ClamAV® blog: ClamAV 0.10 0.0-rc has been posted!
"Joel Esler (jesler)" <[email protected]> Thu, 22 Mar 2018 21:44:16 +0000
| Newsgroups | gmane.comp.security.virus.clamav.announce,gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <[email protected]> |
--===============0934398076750763376==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_1A7CC08B2CC64A02855EE932C5AD9EA9ciscocom_"
--_000_1A7CC08B2CC64A02855EE932C5AD9EA9ciscocom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://blog.clamav.net/2018/03/clamav-01000-rc-has-been-posted.html
ClamAV 0.100.0-rc has been posted!
ClamAV 0.100.0 is a feature release (candidate) which includes many code su=
bmissions from the ClamAV community. As always, it can be downloaded from =
our downloads site on clamav.net<http://www.clamav.net/downloads>. Some of =
the more prominent submissions include:
* Interfaces to the Prelude SIEM open source package for collecting Cl=
amAV virus events.
* Support for Visual Studio 2015 for Windows builds.
* Support libmspack internal code or as a shared object library. The i=
nternal library is the default and contains additional integrity checks.
* Linking with openssl 1.1.0.
* Deprecation of the AllowSupplementaryGroups parameter statement in c=
lamd, clamav-milter, and freshclam. Use of supplementary is now in effect b=
y default.
* Numerous bug fixes, typo corrections, and compiler warning fixes.
Additionally, we have introduced important changes and new features in Clam=
AV 0.100, including but not limited to:
* Deprecating internal LLVM code support. The configure script has chan=
ged to search the system for an installed instance of the LLVM development =
libraries, and to otherwise use the bytecode interpreter for ClamAV bytecod=
e signatures. To use the LLVM Just-In-Time compiler for executing bytecode =
signatures, please ensure that the LLVM development package at version 3.6 =
or lower is installed. Using the deprecated LLVM code is possible with the =
command: `./configure --with-system-llvm=3Dno`, but it no longer compiles o=
n all platforms.
* Compute and check PE import table hash (a.k.a. "imphash") signatures=
.
* Support file property collection and analysis for MHTML files.
* Raw scanning of PostScript files.
* Fix clamsubmit to use the new virus and false positive submission we=
b interface.
* Optionally, flag files with the virus "Heuristic.Limits.Exceeded" wh=
en size limitations are exceeded.
* Improved decoders for PDF files.
* Reduced number of compile time warnings.
* Improved support for C++11.
* Improved detection of system installed libraries.
* Fixes to ClamAV's Container system and the introduction of Intermedi=
ates for more descriptive signatures.
* Improvements to clamd's On-Access scanning capabilities for Linux.
Acknowledgements
The ClamAV team thanks the following individuals for their code submissions=
:
Andreas Schulze
Anthony Chan
Bill Parker
Chris Miserva
Daniel J. Luke
Georgy Salnikov
James Ralston
Jonas Zaddach
Keith Jones
Marc Deslauriers
Mark Allan
Matthew Boedicker
Michael Pelletier
Ningirsu
Sebastian Andrzej Siewior
Stephen Welker
Tuomo Soini
Known Issues
ClamAV has an active issue queue and enjoys continual improvement but as sa=
d as I am to say it, we couldn't address every bug in this release. I want=
to draw your attention a couple bugs in particular so as not to frustrate =
users setting up ClamAV:
* Platform: macOS:
* Bug: If you attempt to build ClamAV with a system installed LLVM =
you may receive a linker error. We recently changed default linking behavi=
or to prefer dynamic linking over static linking. As a result, we've uncov=
ered a bug in building on macOS where dynamic linking against the LLVM libr=
aries fails. To work around this bug, please add the --with-llvm-linking=
=3Dstatic option to your ./configure call.
* Platform: CentOS 6 32bit, older versions of AIX:
* Bug: On CentOS 6 32bit we observed that specific versions of zlib=
fail to correctly decompress the CVD signature databases. If you are on a=
n older system such as CentoOS 6 32bit and observe failures loading the sig=
nature database, please consider upgrading to a newer version of zlib.
* Platform: Miscellaneous
* Bug: When cross compiling on certain legacy systems (Solaris, AIX=
, OSX) against older system libraries that do not support strn functions li=
nking may fail during compile time. While automatic checking is done during=
configure time to check for unsupported libs, this problem can be manually=
avoided using the --enable-strni configure flag if it is encountered.
Please check out 0.100.0-rc and provide us feedback on the ClamAV Mailing l=
ists<http://www.clamav.net/contact#ml>. As always, a big thank you to the =
ClamAV Community!
--_000_1A7CC08B2CC64A02855EE932C5AD9EA9ciscocom_
Content-Type: text/html; charset="iso-8859-1"
Content-ID: <[email protected]>
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<base>
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; line-break:=
after-white-space;" class=3D"">
<base class=3D"">
<div class=3D"Apple-Mail-URLShareUserContentTopClass"><br class=3D"">
</div>
<div class=3D"Apple-Mail-URLShareWrapperClass">
<blockquote type=3D"cite" style=3D"border-left-style: none; color: inherit;=
padding: inherit; margin: inherit;" class=3D"">
<div class=3D"">
<div class=3D"original-url"><br class=3D"">
<a href=3D"http://blog.clamav.net/2018/03/clamav-01000-rc-has-been-posted.h=
tml" class=3D"">http://blog.clamav.net/2018/03/clamav-01000-rc-has-been-pos=
ted.html</a><br class=3D"">
<br class=3D"">
</div>
<div id=3D"article" role=3D"article" style=3D"text-rendering: optimizeLegib=
ility; font-family: Georgia; font-size: 1.2em; line-height: 1.5em; margin: =
0px; padding: 0px;" class=3D"georgia exported">
<!-- This node will contain a number of div.page. -->
<div class=3D"page" style=3D"word-wrap: break-word; max-width: 100%;">
<h1 class=3D"title" style=3D"font-size: 1.95552em; line-height: 1.2141em; m=
argin-top: 0px; margin-bottom: 0.5em; -webkit-hyphens: manual; max-width: 1=
00%;">
ClamAV 0.100.0-rc has been posted!</h1>
ClamAV 0.100.0 is a feature release (candidate) which includes many code su=
bmissions from the ClamAV community. As always, it can be downloaded =
from our
<a href=3D"http://www.clamav.net/downloads" target=3D"_blank" style=3D"colo=
r: rgb(65, 110, 210); max-width: 100%;" class=3D"">
downloads site on clamav.net</a>. Some of the more prominent submissions in=
clude:<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D""> Interfaces to the Prelude S=
IEM open source package for collecting ClamAV virus events.
</li><li style=3D"max-width: 100%;" class=3D""> Support for Visual Stu=
dio 2015 for Windows builds.
</li><li style=3D"max-width: 100%;" class=3D""> Support libmspack inte=
rnal code or as a shared object library. The internal library is the defaul=
t and contains additional integrity checks.
</li><li style=3D"max-width: 100%;" class=3D""> Linking with openssl 1=
.1.0. </li><li style=3D"max-width: 100%;" class=3D""> Deprecation of t=
he AllowSupplementaryGroups parameter statement in clamd, clamav-milter, an=
d freshclam. Use of supplementary is now in effect by default.
</li><li style=3D"max-width: 100%;" class=3D""> Numerous bug fixes, ty=
po corrections, and compiler warning fixes.
</li></ul>
<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
Additionally, we have introduced important changes and new features in Clam=
AV 0.100, including but not limited to:<br style=3D"max-width: 100%;" class=
=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Deprecating internal LLVM code su=
pport. The configure script has changed to search the system for an install=
ed instance of the LLVM development libraries, and to otherwise use the byt=
ecode interpreter for ClamAV bytecode
signatures. To use the LLVM Just-In-Time compiler for executing bytecode s=
ignatures, please ensure that the LLVM development package at version 3.6 o=
r lower is installed. Using the deprecated LLVM code is possible with the c=
ommand: `<code style=3D"max-width: 100%;" class=3D"">./configure
--with-system-llvm=3Dno</code>`, but it no longer compiles on all platform=
s. </li><li style=3D"max-width: 100%;" class=3D""> Compute and check P=
E import table hash (a.k.a. "imphash") signatures.
</li><li style=3D"max-width: 100%;" class=3D""> Support file property =
collection and analysis for MHTML files.
</li><li style=3D"max-width: 100%;" class=3D""> Raw scanning of PostSc=
ript files. </li><li style=3D"max-width: 100%;" class=3D""> Fix clamsu=
bmit to use the new virus and false positive submission web interface.
</li><li style=3D"max-width: 100%;" class=3D""> Optionally, flag files=
with the virus "Heuristic.Limits.Exceeded" when size limitations=
are exceeded.
</li><li style=3D"max-width: 100%;" class=3D""> Improved decoders for =
PDF files. </li><li style=3D"max-width: 100%;" class=3D""> Reduced num=
ber of compile time warnings. </li><li style=3D"max-width: 100%;" class=3D"=
"> Improved support for C++11. </li><li style=3D"max-width: 10=
0%;" class=3D""> Improved detection of system installed libraries.
</li><li style=3D"max-width: 100%;" class=3D""> Fixes to ClamAV's Cont=
ainer system and the introduction of Intermediates for more descriptive sig=
natures.
</li><li style=3D"max-width: 100%;" class=3D""> Improvements to clamd'=
s On-Access scanning capabilities for Linux.
</li></ul>
<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<h3 style=3D"font-size: 1.25em; max-width: 100%;" class=3D"">Acknowledgemen=
ts</h3>
<br style=3D"max-width: 100%;" class=3D"">
The ClamAV team thanks the following individuals for their code submissions=
:<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
Andreas Schulze<br style=3D"max-width: 100%;" class=3D"">
Anthony Chan<br style=3D"max-width: 100%;" class=3D"">
Bill Parker<br style=3D"max-width: 100%;" class=3D"">
Chris Miserva<br style=3D"max-width: 100%;" class=3D"">
Daniel J. Luke<br style=3D"max-width: 100%;" class=3D"">
Georgy Salnikov<br style=3D"max-width: 100%;" class=3D"">
James Ralston<br style=3D"max-width: 100%;" class=3D"">
Jonas Zaddach<br style=3D"max-width: 100%;" class=3D"">
Keith Jones<br style=3D"max-width: 100%;" class=3D"">
Marc Deslauriers<br style=3D"max-width: 100%;" class=3D"">
Mark Allan<br style=3D"max-width: 100%;" class=3D"">
Matthew Boedicker<br style=3D"max-width: 100%;" class=3D"">
Michael Pelletier<br style=3D"max-width: 100%;" class=3D"">
Ningirsu<br style=3D"max-width: 100%;" class=3D"">
Sebastian Andrzej Siewior<br style=3D"max-width: 100%;" class=3D"">
Stephen Welker<br style=3D"max-width: 100%;" class=3D"">
Tuomo Soini<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<h3 style=3D"font-size: 1.25em; max-width: 100%;" class=3D"">Known Issues</=
h3>
<br style=3D"max-width: 100%;" class=3D"">
ClamAV has an active issue queue and enjoys continual improvement but as sa=
d as I am to say it, we couldn't address every bug in this release. I=
want to draw your attention a couple bugs in particular so as not to frust=
rate users setting up ClamAV:<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Platform: macOS:
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Bug: If you attempt to buil=
d ClamAV with a system installed LLVM you may receive a linker error.  =
;We recently changed default linking behavior to prefer dynamic linking ove=
r static linking. As a result, we've uncovered
a bug in building on macOS where dynamic linking against the LLVM librarie=
s fails. To work around this bug, please add the
<code style=3D"max-width: 100%;" class=3D"">--with-llvm-linking=3Dstatic</c=
ode> option to your
<code style=3D"max-width: 100%;" class=3D"">./configure</code> call. =
</li></ul>
</li><li style=3D"max-width: 100%;" class=3D"">Platform: CentOS 6 32bit, ol=
der versions of AIX:
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Bug: On CentOS 6 32bit we o=
bserved that specific versions of zlib fail to correctly decompress the CVD=
signature databases. If you are on an older system such as CentoOS 6=
32bit and observe failures loading the signature
database, please consider upgrading to a newer version of zlib. </li=
></ul>
</li><li style=3D"max-width: 100%;" class=3D""> Platform: Miscellaneou=
s
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Bug: When cross compiling o=
n certain legacy systems (Solaris, AIX, OSX) against older system libraries=
that do not support strn functions linking may fail during compile time. W=
hile automatic checking is done during configure
time to check for unsupported libs, this problem can be manually avoided u=
sing the
<code style=3D"max-width: 100%;" class=3D"">--enable-strni</code> configure=
flag if it is encountered.
</li></ul>
</li></ul>
<div style=3D"max-width: 100%;" class=3D"">Please check out 0.100.0-rc and =
provide us feedback on the<a href=3D"http://www.clamav.net/contact#ml" targ=
et=3D"_blank" style=3D"color: rgb(65, 110, 210); max-width: 100%;" class=3D=
""> ClamAV Mailing lists</a>. As always, a
big thank you to the ClamAV Community!</div>
</div>
</div>
</div>
</blockquote>
</div>
</body>
</html>
--_000_1A7CC08B2CC64A02855EE932C5AD9EA9ciscocom_--
--===============0934398076750763376==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce
http://www.clamav.net/contact.html#ml
--===============0934398076750763376==--