File Release Notes and Changelog
Release Name: 0.88
Notes:
0.88
----
A possible heap overflow in the UPX code has been fixed. General improvements
include better zip and mail processing, and support for a self-protection mode.
The security of the UPX, FSG and Petite modules has been improved, too.
--
The ClamAV team (http://www.clamav.net/team.html)
Changes:
Mon Jan 9 18:26:21 CET 2006
----------------------------
V 0.88
* Changes:
- libclamav: add support for signature based self-protection mode (tk)
- libclamav/upx.c: fix possible heap overflow (acab)
Reported by 3Com's Zero Day Initiative
- libclamav/upx.c,fsg.c,petite.c: improve code security (acab)
- clamd, clamscan: try to detect library version mismatch (tk)
- libclamav/mbox.c: Multipart headers: handle end of header lines that are
not empty (njh)
- libclamav/zziplib/zzip-zip.c: fix pointer misalignment problem on sparc64
Thanks to Clint Adams <schizo*debian.org>
- clamd/others.h: fix compilation error on systems with INCOMPLETE_CMSG (tk)
Reported by Fukuda Manabu <fukuda*cri-mw.co.jp>
- libclamav/pe.c: respect CL_SCAN_BLOCKMAX (tk)
- libclamav/zziplib: improve handling of incorrectly created/handcrafted
zip archives. Test file provided by Christoph Cordes (tk)
- libclamav/zziplib: improve handling of multi-part/broken zip archives (tk)
Test files provided by Tomasz Papszun
- clamscan/treewalk.c: --exclude-dir was taking bad arguments when used
multiple times (tk)