Share

Clam AntiVirus

File Release Notes and Changelog

Release Name: 0.81

Notes:
0.81
----

Scan engine improvements were made. The internal mail scanner now supports
multipart/partial messages, and support for decoding non-standard mail files
was greatly enhanced. clamav-milter by default uses libclamav and scans emails
itself without the use of clamd. libclamav can now extract RFC2397 encoded
data within HTML documents, block zip archives with modified information in
local header, and scan HQX files. PE file structure rebuilding from compressed
executables was improved.

Important note to clamdwatch users: please upgrade to the latest version
(contrib/clamdwatch) as soon as possible.

-) libclamav:
    + major improvements in the mail scanning engine:
	o support for multipart/partial messages
	o improved support for non-standard quoted-printable attachments
	o in some situations it will try to guess a correct mode (e.g.
	  a good type for an incorrect content-type, a best guess for an
	  unknown encoding type, etc.)
	o handling of RFC822 comments in the commands (e.g.: Co(foo)ntent-Type:
	  text/plain)
	o better recovery if memory softlimit is hit
	o new test code that decodes emails without parsing them first (must
	  be enabled manually before compilation)

    + support for extracting RFC2397 encoded data within HTML documents
    + blocking of zip archives with modified information in local header
    + improved PE structure rebuilding from compressed executables
    + improved support for zip archives
    + support for Mac's HQX file format
    + stability and (minor) security fixes
    + a lot of minor improvements, including support for new platforms

-) clamd:
    + new directive ExitOnOOM (stop the deamon when libclamav reports an out of
      memory condition)
    + new directives StreamMinPort and StreamMaxPort (port range specification
      for a stream mode)
    + support for passing of file descriptors

-) clamdscan:
    + added support for --move and --remove

-) clamav-milter:
    + by default uses libclamav to scan e-mails
    + new option --external (enables the use of clamd)
    + various optimisations

-) freshclam:
    + the DNS mode is now enabled by default (no need for DNSDatabaseInfo in
      freshclam.conf)
    + --no-dns uses a If-Modified-Since method instead of a range GET
    + added support for AllowSupplementaryGroups

-) sigtool:
    + new options --vba and --vba-hex (extract VBA/Word6 macros and optionally
      display the corresponding hex values; Word6 binary code will be
      disassembled)

-) The list of third party programs with support for ClamAV is growing
   rapidly. Here are the latest additions (see clamdoc.pdf for details):

    + AVScan - a libclamav based GUI a-v scanner for Unix
    + clamailfilter - a Python script that provides a-v scanning via procmailrc
    + ClamAVPlugin - A ClamAV plugin for SpamAssassin 3.x
    + ClamCour - an e-mail filter for Courier
    + clamfilter - a small, secure, and efficient content filter for Postfix
    + ClamMail - an anti-virus POP3 proxy for Windows
    + ClamShell - a Java GUI for clamscan
    + ClamTk - a perl-tk GUI for ClamAV
    + clapf - a virus scanning and antispam content filter for Postfix
    + D bindings for ClamAV - ClamAV bindings for the D programming language
    + Frox - a transparent FTP proxy
    + KMail - a fully-featured email client now supports ClamAV out of box
    + Mail Avenger - a highly-configurable SMTP server with a-v support
    + Mailnees - a mail content filter for Sendmail and Postfix
    + Maverix - anti-spam and anti-virus solution for AOLServer
    + Moodle - scan files submitted by students for viruses!
    + php-clamav - scan files from within PHP
    + pymavis - a powerful email parser, similar to the old amavis-perl
    + QClam - a simple program to plug ClamAV to a qmail mailbox
    + qmailmrtg7 - display graphs of viruses found by ClamAV
    + qSheff - an e-mail filter for qmail
    + SafeSquid - a feature rich content filtering internet proxy
    + Scrubber - a server-side daemon for filtering mail content
    + simscan - an e-mail and spam filter for qmail
    + smtpfilter - scan SMTP session for viruses
    + snort-inline - scan your network traffic for viruses with ClamAV
    + SquidClamAV Redirector - a Squid helper script which adds virus scanning 
    + WRAVLib - a library for a-v integration with Mono/.NET applications


Changes: Wed Jan 26 19:27:57 CET 2005 (tk) --------------------------------- V 0.81 Wed Jan 26 18:20:40 GMT 2005 (trog) ----------------------------------- * clamd/server-th.c: always check if we need to end the SESSION. Wed Jan 26 19:01:27 CET 2005 (tk) --------------------------------- * libclamav/others: increase f-level Wed Jan 26 18:37:45 CET 2005 (tk) --------------------------------- * minor cleanup Wed Jan 26 17:26:03 GMT 2005 (trog) ----------------------------------- * clamd/server-th.c clamd/session.c clamd/session.h: fixup SESSION mode. Wed Jan 26 17:40:56 CET 2005 (tk) --------------------------------- * docs: update Wed Jan 26 15:25:56 CET 2005 (tk) --------------------------------- * freshclam/manager.c: wwwconnect(): use new socket after failure (patch by Geoff Gibbs <ggibbs*hgmp.mrc.ac.uk>) Wed Jan 26 15:10:02 CET 2005 (tk) --------------------------------- * shared/misc.c: freshdbdir(): fix possible dbdir string corruption (reported by ST Wong <st-wong*cuhk.edu.hk>) Wed Jan 26 10:38:08 CET 2005 (tk) --------------------------------- * configure: improve curl check (thanks to Martin Forssen <maf*appgate.com>) Wed Jan 26 10:15:47 CET 2005 (tk) --------------------------------- * shared/output.c: change output modes (more stdout output). Patch by Stephen Gran <steve*lobefin.net>. Wed Jan 26 09:23:48 CET 2005 (tk) --------------------------------- * libclamav/snprintf.c: add missing MAX macro (thanks to Ted Mittelstaedt <tedm*toybox.placo.com>) Tue Jan 25 08:12:51 GMT 2005 (njh) ---------------------------------- * clamav-milter: Internal mode is now the default. Removed --internal option, added --external. Don't use clamd's SESSION mode, since that causes problems with clamd/freshclam when freshclam is run. SESSION mode can be enabled from the source code. Most people can use SESSION mode safely, but it has caused problems on BSD Tue Jan 25 06:13:29 CET 2005 (tk) --------------------------------- * freshclam/manager.c: properly count signatures in --no-dns mode (problem reported by Tomasz Papszun) Tue Jan 25 05:09:42 CET 2005 (tk) --------------------------------- * clamscan/manager.c: fix bad path completion when using options for external compressors (reported by Robert Allerstorfer <roal*anet.at>) Mon Jan 24 20:12:06 CET 2005 (tk) --------------------------------- * freshclam: improve error messages (patch by Luca Gibelli <luca*clamav.net>) Mon Jan 24 17:54:14 CET 2005 (tk) --------------------------------- * clamd/thrmgr.c: unlock mutex if thread->state != POOL_VALID in thrmgr_dispatch() (thanks to "Andrey J. Melnikoff (TEMHOTA)" <temnota*kmv.ru>) Mon Jan 24 13:56:19 GMT 2005 (njh) ---------------------------------- * libclamav/message.c: Some Exploit.IE.CrashSOS were not being caught, found by Carsten.Borchardt*drs-systemberatung.de Sat Jan 22 13:45:42 GMT 2005 (njh) ---------------------------------- * clamav-milter: If forwarding to a quarantine user fails log as LOG_ERR not LOG_DEBUG Try to santity check that the input socket name is the same as the same given to sendmail Redirect stdout and stderr to LogFile, if that is set --quarantine didn't redirect to the given email address if --internal was used (reported by N Fung <nsfung*yahoo.com>) Thu Jan 20 01:22:48 CET 2005 (tk) --------------------------------- V 0.81rc1 Thu Jan 20 01:07:26 CET 2005 (tk) --------------------------------- * docs: update Wed Jan 19 17:46:19 GMT 2005 (njh) ---------------------------------- * libclamav/mbox.c: Changed fullline warning. The debug message is no longer needed to gather data, since the code seems to be working Wed Jan 19 05:32:10 GMT 2005 (njh) ---------------------------------- * clamav-milter: Up issued * libclamav/text.c: Added textIterate to simplify some functions * libclamav/blob.c: Better handling of empty data * libclamav/binhex.c: Cleaner handling of empty files which shouldn't go to cli_binhex() Wed Jan 19 00:58:40 CET 2005 (tk) --------------------------------- * libclamav/str.c: cli_memstr: fix casting on 64bit platforms (thanks to Carlo Marcelo Arenas Belon <carenas*sajinet.com.pe>) Wed Jan 19 00:48:48 CET 2005 (tk) --------------------------------- * improve OS/2 support (patch by Yuri Dario <mc6530*mclink.it>) Wed Jan 19 00:17:25 CET 2005 (tk) --------------------------------- * zziplib/zzip-zip.c: fix possible small memory leak (thanks to Trog) Mon Jan 17 23:18:17 CET 2005 (tk) --------------------------------- * clamscan/manager.c: increase default compression ratio limit from 200 to 250 Sun Jan 16 06:28:59 CET 2005 (tk) --------------------------------- * libclamav/pe.c: attempt to detect W32.Parite.B using cryptanalysis (thanks to aCaB for info on detection) Sat Jan 15 18:33:41 CET 2005 (tk) --------------------------------- * libclamav/str.c: cli_memstr: return substring address Fri Jan 14 16:12:21 GMT 2005 (trog) ----------------------------------- * libclamav/filetypes.c: add a few more HTML filetype markers Fri Jan 14 14:53:59 GMT 2005 (trog) ----------------------------------- * libclamav/htmlnorm.c: RFC2397 ("data" URL scheme) support. * libclamav/scanner.c: scan RFC2397 data. Wed Jan 12 08:58:29 GMT 2005 (njh) ---------------------------------- * clamav-milter: Fixed DNS resolution error messages which could print the incorrect hostname that is not being resolved. Patch from Yar Tikhiy <yar*comp.chem.msu.su> Tue Jan 11 20:24:36 CET 2005 (tk) --------------------------------- * docs: Fix small typos in man pages (reported by Luca) Tue Jan 11 02:27:24 CET 2005 (tk) --------------------------------- * libclamav/scanners.c: Fix possible crash when handling file information in corrupted zip archives (problem reported by Reinhard Max <max*suse.de>) Sun Jan 9 21:24:58 GMT 2005 (njh) ---------------------------------- * libclamav/mbox.c: Some HTML.Phishing.Bank-41 were getting through Sun Jan 9 11:38:39 GMT 2005 (njh) ---------------------------------- * libclamav/mbox.c: Add support for messages that break RFC2047 Sat Jan 8 03:50:51 CET 2005 (tk) --------------------------------- * aclocal.m4/configure: Add support for x86_64 (patch by Gwenole Beauchesne (MandrakeSoft), submitted by Oden Eriksson <oeriksson*mandrakesoft.com>) Sat Jan 8 02:53:20 CET 2005 (tk) --------------------------------- * libclamav/filetypes.c: Add support for mail files parsed by CMU Sieve (samples provided by Stefan Kaltenbrunner <stefan*kaltenbrunner.cc>) Sat Jan 8 02:25:58 CET 2005 (tk) --------------------------------- * libclamav: Fix cli_writeint32 alignment problem on SPARC (reported by Andy Fiddaman <clam*fiddaman.net>) Fri Jan 7 13:50:52 GMT 2005 (njh) ---------------------------------- * libclamav/mbox.c: Fix to "content-type: application" which could cause the attachment to be scanned twice Thu Jan 6 23:24:35 GMT 2005 (njh) ---------------------------------- * libclamav/mbox.c: Better handler of single quotes in headers Thu Jan 6 11:54:54 GMT 2005 (njh) ---------------------------------- * libclamav/mbox.c: Scan for bounces in non mime-encoded emails Wed Jan 5 21:55:49 GMT 2005 (njh) ---------------------------------- * libclamav/message.c: Guess incorrect content-type, e.g. Content-Type: ultipart/mixed instead of Content-Type: multipart/mixed Wed Jan 5 21:09:14 GMT 2005 (njh) ---------------------------------- * libclamav/message.c: Fix crash caused when looking for non-existant uuencoded files. This happens when the stated encoding method is wrong so we have to try all methods and including those which will fail Sat Jan 1 15:56:48 GMT 2005 (njh) ---------------------------------- * libclamav/mbox.c: Changes handling of unbalanced quotes in multipart headers Sat Jan 1 12:54:04 GMT 2005 (njh) ---------------------------------- * libclamav/message.c: Some uuencoded viruses were getting through Thu Dec 30 14:06:03 GMT 2004 (njh) ---------------------------------- * contrib/init/NetBSD2.0: Added startup and shutdown scripts for NetBSD2.0 Tue Dec 28 16:26:49 GMT 2004 (njh) ---------------------------------- * clamav-milter/INSTALL: Added instructions for FreeBSD5.3 contrib/init/FreeBSD5.2: Clarified installation instructions - tested under FreeBSD5.3 Mon Dec 27 05:12:29 CET 2004 (tk) --------------------------------- * freshclam/manager.c: Remove "Cache-Control: no-cache" from remote_cvdhead() Users behind proxies should only use the DNS method (now default, hardcoded) Mon Dec 27 05:01:54 CET 2004 (tk) --------------------------------- * freshclam/manager.c: use If-Modified-Since in --no-dns mode (based on code by Reini Urban <rurban*x-ray.at>) Mon Dec 27 01:09:20 CET 2004 (tk) --------------------------------- * libclamav/scanners.c: Add missing ArchiveBlockMax rule for recursion limit (reported by HR <haavard*zyf.no-ip.org>) Wed Dec 22 16:08:49 GMT 2004 (trog) ----------------------------------- * sigtool/vba.c: Add some more Word6 tokens. * libclamav/htmlnorm.c: Don't set execute bit on temp files. Tue Dec 21 18:42:44 GMT 2004 (njh) ---------------------------------- * clamav-milter: Fix fault tolerance problem which could cause clamav-milter to attempt to talk to a clamd that was down before switching to a working clamd Tue Dec 21 16:44:13 GMT 2004 (njh) ---------------------------------- * libclamav/blob.c: Support for OS/2 - patch by TK Tue Dec 21 04:11:48 CET 2004 (tk) --------------------------------- * freshclam: DNSDatabaseInfo: optimised and hardcoded Mon Dec 20 14:52:03 GMT 2004 (trog) ----------------------------------- * libclamav/chmunpack.c: relax over stringent offset checks. Explicitly cast some long long constants. * libclamav/ole2_extract.c: remove variable size array declaration. Mon Dec 20 02:57:29 CET 2004 (tk) --------------------------------- * libclamav/others.c: added cli_filecopy() Mon Dec 20 02:32:30 CET 2004 (tk) --------------------------------- * improved OS/2 support (thanks to Yuri Dario <mc6530*mclink.it>) Sun Dec 19 17:01:56 GMT 2004 (njh) ---------------------------------- * clamav-milter: Correctly warn that --max_childen must be given in SESSION mode if LocalSocket is used and MaxThreads isn't given in clamd.conf. max_children is needed to know how many sessions to initiate to clamd(s) Sun Dec 19 13:51:20 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Further work on the non-parsing version. * clamav-milter: Fix compilation error in non SESSION mode Sun Dec 19 12:46:23 CET 2004 (tk) --------------------------------- * contrib/clamdwatch: updated to 0.7 Sun Dec 19 03:12:50 CET 2004 (tk) --------------------------------- * sigtool: fixed compilation error Sun Dec 19 03:00:48 CET 2004 (tk) --------------------------------- * libclamav: improved zip support Sun Dec 19 02:09:50 CET 2004 (tk) --------------------------------- * docs/MacOSX: updated (Dale Enterprise L.L.C) Sat Dec 18 16:32:51 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Removed the need for a extra (short lived) parse tree on some mail formats. This will help memory and performance in some scenarios Thu Dec 16 15:31:45 GMT 2004 (njh) ---------------------------------- * libclamav: Added some test software that decodes emails without parsing them first. It is not enabled by default, use at your own risk and look at the comments first. Cleared a few problems in the decoding algorithms found when testing the above code Tue Dec 14 16:43:51 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: removed fix from Wed Dec 1 12:14:46 GMT 2004. The original code was correct. Tue Dec 14 11:36:43 GMT 2004 (trog) ----------------------------------- * libclamav/vba_extract.c: - Add signature for MacOffice 2004 - Guess endianness of unknown versions of MS Office. Tue Dec 14 11:15:22 GMT 2004 (trog) ----------------------------------- * sigtool/options.c sigtool/sigtool.c: New options: --vba and --vba-hex * sigtool/vba.c sigtool/vba.h: New files. Code to extract VBA/Word6 macros Tue Dec 14 10:30:15 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: better recovery if memory softlimit is hit Tue Dec 14 10:46:44 GMT 2004 (njh) ---------------------------------- * clamav-milter: Fix crash on BSD if DNS is incorrectly setup Single thread access to the Version strings Tue Dec 14 10:30:15 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: better recovery if memory softlimit is hit Mon Dec 13 11:21:28 GMT 2004 (njh) ---------------------------------- * clamav-milter: INSTALL: Added notes about FreeBSD5 On Linux store the -ve process group in the pid file to ensure that all threads are sent signals Support the temporary and quarantine directories being on different filesystems Sun Dec 12 20:34:03 GMT 2004 (njh) ---------------------------------- * contrib/init/FreeBSD5: Added startup and shutdown scripts for FreeBSD5 Sun Dec 12 19:40:10 UTC 2004 (acab) ----------------------------------- * libclamav: upx: improved PE rebuild - debug info on failure Fri Dec 10 15:21:48 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Warn if the content-type contains a blank entry e.g. "Content-Type: text/html /" Wed Dec 8 01:12:12 CET 2004 (tk) --------------------------------- * docs/MacOSX: update (Dale Enterprise L.L.C) Tue Dec 7 23:10:36 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Handle empty content-type in multipart headers, e.g. Content-Type: ; name="/tmp/foo/bar.txt" Tue Dec 7 23:40:30 CET 2004 (tk) --------------------------------- * configure: added --disable-zlib-vcheck (allows building on potentially buggy zlib versions (1.2.0 & 1.2.1)) Tue Dec 7 19:25:06 GMT 2004 (njh) ---------------------------------- * clamav-milter: Ensure that the daily quarantine directory is created Tue Dec 7 02:48:08 CET 2004 (tk) --------------------------------- * clamd: added support for file descriptor passing (patch by Richard Lyons <frob-clamav*webcentral.com.au>) Mon Dec 6 22:33:26 GMT 2004 (njh) ---------------------------------- * clamav-milter: Ensure the date is kept in the quarantine path Sun Dec 5 15:00:35 GMT 2004 (njh) ---------------------------------- * clamav-milter: Fix array overrun on startup Sat Dec 4 23:34:54 GMT 2004 (njh) ---------------------------------- * clamav-milter: Fix possible mishandling of multiple children when searching for a free server Sat Dec 4 17:04:40 GMT 2004 (njh) ---------------------------------- * libclamav/blob.c: Fixed filename handling in MACOS/X Sat Dec 4 15:52:08 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Handle text/rfc822-headers incorrectly sent as message/rfc822-headers Fri Dec 3 17:36:08 GMT 2004 (njh) ---------------------------------- * clamav-milter: internal: Honour scanning modes and archive limits Fri Dec 3 03:32:17 CET 2004 (tk) --------------------------------- * libclamav: attempt to rebuild PE structure from UPX compressed files (code from aCaB) Thu Dec 2 11:10:31 GMT 2004 (njh) ---------------------------------- * clamav-milter: --internal now notices when the database has been updated Wed Dec 1 22:29:33 GMT 2004 (njh) ---------------------------------- * clamav-milter: Added --internal flag (some functionality to do) SESSIONS: Don't hang when StreamMaxLength is hit Wed Dec 1 21:05:07 CET 2004 (tk) --------------------------------- * libclamav/scanners.c: improved recursion limits (thanks to Maxim Dounin) Wed Dec 1 13:14:33 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Decode text/plain parts marked as being encoded, reported by Trog Wed Dec 1 12:14:46 GMT 2004 (njh) ---------------------------------- * libeclamav/message.c: Part of rule 3 of paragraph 5.1 of RFC1521 was not being implemented, which meant that quoted-printable attachments with spaces before the '=' character at the end of soft breakon lines where not being correctly decoded Tue Nov 30 16:47:54 CET 2004 (tk) --------------------------------- * improved support for BSDI BSD/OS (access to test environment provided by David Wu <dyw*iohk.com>) Tue Nov 30 12:06:12 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Better handling for unbalanced quotes in headers, e.g. name="foo.doc Mon Nov 29 13:25:25 GMT 2004 (njh) ---------------------------------- * libclamav/blob.c: Fix potential crash if a temporary file can't be created * libclamav/mbox.c: Disable the old continuation marker detection scheme Mon Nov 29 00:23:55 CET 2004 (tk) --------------------------------- * clamdscan: add support for --move and --remove options Sun Nov 28 21:08:44 GMT 2004 (njh) ---------------------------------- * libclamav: Email headers of only white space are no longer treated as the end of the headers Sun Nov 28 16:30:18 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Allow lower case hex in quoted-printable messages Sat Nov 27 21:55:45 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Changed some more strtok to cli_strtok Sat Nov 27 19:53:33 CET 2004 (tk) --------------------------------- * libclamav/scanners.c: cli_scanrar: skip splitted files (patch by Andrey J. Melnikoff (TEMHOTA) <temnota*kmv.ru>) Sat Nov 27 14:40:55 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Honour section 7.2.6 of RFC1521 Sat Nov 27 13:18:42 GMT 2004 (njh) ---------------------------------- * libclamav: Assume x-uue is the same as x-uuencode If uudecoding fails and other possibilities have been registered, don't take the failure as fatal, also try the other decoding methods Sat Nov 27 12:01:03 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Handle RFC822 comments in the commands, e.g.: Co(foo)ntent-Type: text/plain Fri Nov 26 23:00:42 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Scan binHexes after the final MIME section Handle spaces incorrectly added to the final MIME section marker Fri Nov 26 21:53:03 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Scan uuencodes after the final MIME section Fri Nov 26 22:01:58 CET 2004 (tk) --------------------------------- * libclamav/scanners.c: cli_scanzip: apply cosmetic patch from Andrey J. Melnikoff (TEMHOTA) <temnota*kmv.ru> Fri Nov 26 21:07:19 CET 2004 (tk) --------------------------------- * libclamav/pe.c: do not trigger a warning on IMAGE_SUBSYSTEM_UNKNOWN Thu Nov 25 18:38:06 CET 2004 (tk) --------------------------------- * clamd: new directives StreamMinPort and StreamMaxPort (allow port range specification for stream mode). Patch by Alexander Marx <mad-ml*madness.at>) Tue Nov 23 23:23:45 CET 2004 (tk) --------------------------------- * clamscan: --move: preserve original access and modification times (requested by Tomasz Papszun); optimise Tue Nov 23 09:06:45 GMT 2004 (njh) ---------------------------------- * libclamav/binhex.c: Fix crash in base64 encoded binhex files reported by Stefan Kaltenbrunner <stefan*kaltenbrunner.cc> Mon Nov 22 15:20:07 GMT 2004 (njh) ---------------------------------- * libclamav: General performance enhancements Sat Nov 20 23:04:59 GMT 2004 (njh) ---------------------------------- * clamav-milter: Better parsing of clamd's reply Sat Nov 20 13:18:58 GMT 2004 (njh) ---------------------------------- * libclamav/untar.c: Better handling of false file type identification Fri Nov 19 11:34:56 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Scan email footers (portions after the last MIME boundary) Thu Nov 18 20:28:13 CET 2004 (tk) --------------------------------- * libclamav: add support for Mac's HQX file format (patch by Nigel) Thu Nov 18 11:03:14 CET 2004 (tk) --------------------------------- * libclamav: try to detect (and mark as Suspected.Zip) zip archives with modified information in local header Thu Nov 18 00:05:37 CET 2004 (tk) --------------------------------- * libclamav/pe.c: recognize more subsystem/machine types Wed Nov 17 17:35:26 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Scan some more bounce messages Tue Nov 16 18:24:06 CET 2004 (tk) --------------------------------- * libclamav/filetypes.c: add new mail detection rule Tue Nov 16 18:07:39 CET 2004 (tk) --------------------------------- * libclamav: improve generating of temporary file names (as requested by Boguslaw Brandys and Nigel) Tue Nov 16 16:58:12 CET 2004 (tk) --------------------------------- * freshclam/manager.c: get_database: terminate buffer after recv() call (thanks to Nigel) Tue Nov 16 16:15:38 CET 2004 (tk) --------------------------------- * clamscan/manager.c: fix duplicate reporting of failure to open some archive types (patch by Robert Hogan <robert*roberthogan.net>) Mon Nov 15 23:55:50 CET 2004 (tk) --------------------------------- * libclamav/scanners.c: mscab: pass duplicated descriptor to cabd->dsearch() Sun Nov 14 15:23:02 GMT 2004 (njh) ---------------------------------- * clamav-milter: Use SCAN in more places in preference to STREAM Sat Nov 13 17:14:17 CET 2004 (tk) --------------------------------- * freshclam: better handling of connection errors (thanks to Simon Munton <simon*munton.demon.co.uk>) Sat Nov 13 17:00:28 CET 2004 (tk) --------------------------------- * configure: do not add needless -I/usr/include Sat Nov 13 15:45:38 CET 2004 (tk) --------------------------------- * libclamav, clamd: readdir_r code: fix compilation error on systems that don't define NAME_MAX Sat Nov 13 14:26:21 CET 2004 (tk) --------------------------------- * docs/MacOSX: update (Dale Enterprise L.L.C) Fri Nov 12 16:50:52 GMT 2004 (njh) ---------------------------------- * clamav-milter: When communicating to clamd via localSocket don't use a second socket for the data Fri Nov 12 15:31:15 GMT 2004 (trog) ----------------------------------- * libclamav/vba_extract.c: fix possible infinite loop Fri Nov 12 09:44:23 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Draft of RFC1341 support is now on by default. Fragments arriving out of order are not scanned (yet). If you use clamav-milter to load balance clamd across servers you will need to ensure that the partial directory is on a shared directory (e.g. NFS) Fri Nov 12 09:05:15 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Parse some malformed binhex files Thu Nov 11 22:17:31 GMT 2004 (njh) ---------------------------------- * libclamav: Rewrote the parsing of headers to improve folded lines Wed Nov 10 10:12:18 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Fix escaped parenthesis in rfc822 comments Tue Nov 9 19:43:38 GMT 2004 (njh) ---------------------------------- * libclamav: Scan uuencoded files in preambles to multipart messages Tue Nov 9 12:25:20 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Better handling of mail-follow-urls when CURL is not installed Tue Nov 9 10:10:07 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Basic handling for unbalanced quotes in the main message Tue Nov 9 08:53:24 CET 2004 (tk) --------------------------------- * clamscan, clamd: increase value of maximal recursion limit (current: 8, was: 5) Mon Nov 8 20:37:41 GMT 2004 (njh) ---------------------------------- * clamav-milter: Don't start the clamd watchdog when in localSocket mode Mon Nov 8 16:29:13 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Fix crash with incorrectly encoded uuencode files Mon Nov 8 15:24:18 CET 2004 (tk) --------------------------------- * clamd: new directive ExitOnOOM (stop deamon when libclamav reports out of memory condition) Mon Nov 8 11:32:11 CET 2004 (tk) --------------------------------- * clamd/server-th.c: SIGHUP: also re-open log file closed due to exceeded file size Mon Nov 8 10:29:02 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Fix crash if the guessed encoder is incorrectly thought to be yEnc Mon Nov 8 10:28:41 CET 2004 (tk) --------------------------------- * clamd: force SHUTDOWN on memory errors from libclamav Mon Nov 8 10:01:48 CET 2004 (tk) --------------------------------- * libclamav/scanners.c: handle error conditions of cli_scandesc() Sun Nov 7 16:42:10 GMT 2004 (njh) ---------------------------------- * libclamav/message.c: Handle paragraph 4 of RFC2231 Sat Nov 6 21:45:21 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Fix possible crash when handling illegal RFC2047 header Fri Nov 5 18:09:24 CET 2004 (tk) --------------------------------- * docs/MacOSX: update (Dale Enterprise L.L.C) Fri Nov 5 13:08:24 CET 2004 (tk) --------------------------------- * configure: improve zlib test Fri Nov 5 11:04:45 CET 2004 (tk) --------------------------------- * freshclam: add support for AllowSupplementaryGroups (patch by Ales Casar <casar*uni-mb.si>) Fri Nov 5 09:44:43 CET 2004 (tk) --------------------------------- * add UPGRADE file Fri Nov 5 09:09:58 CET 2004 (tk) --------------------------------- * docs: better description of ArchiveBlockMax Thu Nov 4 21:47:14 CET 2004 (tk) --------------------------------- * libclamav/snprintf.c: fix compilation error (patch by Nigel) Thu Nov 4 10:14:57 GMT 2004 (njh) ---------------------------------- * libclamav/mbox.c: Applied readdir_r patch from TK Thu Nov 4 08:24:21 GMT 2004 (njh) ---------------------------------- * libclamav/clamav-milter: Fix segfault on startup in LocalSocket mode in SESSION mode Wed Nov 3 12:47:41 GMT 2004 (njh) ---------------------------------- * libclamav/clamav-milter: Save the original subject as X-Original-Subject when running in advisory or qurantine mode SESSION mode: warn when no clamd can be reached Wed Nov 3 12:50:19 CET 2004 (tk) --------------------------------- * docs/MacOSX: update (Dale Enterprise L.L.C) Tue Nov 2 13:26:01 CET 2004 (tk) --------------------------------- * libclamav/clamav.h: fix bad alias of CL_ENCRYPTED (thanks to Jan ONDREJ (SAL) <ondrejj*salstar.sk>) Tue Nov 2 05:12:45 CET 2004 (tk) --------------------------------- * docs/MacOSX: update (Dale Enterprise L.L.C) Tue Nov 2 04:58:43 CET 2004 (tk) --------------------------------- * libclamav, clamd: readdir_r code: provide additional space (for at least NAME_MAX + 1 characters) in the d_name array on systems that don't define the d_name element sufficiently long (thanks to Andy Fiddaman <clam*fiddaman.net> for a pointer) Sun Oct 31 09:31:06 GMT 2004 (njh) ---------------------------------- * libclamav: Improve the handling of blank filenames for attachments Handle unbalanced quotes in multipart headers Sat Oct 30 07:50:33 BST 2004 (njh) ---------------------------------- * clamav-milter: Fix possible crash when one or more servers can't be contacted Fri Oct 29 19:11:07 BST 2004 (njh) ---------------------------------- * clamav-milter: Fix problem with deleting X-VIRUS-STATUS not setting correct libmilter settings Fri Oct 29 02:19:48 CEST 2004 (tk) ---------------------------------- * clamdscan: update manual page and fix return code for "unknown option" error Thu Oct 28 09:14:22 BST 2004 (njh) ---------------------------------- * libclamav/strrcpy.c: Ensure that assert is only used if --enable-debug is given to configure Wed Oct 27 13:36:14 BST 2004 (njh) ---------------------------------- * clamav-milter: Remove X-VIRUS-STATUS on incoming messages Plug remote possibility of file descriptor leak Return EX_OSERR if fork fails, not EX_TEMPFAIL If clamav-milter points to more than one server, ensure that the version information for that server is added to the header Update version information in the watchdog. There may therefore be a delay between the server updating and this being reflected in the headers Wed Oct 27 09:30:47 BST 2004 (trog) ----------------------------------- * libclamav/htmlnorm.c: extract more HTML references from use with FOLLOWURL Wed Oct 27 07:36:49 BST 2004 (njh) ---------------------------------- * libclamav/untar.c: Handle links to another file already archived, patch by "Roger Lucas" <roger*planbit.co.uk> Sun Oct 24 05:36:39 BST 2004 (njh) ---------------------------------- * libclamav/mbox.c: Handle multipart/knowbot as multipart/mixed until syntax documention can be found for this format Sun Oct 24 04:52:01 BST 2004 (njh) ---------------------------------- * libclamav/message.c: Change encoding guess message from warn to debug * clamav-milter: Validate the length of the server hostnames Generate a more useful message than libmilter's bind failure message when the two sockets are the same named pipe SESSION code now on by default Use cli_strtokbuf() instead of cli_strtok() whereever possible Fri Oct 22 18:20:03 BST 2004 (njh) ---------------------------------- * libclamav/message.c: Handle broken messages which state Content-Transfer-Encoding: us-ascii reported by arny*arny.ro Fri Oct 22 16:57:13 BST 2004 (njh) ---------------------------------- * libclamav/message.c: If an unknown encoding type is found take a best guess for the decoder. If none can be guessed invoke all decoders Thu Oct 21 11:14:35 BST 2004 (njh) ---------------------------------- * libclamav/mbox.c: PARTIAL MODE: Extend yesterday's Solaris fix to BeOS Wed Oct 20 23:51:46 CEST 2004 (tk) ---------------------------------- * clamd, clamscan: do not initialise procdev when /proc is not mounted (thanks to Andrey J. Melnikoff (TEMHOTA) <temnota*kmv.ru>) Wed Oct 20 22:37:24 CEST 2004 (tk) ---------------------------------- * shared/misc.c: print version information to stdin instead of stderr (reported by spaze <spaze*exploited.cz>) Wed Oct 20 22:31:10 CEST 2004 (tk) ---------------------------------- * docs/MacOSX: update (Dale Enterprise L.L.C) Wed Oct 20 22:16:58 CEST 2004 (tk) ---------------------------------- * libclamav, clamd: fix possible stack corruption under Solaris (only when compiled with --enable-readdir_r). Thanks to Andy Fiddaman <clam*fiddaman.net>. Wed Oct 20 21:00:37 CEST 2004 (tk) ---------------------------------- * clamdscan: fix error messages (problem reported by Jason Haar <Jason.Haar*trimble.co.nz>) Wed Oct 20 13:23:33 BST 2004 (njh) ---------------------------------- * libclamav/untar.c: Print warning message about unsopported (yet) formats Wed Oct 20 11:37:40 BST 2004 (njh) ---------------------------------- * libclamav/mbox.c: PARTIAL MODE ONLY: fixed possible stack corruption under Solaris, patch from Andy Fiddaman <clam*fiddaman.net> Tue Oct 19 14:56:27 BST 2004 (njh) ---------------------------------- * libclamav/message.c: Some base64 encoders encode extra NUL bytes at the end - ensure that they aren't added when decoding, reported by James Lick <jlick*drivel.com> Tue Oct 19 02:53:46 CEST 2004 (tk) ---------------------------------- * libclamav/matcher.c: fix signature target type validation for data files of unknown type