ---------------------------------- * libclamav/others.c: bump f-level Mon Sep 1 20:19:57 CEST 2008 (tk) ---------------------------------- * docs: update Mon Sep 1 19:31:08 CEST 2008 (tk) ---------------------------------- * libclamav/message.c, mbox.c: fix out-of-memory null dereference in mbox/message (bb#1141) Patch from Edwin Mon Sep 1 19:27:55 CEST 2008 (tk) ---------------------------------- * libclamav/chmunpack.c: fix possible invalid memory access (bb#1089) Patch from Trog Mon Sep 1 10:57:56 EEST 2008 (edwin) ------------------------------------ * libclamav/scanners.c: enable scanscript for UTF* types too Sun Aug 31 15:31:04 CEST 2008 (acab) ------------------------------------ * libclamav/disasm, unit_tests: more endianess issues fixed (that should eb all) Sun Aug 31 04:23:12 CEST 2008 (acab) ------------------------------------ * libclamunrar/unrarvm.c: big-endian fixes Sat Aug 30 01:29:51 CEST 2008 (tk) ---------------------------------- * libclamav/dlp.c: limit number of false positive alerts * clamd, clamscan: don't scan for stripped SSNs by default Fri Aug 29 12:29:32 CEST 2008 (tk) ---------------------------------- * libclamav/dlp.c: credit card detection fixes * clamd, clamscan: minCC and minSSN counts now set by default to 3 Fri Aug 29 02:46:19 CEST 2008 (acab) ------------------------------------ * clamav-milter: Add option "--no-check-cf" to bypass sendmail.cf sanity checks. For use by package maintainers on fresh installs, when sendmail.cf is present for any reason although it's not used or when the milter is configured via an m4 file included in sendmail.cf. This option is intentionally not extensively documented (bb#726) Thu Aug 28 15:13:07 CEST 2008 (acab) ------------------------------------ * unit_tests/check_disasm: add the remaining test cases (fpu, prefixes and more) Thu Aug 28 12:55:19 CEST 2008 (acab) ------------------------------------ * unit_tests/check_disasm: test cases for most mrm (and others) Tue Aug 26 02:52:10 CEST 2008 (acab) ------------------------------------ * libclamav/disasm*; unit_tests/check_disasm: some fixes, work in progress Mon Aug 25 23:52:04 CEST 2008 (tk) ---------------------------------- * drop support for Cygwin (due to broken ClamAV builds) Mon Aug 25 22:17:03 CEST 2008 (tk) ---------------------------------- * man/freshclam.1.in: fix typo (bb#1147) Mon Aug 25 16:03:44 CEST 2008 (tk) ---------------------------------- * libclamav: drop obsolete code in matcher-ac Sun Aug 24 23:51:48 CEST 2008 (tk) ---------------------------------- * libclamav/unrar.c: improve handling of currupted archives and downgrade some error messages Sat Aug 23 22:18:47 CEST 2008 (tk) ---------------------------------- * shared/misc.c: fix double "-exp" Fri Aug 22 15:20:08 CEST 2008 (tk) ---------------------------------- * freshclam/manager.c: fix warnings - bb#1142 Fri Aug 22 12:33:58 CEST 2008 (acab) ------------------------------------ * clamav-milter/clamav-milter.c: missing proto Thu Aug 21 13:29:22 CEST 2008 (tk) ---------------------------------- * freshclam/manager.c: fix error path memleaks - bb#1141 Thu Aug 21 13:24:17 CEST 2008 (tk) ---------------------------------- * shared/tar.c: fix invalid close on error path - bb#1141 Thu Aug 21 13:22:29 CEST 2008 (tk) ---------------------------------- * libclamav/others.c: fix fd feak on error path - bb#1141 Wed Aug 20 20:09:11 CEST 2008 (acab) ------------------------------------ * libclamav/sis.c: fix fd feak on error path - bb#1141 Wed Aug 20 10:54:24 CEST 2008 (tk) ---------------------------------- * clamd/clamd.c: return an error (instead of a warning) if AllowSupplementaryGroups is enabled but initgroups() not available Mon Aug 18 12:01:10 CEST 2008 (tk) ---------------------------------- * libclamunrar_iface, libclamav: improve detection of encrypted RAR archives (bb#1134) Sun Aug 17 19:30:25 CEST 2008 (tk) ---------------------------------- * clamd/server-th.c: add missing proto for cli_initengine() (bb#1136)