Anzeigen der neuesten Beiträge
0 Mitglieder und 1 Gast betrachten dieses Thema.
0.97.5 ------ ClamAV 0.97.5 addresses possible evasion cases in some archive formats (CVE-2012-1457, CVE-2012-1458, CVE-2012-1459). It also addresses stability issues in portions of the bytecode engine. This release is recommended for all users.
This maintenance release updates ClamAV scanning engine and provides the following improvements: Scanning code optimizations
--------------------------------- * Bug reported by Felix Groebert, Mateusz Jurczyk and Gynvael Coldwind of the Google Security Team.Mon Sep 6 12:32:00 EDT 2012 (dar)--------------------------------- * libclamav: bb#5751 - cl_scansis() may returan a file descriptor instead of a valid return codeMon Jul 2 10:40:50 EDT 2012 (dar)---------------------------------- * libclamav: bb#5252 - update #4, CL_EUNPACK and cachingFri Jun 29 14:43:43 EDT 2012 (dar)---------------------------------- * libclamav: bb#5252 - update #3, more return code tweaksTue Jun 26 12:23:44 EDT 2012 (dar)---------------------------------- * libclamav: bb#5252 - Limit exits on scanraw return codesFri Jun 22 16:58:21 EDT 2012 (dar)---------------------------------- * libclamav: bb#5325 - Quiet Minix warningMon Jun 18 17:51:49 EDT 2012 (dar)---------------------------------- * libclamav: bb#5252 - Update magic_scandesc filtering of scanraw return codesThu Jun 14 16:05:53 EDT 2012 (judge)---------------------------------- * win32: Add MSI projects.Wed Jun 13 12:00:55 EDT 2012 (olney)----------------------------------
This maintenance release updates ClamAV scanning engine and patches more security vulnerabilities.
ClamAV 0.98 includes many new features, across many different componentsof ClamAV. There are new scanning options, extensions to the libclamav API,support for additional filetypes, and internal upgrades. – Signature improvements: New signature targets have been added for PDF files, Flash files and Java class files. (NOTE: Java archive files (JAR) are not part of the Java target.) Hash signatures can now specify a ’*’ (wildcard) size if the size is unknown. Using wildcard size requires setting the minimum engine FLEVEL to avoid backwards compatibility issues. For more details read the ClamAV Signatures guide. – Scanning enhancements: New filetypes can be unpacked and scanned, including ISO9660, Flash, and self-extracting 7z files. PDF handling is now more robust and better handles encrypted PDF files. – Authenticode: ClamAV is now aware of the certificate chains when scanning signed PE files. When the database contains signatures for trusted root certificate authorities, the engine can whitelist PE files with a valid signature. The same database file can also include known compromised certificates to be rejected! This feature can also be disabled in clamd.conf (DisableCertCheck) or the command-line (nocerts). – New options: Several new options for clamscan and clamd have been added. For example, ClamAV can be set to print infected files and error files, and suppress printing OK results. This can be helpful when scanning large numbers of files. This new option is ”-o” for clamscan and “LogClean” for clamd. Check clamd.conf or the clamscan help message for specific details. – New callbacks added to the API: The libclamav API has additional hooks for developers to use when wrapping ClamAV scanning. These function types are prefixed with “clcb_” and allow developers to add logic at certain steps of the scanning process without directly modifying the library. For more details refer to the clamav.h file. – More configurable limits: Several hardcoded values are now configurable parameters, providing more options for tuning the engine to match your needs. Check clamd.conf or the clamscan help message for specific details. – Performance improvements: This release furthers the use of memory maps during scanning and unpacking, continuing the conversion started in prior releases. Complex math functions have been switched from libtommath to tomsfastmath functions. The A/C matcher code has also been optimized to provide a speed boost. – Support for on-access scanning using Clamuko/Dazuko has been replaced with fanotify. Accordingly, clamd.conf settings related to on-access scanning have had Clamuko removed from the name. Clamuko-specific configuration items have been marked deprecated and should no longer be used.There are also fixes for other minor issues and code quality changes. Pleasesee the ChangeLog file for details.
This release updates ClamAV scanning engine and brings a number of significant improvements: New virus signature targets enable detection of PDF, Flash, and Java class files. New filetypes supported in the scanner include ISO9660, Flash and 7-zip self-extracting archives. Performance and memory management improvements.
Autor
Thema: ClamWin/ClamAV ....... (Gelesen 14522 mal)
