ClamAV® blog: ClamAV 0.99 .2 has been released!

"Joel Esler (jesler)" <[email protected]> Tue, 3 May 2016 17:51:29 +0000
Newsgroups gmane.comp.security.virus.clamav.announce
Message-ID <D2E0B926-F568-43F6-AEF7-7047BDAE7CCB__20864.4653008834$1462298111$gmane$org@cisco.com>
--===============7084476542003295533==
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_D2E0B926F56843F6AEF77047BDAE7CCBciscocom_"

--_000_D2E0B926F56843F6AEF77047BDAE7CCBciscocom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html

ClamAV 0.99.2 has been released!
ClamAV 0.99.2 has been released, and is available for download at ClamAV.ne=
t's download<http://www.clamav.net/downloads> site.

Note:  As previously discussed for the last three releases, we are no longe=
r uploading ClamAV to SourceForge for release.  0.99.2 is the first release=
 that is ONLY released on ClamAV.net<http://clamav.net>

Below are the notes from the ChangeLog since 0.99.1:

Thu, 22 Apr 2016 12:45:00 -0500 (Steven Morgan)
------------------------------------------
 * ClamAV 0.99.2 release.

Thu, 31 Mar 2016 17:07:39 -0400 (Kevin Lin)
------------------------------------------
 * 7z: fix for FolderStartPackStreamIndex array index heck

Tue, 29 Mar 2016 16:18:51 -0400 (Steven Morgan)
------------------------------------------
 * bb11547 - print all CDBNAME entries for a zip file when using the
-z flag.

Tue, 2 Sep 2014 22:44:41 +0200 (Sebastian Andrzej Siewior)
------------------------------------------
 * try to minimize the err cleanup path

Tue, 2 Sep 2014 22:44:14 +0200 (Sebastian Andrzej Siewior)
------------------------------------------
 * clamunrar: notice if unpacking comment failed

Wed, 23 Mar 2016 16:39:52 -0400 (Steven Morgan)
------------------------------------------
 * bb9042 - signature manual update.

Wed, 23 Mar 2016 16:14:42 -0400 (Kevin Lin)
------------------------------------------
 * bb#11396 - use temp var for realloc to prevent pointer loss. Patch by
Bill Parker.

Wed, 23 Mar 2016 15:49:56 -0400 (Kevin Lin)
------------------------------------------
 * bb#11397 - fix debug VI hex truncation

Wed, 23 Mar 2016 15:38:21 -0400 (Kevin Lin)
------------------------------------------
 * bb#11398 - freshclam: avoid random data in mirrors.dat. Patch by
Tomasz Kojm.

Wed, 23 Mar 2016 15:28:51 -0400 (Kevin Lin)
------------------------------------------
 * libclamav: print raw certificate metadata

Wed, 23 Mar 2016 14:16:00 -0400 (Kevin Lin)
------------------------------------------
 * bb#11529 - freshclam manager check return code of strdup. Patch by
Sebastian A. Siewior.

Tue, 22 Mar 2016 16:21:59 -0400 (Kevin Lin)
------------------------------------------
 * bb#11261 - additional suppress IP notification when using proxy

Tue, 22 Mar 2016 12:54:52 -0400 (Kevin Lin)
------------------------------------------
 * bb#10983 - fix download and verification of *.cld through PrivateMirrors

Mon, 21 Mar 2016 11:21:08 -0400 (Kevin Lin)
------------------------------------------
 * bb#11261 - suppress IP notification when using proxy

Mon, 21 Mar 2016 11:20:01 -0400 (Kevin Lin)
------------------------------------------
 * bb#11543 - remove redundant mempool assignment

Thu, 17 Mar 2016 11:49:26 -0400 (Kevin Lin)
------------------------------------------
 * bb#11003 - divide out dumpcerts output for better readability

Wed, 16 Mar 2016 15:42:35 -0400 (Kevin Lin)
------------------------------------------
 * bb#11003 - fix dconf and option handling for nocert and dumpcert

Mon, 14 Mar 2016 16:07:45 -0400 (Mickey Sola)
------------------------------------------
 * bb11463 - patch by Jim Morris to increase clamd's soft file descriptor t=
o
its potential maximum on 64-bit systems

Mon, 14 Mar 2016 17:12:20 -0400 (Steven Morgan)
------------------------------------------
 * Move libfreshclam config to m4/reorganization.

Fri, 11 Mar 2016 13:32:31 -0700 (andrey mirtchovski)
------------------------------------------
 * adding libfreshclam

Sun, 13 Mar 2016 23:27:23 -0400 (Tom Judge)
------------------------------------------
 * Add 'cdb' datafile to sigtools list of datafile types.

Fri, 11 Mar 2016 16:02:22 -0500 (Steven Morgan)
------------------------------------------
 * bb11526 - NULL pointer check. Patch by Bill Parker.

Fri, 11 Mar 2016 15:48:01 -0500 (Steven Morgan)
------------------------------------------
 * bb11524 - malloc() NULL pointer check. Patch by Bill Parker.

Thu, 10 Mar 2016 18:26:33 -0500 (Steven Morgan)
------------------------------------------
 * bb1436 - clamscan 'block-macros' option. Patch by Kai Risku.

Wed, 9 Mar 2016 17:07:06 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - initialize cpio name buffer

Wed, 9 Mar 2016 16:43:03 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - initialize mspack decompression buffers

Wed, 9 Mar 2016 12:15:16 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - prevent memory allocations on used pointers (folder objects)

Tue, 8 Mar 2016 16:04:21 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - prevent memory allocations on used pointers (boolvectors)

Tue, 8 Mar 2016 14:37:20 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - initialize ARJ metadata structures

Tue, 8 Mar 2016 14:37:01 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - change cli_malloc with cli_calloc

Mon, 7 Mar 2016 16:25:10 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - check packSizes prior to dereference

Mon, 7 Mar 2016 16:10:09 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - fixed inconsistent folder state on failure

Mon, 7 Mar 2016 15:11:08 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - pre-check on (*unpackSizes) dereference

Mon, 7 Mar 2016 13:56:42 -0500 (Kevin Lin)
------------------------------------------
 * bb11514 - fix on pre-checks on dereferenced array

Fri, 4 Mar 2016 16:57:14 -0500 (Kevin Lin)
------------------------------------------
 * bb11514 - pre-checks on dereferenced array size values (not =3D0)

Wed, 2 Mar 2016 13:57:03 -0500 (Mickey Sola)
------------------------------------------
 * bb-11514 - adding sanity checks to 7z header parsing

Tue, 1 Mar 2016 12:43:01 -0500 (Kevin Lin)
------------------------------------------
 * bb#11514 - fixed mew source read issue

Fri, 4 Mar 2016 17:05:01 -0500 (Steven Morgan)
------------------------------------------
 * bb11188 - Upgrade to use libtool 2.4.6 for ClamAV building: fixes issues
with MacOSX 10.10 and 10.11.

Tue, 1 Mar 2016 12:34:48 -0500 (Kevin Lin)
------------------------------------------
 * bb#11513 - documentation update on targets

Mon, 29 Feb 2016 16:58:19 -0500 (Kevin Lin)
------------------------------------------
 * filetype consistency

Mon, 29 Feb 2016 11:34:25 -0500 (Kevin Lin)
------------------------------------------
 * move llvm option flag handling to new m4 file

Wed, 24 Feb 2016 13:29:42 -0500 (Kevin Lin)
------------------------------------------
 * hwp5.x: fix for streams without names

Please go and grab the newest ClamAV and begin your download cycles, as alw=
ays, we encourage bug submissions at https://bugzilla.clamav.net and your f=
eedback on the ClamAV lists<http://www.clamav.net/contact>.




--
Joel Esler
Manager, Talos Group





--_000_D2E0B926F56843F6AEF77047BDAE7CCBciscocom_
Content-Type: text/html; charset="iso-8859-1"
Content-ID: <[email protected]>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<base>
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space;" class=3D"">
<base class=3D"">
<div class=3D"Apple-Mail-URLShareUserContentTopClass"><br class=3D"">
</div>
<div class=3D"Apple-Mail-URLShareWrapperClass" style=3D"position: relative =
!important;">
<blockquote type=3D"cite" style=3D"border-left-style: none; color: inherit;=
 padding: inherit; margin: inherit;" class=3D"">
<div class=3D"">
<div class=3D"original-url"><a href=3D"http://blog.clamav.net/2016/05/clama=
v-0992-has-been-released.html" class=3D"">http://blog.clamav.net/2016/05/cl=
amav-0992-has-been-released.html</a><br class=3D"">
<br class=3D"">
</div>
<div id=3D"article" role=3D"article" style=3D"-webkit-locale: en; border-bo=
ttom-width: 0px;" class=3D"">
<!-- This node will contain a number of div.page. -->
<div class=3D"page">
<h1 class=3D"title">ClamAV 0.99.2 has been released!</h1>
<div id=3D"safari-reader-element-marker" style=3D"position: relative; top: =
3%;" class=3D"">
</div>
ClamAV 0.99.2 has been released, and is available for download at <a href=
=3D"http://www.clamav.net/downloads" target=3D"_blank" class=3D"">
ClamAV.net's download</a> site. <br class=3D"">
<br class=3D"">
<b class=3D"">Note: &nbsp;As previously discussed for the last three releas=
es, we are no longer uploading ClamAV to&nbsp;SourceForge for release. &nbs=
p;0.99.2 is the first release that is ONLY released on
<a href=3D"http://clamav.net" class=3D"">ClamAV.net</a></b><br class=3D"">
<b class=3D""><br class=3D"">
</b>Below are the notes from the ChangeLog since 0.99.1:<br class=3D"">
<br class=3D"">
Thu, 22 Apr 2016 12:45:00 -0500 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* ClamAV 0.99.2 release.<br class=3D"">
<br class=3D"">
Thu, 31 Mar 2016 17:07:39 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* 7z: fix for FolderStartPackStreamIndex array index heck<br class=3D=
"">
<br class=3D"">
Tue, 29 Mar 2016 16:18:51 -0400 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb11547 - print all CDBNAME entries for a zip file when using the<b=
r class=3D"">
-z flag.<br class=3D"">
<br class=3D"">
Tue, 2 Sep 2014 22:44:41 &#43;0200 (Sebastian Andrzej Siewior)<br class=3D"=
">
------------------------------------------<br class=3D"">
&nbsp;* try to minimize the err cleanup path<br class=3D"">
<br class=3D"">
Tue, 2 Sep 2014 22:44:14 &#43;0200 (Sebastian Andrzej Siewior)<br class=3D"=
">
------------------------------------------<br class=3D"">
&nbsp;* clamunrar: notice if unpacking comment failed<br class=3D"">
<br class=3D"">
Wed, 23 Mar 2016 16:39:52 -0400 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb9042 - signature manual update.<br class=3D"">
<br class=3D"">
Wed, 23 Mar 2016 16:14:42 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11396 - use temp var for realloc to prevent pointer loss. Patch =
by<br class=3D"">
Bill Parker.<br class=3D"">
<br class=3D"">
Wed, 23 Mar 2016 15:49:56 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11397 - fix debug VI hex truncation<br class=3D"">
<br class=3D"">
Wed, 23 Mar 2016 15:38:21 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11398 - freshclam: avoid random data in mirrors.dat. Patch by<br=
 class=3D"">
Tomasz Kojm.<br class=3D"">
<br class=3D"">
Wed, 23 Mar 2016 15:28:51 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* libclamav: print raw certificate metadata<br class=3D"">
<br class=3D"">
Wed, 23 Mar 2016 14:16:00 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11529 - freshclam manager check return code of strdup. Patch by<=
br class=3D"">
Sebastian A. Siewior.<br class=3D"">
<br class=3D"">
Tue, 22 Mar 2016 16:21:59 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11261 - additional suppress IP notification when using proxy<br =
class=3D"">
<br class=3D"">
Tue, 22 Mar 2016 12:54:52 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#10983 - fix download and verification of *.cld through PrivateMi=
rrors<br class=3D"">
<br class=3D"">
Mon, 21 Mar 2016 11:21:08 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11261 - suppress IP notification when using proxy<br class=3D"">
<br class=3D"">
Mon, 21 Mar 2016 11:20:01 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11543 - remove redundant mempool assignment<br class=3D"">
<br class=3D"">
Thu, 17 Mar 2016 11:49:26 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11003 - divide out dumpcerts output for better readability<br cl=
ass=3D"">
<br class=3D"">
Wed, 16 Mar 2016 15:42:35 -0400 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11003 - fix dconf and option handling for nocert and dumpcert<br=
 class=3D"">
<br class=3D"">
Mon, 14 Mar 2016 16:07:45 -0400 (Mickey Sola)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb11463 - patch by Jim Morris to increase clamd's soft file descrip=
tor to<br class=3D"">
its potential maximum on 64-bit systems<br class=3D"">
<br class=3D"">
Mon, 14 Mar 2016 17:12:20 -0400 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* Move libfreshclam config to m4/reorganization.<br class=3D"">
<br class=3D"">
Fri, 11 Mar 2016 13:32:31 -0700 (andrey mirtchovski)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* adding libfreshclam<br class=3D"">
<br class=3D"">
Sun, 13 Mar 2016 23:27:23 -0400 (Tom Judge)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* Add 'cdb' datafile to sigtools list of datafile types.<br class=3D"=
">
<br class=3D"">
Fri, 11 Mar 2016 16:02:22 -0500 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb11526 - NULL pointer check. Patch by Bill Parker.<br class=3D"">
<br class=3D"">
Fri, 11 Mar 2016 15:48:01 -0500 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb11524 - malloc() NULL pointer check. Patch by Bill Parker.<br cla=
ss=3D"">
<br class=3D"">
Thu, 10 Mar 2016 18:26:33 -0500 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb1436 - clamscan 'block-macros' option. Patch by Kai Risku.<br cla=
ss=3D"">
<br class=3D"">
Wed, 9 Mar 2016 17:07:06 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - initialize cpio name buffer<br class=3D"">
<br class=3D"">
Wed, 9 Mar 2016 16:43:03 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - initialize mspack decompression buffers<br class=3D"">
<br class=3D"">
Wed, 9 Mar 2016 12:15:16 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - prevent memory allocations on used pointers (folder obje=
cts)<br class=3D"">
<br class=3D"">
Tue, 8 Mar 2016 16:04:21 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - prevent memory allocations on used pointers (boolvectors=
)<br class=3D"">
<br class=3D"">
Tue, 8 Mar 2016 14:37:20 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - initialize ARJ metadata structures<br class=3D"">
<br class=3D"">
Tue, 8 Mar 2016 14:37:01 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - change cli_malloc with cli_calloc<br class=3D"">
<br class=3D"">
Mon, 7 Mar 2016 16:25:10 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - check packSizes prior to dereference<br class=3D"">
<br class=3D"">
Mon, 7 Mar 2016 16:10:09 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - fixed inconsistent folder state on failure<br class=3D""=
>
<br class=3D"">
Mon, 7 Mar 2016 15:11:08 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - pre-check on (*unpackSizes) dereference<br class=3D"">
<br class=3D"">
Mon, 7 Mar 2016 13:56:42 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb11514 - fix on pre-checks on dereferenced array<br class=3D"">
<br class=3D"">
Fri, 4 Mar 2016 16:57:14 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb11514 - pre-checks on dereferenced array size values (not =3D0)<b=
r class=3D"">
<br class=3D"">
Wed, 2 Mar 2016 13:57:03 -0500 (Mickey Sola)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb-11514 - adding sanity checks to 7z header parsing<br class=3D"">
<br class=3D"">
Tue, 1 Mar 2016 12:43:01 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11514 - fixed mew source read issue<br class=3D"">
<br class=3D"">
Fri, 4 Mar 2016 17:05:01 -0500 (Steven Morgan)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb11188 - Upgrade to use libtool 2.4.6 for ClamAV building: fixes i=
ssues<br class=3D"">
with MacOSX 10.10 and 10.11.<br class=3D"">
<br class=3D"">
Tue, 1 Mar 2016 12:34:48 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* bb#11513 - documentation update on targets<br class=3D"">
<br class=3D"">
Mon, 29 Feb 2016 16:58:19 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* filetype consistency<br class=3D"">
<br class=3D"">
Mon, 29 Feb 2016 11:34:25 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* move llvm option flag handling to new m4 file<br class=3D"">
<br class=3D"">
Wed, 24 Feb 2016 13:29:42 -0500 (Kevin Lin)<br class=3D"">
------------------------------------------<br class=3D"">
&nbsp;* hwp5.x: fix for streams without names<br class=3D"">
<br class=3D"">
Please go and grab the newest ClamAV and begin your download cycles, as alw=
ays, we encourage bug submissions at
<a href=3D"https://bugzilla.clamav.net" class=3D"">https://bugzilla.clamav.=
net</a> and your feedback on the
<a href=3D"http://www.clamav.net/contact" target=3D"_blank" class=3D"">Clam=
AV lists</a>.<br class=3D"">
<br class=3D"">
<br class=3D"">
</div>
</div>
</div>
</blockquote>
</div>
<br class=3D"">
<br class=3D"">
<div class=3D"">
<div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; t=
ext-align: start; text-indent: 0px; text-transform: none; white-space: norm=
al; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-w=
rap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-=
space;" class=3D"">
<div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; t=
ext-align: start; text-indent: 0px; text-transform: none; white-space: norm=
al; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-w=
rap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-=
space;" class=3D"">
<div style=3D"margin: 0px; line-height: normal; font-family: 'Lucida Grande=
';" class=3D"">
--</div>
<div style=3D"margin: 0px; line-height: normal; font-family: 'Lucida Grande=
';" class=3D"">
<b class=3D"">Joel Esler</b></div>
<div style=3D"margin: 0px; line-height: normal; font-family: 'Lucida Grande=
';" class=3D"">
Manager, Talos Group</div>
<div style=3D"margin: 0px; line-height: normal; font-family: 'Helvetica Neu=
e';" class=3D"">
<br class=3D"">
</div>
</div>
</div>
<br class=3D"Apple-interchange-newline">
<br class=3D"Apple-interchange-newline">
</div>
<br class=3D"">
</body>
</html>

--_000_D2E0B926F56843F6AEF77047BDAE7CCBciscocom_--

--===============7084476542003295533==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce
http://www.clamav.net/contact.html#ml
--===============7084476542003295533==--