ClamAV® blog: ClamAV 0.10 1.0 has been released!
"Joel Esler (jesler)" <[email protected]> Mon, 3 Dec 2018 21:51:27 +0000
| Newsgroups | gmane.comp.security.virus.clamav.announce |
|---|---|
| Message-ID | <442038AD-5143-478F-8939-0F77AC0BA24A__16483.6641437889$1543873800$gmane$org@cisco.com> |
--===============2319436778484636116==
Content-Language: en-US
Content-Type: multipart/signed;
boundary="Apple-Mail=_2F1D5959-C79A-4434-BC54-4F45878DC3C1";
protocol="application/pkcs7-signature"; micalg=sha-256
--Apple-Mail=_2F1D5959-C79A-4434-BC54-4F45878DC3C1
Content-Type: multipart/alternative;
boundary="Apple-Mail=_344EF084-7B8E-491C-BE00-A96DD29E9D66"
--Apple-Mail=_344EF084-7B8E-491C-BE00-A96DD29E9D66
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
>=20
> https://blog.clamav.net/2018/12/clamav-01010-has-been-released.html =
<https://blog.clamav.net/2018/12/clamav-01010-has-been-released.html>
>=20
> ClamAV 0.101.0 has been released!
>=20
> We are pleased to announce the release of ClamAV 0.101.0! Please take =
a look at the below release notes for further information.
>=20
> 0.101.0 Release Notes
>=20
> ClamAV 0.101.0 is a feature release with an assortment of improvements =
that we've cooked up over the past 6 months.
>=20
> Highlighted Changes:
>=20
> Our user manual has been converted from latex/pdf/html into Markdown! =
Markdown is easier to read & edit than latex, and is easier to =
contribute to as it eliminates the need to generate documents (the PDF, =
HTML). The user manual is now shipped in:docs/UserManual[.md]. =
However, the most up to date version at any time will be on ClamAV.net =
(This is not live right now, but will be shortly)
> Support for RAR v5 archive extraction! We replaced the legacy C-based =
unrar implementation with RarLabs UnRAR 5.6.5 library. Licensing is the =
same as before, although our libclamunrar_iface supporting library has =
changed from LGPL to the BSD 3-Clause license.
> Libclamav API changes:
> The following scanning functions now require a filename argument.
> This will enable ClamAV to report more details warning and error =
information in the future, and will also allow for more sensible temp =
file names. The filename argument may be NULL if a filename is not =
available.
> cl_scandesc
> cl_scandesc_callback
> cl_scanmap_callback
> Scanning options have been converted from a single flag bit-field into =
a structure of multiple categorized flag bit-fields. This change enabled =
us to add new scanning options requested by the community. In addition, =
the name of each scan option has changed a little. As a result, the API =
changes will require libclamav users to modify how they initialize and =
pass scan options into calls such as cl_scandesc() .
> For details:
> example code =
<https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.101/examples/ex1.c=
#L89>
> documentation =
<https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.101/docs/UserManua=
l/libclamav.md#data-scan-functions>
> With our move to openssl versions >1.0.1, the cl_cleanup_crypto() =
function has been deprecated. This is because cleanup of open-ssl init =
functions is now handled by an auto-deinit procedure within the openssl =
library, meaning the call to EVP_cleanup() may cause problems to =
processes external to Clam.
> CL_SCAN_HEURISTIC_ENCRYPTED scan option was replaced by 2 new scan =
options:
> CL_SCAN_HEURISTIC_ENCRYPTED_ARCHIVE
> CL_SCAN_HEURISTIC_ENCRYPTED_DOC
> clamd.conf and command line interface (CLI) changes:
> As in 0.100.2, the clamd.conf OnAccessExtraScanning has been =
temporarily disabled in order to prevent resource cleanup issues from =
impacting clamd stability. As noted below, OnAccessExtraScanning is an =
opt-in minor feature of on-access scanning on Linux systems and its loss =
does not significantly impact the effectiveness of on-access scanning. =
The option still exists, but the feature will not be enabled and a =
warning will show if LogVerbose is enabled.
> For details, see: https://bugzilla.clamav.net/show_bug.cgi?id=3D12048 =
<https://bugzilla.clamav.net/show_bug.cgi?id=3D12048>
> "Heuristic Alerts" (aka "Algorithmic Detection") options have been =
changed to make the names more consistent. The original options are =
deprecated in 0.101, and will be removed in a future feature release.
> In addition, two new scan options were added to alert specifically on =
encrypted archives or encrypted docs. Previous functionality did both, =
even though it claimed to be specific to archives:
> Scan option details:
>=20
>=20
> | Old `clamd.conf` option | *New* `clamd.conf` option =
|
>=20
> | -------------------------------- | ---------------------------- =
|
>=20
> | `AlgorithmicDetection` | `HeuristicAlerts` =
|
>=20
> | `DetectBrokenExecutables` | `AlertBrokenExecutables` =
|
>=20
> | `PhishingAlwaysBlockCloak` | `AlertPhishingCloak` =
|
>=20
> | `PhishingAlwaysBlockSSLMismatch` | `AlertPhishingSSLMismatch` =
|
>=20
> | `PartitionIntersection` | `AlertPartitionIntersection` =
|
>=20
> | `BlockMax` | `AlertExceedsMax` =
|
>=20
> | `OLE2BlockMacros` | `AlertOLE2Macros` =
|
>=20
> | `ArchiveBlockEncrypted` | `AlertEncrypted` =
|
>=20
> | | `AlertEncryptedArchive` =
|
>=20
> | | `AlertEncryptedDoc` =
|
>=20
>=20
>=20
> | Old `clamscan` option | *New* `clamscan` option =
|
>=20
> | ---------------------------- | -------------------------------- =
|
>=20
> | `--algorithmic-detection` | `--heuristic-alerts` =
|
>=20
> | `--detect-broken` | `--alert-broken` =
|
>=20
> | `--phishing-cloak` | `--alert-phishing-cloak` =
|
>=20
> | `--phishing-ssl` | `--alert-phishing-ssl` =
|
>=20
> | `--partition-intersection` | `--alert-partition-intersection` =
|
>=20
> | `--block-max` | `--alert-exceeds-max` =
|
>=20
> | `--block-macros` | `--alert-macros` =
|
>=20
> | `--block-encrypted` | `--alert-encrypted` =
|
>=20
> | | `--alert-encrypted-archive` =
|
>=20
> | | `--alert-encrypted-doc` =
|
>=20
>=20
> Some more subtle improvements:
>=20
>=20
> Logical signatures have been extended with a new sub-signature type =
which allows for numerical byte sequence comparison. For those familiar =
with Snort, this byte comparison feature works similarly to the =
byte_extract and byte_test feature, in that it allows signature writers =
to extract and compare a specified number of bytes (offset from a match) =
against another numeric value. You can read more about this feature, see =
how it works, and look over examples in our documentation.
> Backwards compatibility improvements for detecting the OpenSSL =
dependency.
> Freshclam updated to match exit codes defined in the freshclam.1 man =
page.
> Upgrade from libmspack 0.5alpha to libmspack 0.7.1alpha. As a =
reminder, we support system-installed versions of libmspack. However, at =
this time the ClamAV-provided version of libmspack provides additional =
abilities to parse broken or non-standard CAB files beyond what the =
stock libmspack 0.7.1alpha provides. We are working with the upstream =
project to incorporate our modifications, and hopefully these changes =
will appear in a future release of libmspack.
> Updated the bundled 3rd party library libxml2 included for Windows =
builds to version 2.9.8.
> Updated the bundled 3rd party library pcre included for Windows builds =
to pcre2 version 10.31.
> Upgraded Aspack PE unpacking capability with support up to version =
2.42.
> Improvements to PDF parsing capability.
> Replaced the Windows installer with a new installer built using =
InnoSetup 5.
> Improved curl-config detection logic
> GitHub pull-request by Thomas Petazzoni.
> Added file type CL_TYPE_LNK to more easily identify Windows Shortcut =
files when writing signatures.
> Improved parsing of Windows executable (PE) Authenticode signatures.=20=
> Pull request by Andrew Williams.
> Added support for Authenticode signature properties commonly used by =
Windows system files. These files are now much more likely to be =
whitelisted correctly.
> Signature parsing now works correctly on big endian systems.
> Some simplification to freshclam mirror management code, including =
changes to reduce timeout on ignoring mirrors after errors, and to make =
freshclam more tolerant when there is a delay between the time the new =
signature database content is announced and the time that the =
content-delivery-network has the content available for download.
> Email MIME Header parsing changes to accept argument values with =
unbalanced quotes. Improvement should improve detection of attachments =
on malformed emails.
> GitHub pull request by monnerat.
> Included the config filename when reporting errors parsing ClamAV =
configs.
> GitHub pull request by Josh Soref.
> Improvement to build scripts for clamav-milter.
> GitHub pull request by Renato Botelho.
>=20
> Other changes:
>=20
> Removed option handler for AllowSupplementaryGroups from libfreshclam. =
This option was previously deprecated from freshclam in ClamAV 0.100.0 =
but remained in libfreshclam by mistake.
> In older versions of pcre2 and in pcre, a higher PCRERecMatchLimit may =
cause
> clamd
> to crash on select files. We have lowered the default =
PCRERecMatchLimit to 2000 to reduce the likelihood of a crash and have =
added warnings to recommend using pcre2 v10.30 or higher to eliminate =
the issue.
>=20
> Supporting infrastructure:
>=20
> As you might imagine, ClamAV is much more than just the tarball or EXE =
you download and install. Here at Cisco Talos, we've been working hard =
on the support infrastructure that's so easy to take for granted.
>=20
> Test Frameworks
> Feature Testing:
> Throughout the development of ClamAV 0.101, our quality assurance =
engineers have been hard at work rebuilding our QA automation framework =
in Python from the ground up to test ClamAV features on 32-and-64bit =
versions:
> Linux: Ubuntu, Debian, CentOS, Fedora
> FreeBSD 11
> Windows 10
> In addition to building out the framework, they've written over 260 =
individual feature tests to validate correctness of the new features =
going into 0.101 as well as to validate many existing features.
> Build Acceptance Testing:
> Another major task accomplished during the development of 0.101 was =
the creation of a build acceptance test framework that we run from our =
Jenkins CI server.
> Similar to the feature testing framework, our build acceptance =
framework tests across 64bit and 32bit (where available):
> macOS 10 (.10, .11, .13)
> Windows (7, 10)
> Debian (8, 9), Ubuntu (16.04, 18.04), CentOS (6, 7)
> FreeBSD (10, 11)
>=20
> This pipeline creates our release materials including the Windows =
installers, and then validates that the basic install, update, start, =
scan, and stop procedures all work as expected each time commits are =
made to our development branches.
>=20
> Signature Database Distribution:
> During the course of ClamAV 0.101 development, our Community team has =
been able to migrate us from a network of third-party mirrors over to =
use the services of CloudFlare to provide a more unified =
content-delivery-network.
> With CloudFlare, users in geographic regions that had few mirrors will =
notice much improved signature update speeds and reliability. In =
addition, we're excited to be able to finally see user metrics that will =
help us continue to improve ClamAV. We've observed a 57% improvement in =
download speeds (on average) across the globe. We are of course grateful =
to all of the community members who have donated their server bandwidth =
to mirror the ClamAV signature databases over the years. Thank you so =
much! We have not called for an official shutdown of the old mirror =
network yet.
> Development Processes:
> As many of you know, ClamAV 0.100 was in development for a good two =
years. Not only was this frustrating for users awaiting new features and =
bug-fixes, it also made for a difficult transition for users that =
weren't expecting two years worth of change when 0.100 landed.
> We have learned from the experience and are committed to providing =
shorter and more responsive ClamAV development cycles.
>=20
> ClamAV 0.101 is the first of many smaller feature releases where we =
created a roadmap with distinct deadlines and with specific planned =
features. We based the feature list on both community requests and our =
own needs and then executed that plan.
>=20
> We're very proud of ClamAV 0.101 and we hope you enjoy it.
>=20
> Acknowledgements:
>=20
> The ClamAV team thanks the following individuals for their code =
submissions:
> Andrew Williams, Cisco Talos
> Craig Andrews
> Josh Soref
> monnerat
> Renato Botelho
> tchernomax
> Thomas Petazzoni
> As always, we welcome discussion about ClamAV on our mailing lists =
<https://www.clamav.net/community>.
--Apple-Mail=_344EF084-7B8E-491C-BE00-A96DD29E9D66
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
charset=us-ascii
<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><base></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><base class=""><div class="Apple-Mail-URLShareUserContentTopClass"><br class=""></div><div class="Apple-Mail-URLShareWrapperClass"><blockquote type="cite" style="border-left-style: none; color: inherit; padding: inherit; margin: inherit;" class=""><div class=""><div class="original-url"><br class=""><a href="https://blog.clamav.net/2018/12/clamav-01010-has-been-released.html" class="">https://blog.clamav.net/2018/12/clamav-01010-has-been-released.html</a><br class=""><br class=""></div><div id="article" role="article" style="text-rendering: optimizeLegibility; font-family: Georgia; font-size: 1.
2em; line-height: 1.5em; margin: 0px; padding: 0px;" class="georgia exported">
<!-- This node will contain a number of div.page. -->
<div class="page" style="word-wrap: break-word; max-width: 100%;"><h1 class="title" style="font-size: 1.95552em; line-height: 1.2141em; margin-top: 0px; margin-bottom: 0.5em; max-width: 100%;">ClamAV 0.101.0 has been released!</h1>
We are pleased to announce the release of ClamAV 0.101.0! Please take a look at the below release notes for further information.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<b style="max-width: 100%;" class="">0.101.0 Release Notes</b><br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
ClamAV 0.101.0 is a feature release with an assortment of improvements that we've cooked up over the past 6 months.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
Highlighted Changes:<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Our user manual has been converted from latex/pdf/html into <b style="max-width: 100%;" class="">Markdown</b>! Markdown is easier to read & edit than latex, and is easier to contribute to as it eliminates the need to generate documents (the PDF, HTML). The user manual is now shipped in:docs/UserManual[.md]. However, the most up to date version at any time will be on <a href="http://ClamAV.net" class="">ClamAV.net</a> (This is not live right now, but will be shortly)</li>
<li style="max-width: 100%;" class="">Support for RAR v5 archive extraction! We replaced the legacy C-based unrar implementation with RarLabs UnRAR 5.6.5 library. Licensing is the same as before, although our <code style="max-width: 100%;" class="">libclamunrar_iface</code>
supporting library has changed from LGPL to the BSD 3-Clause license.</li>
<li style="max-width: 100%;" class="">Libclamav API changes:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">The following scanning functions now require a filename argument.</li>
<li style="max-width: 100%;" class="">This will enable ClamAV to report more details warning and error information in the future, and will also allow for more sensible temp file names. The filename argument may be <code style="max-width: 100%;" class="">NULL</code>
if a filename is not available.</li>
<ul class="code-block" style="max-width: 100%;">
<li style="max-width: 100%;" class=""><code style="max-width: 100%;" class="">cl_scandesc</code>
</li>
<li style="max-width: 100%;" class=""><code style="max-width: 100%;" class="">cl_scandesc_callback</code>
</li>
<li style="max-width: 100%;" class=""><code style="max-width: 100%;" class="">cl_scanmap_callback</code>
</li>
</ul>
</ul>
<li style="max-width: 100%;" class="">Scanning options have been converted from a single flag bit-field into a structure of multiple categorized flag bit-fields. This change enabled us to add new scanning options requested by the community. In addition, the name of each scan option has changed a little. As a result, the API changes will require libclamav users to modify how they initialize and pass scan options into calls such as <code style="max-width: 100%;" class="">cl_scandesc()</code>
.</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">For details:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class=""><a href="https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.101/examples/ex1.c#L89" target="_blank" style="color: rgb(65, 110, 210); max-width: 100%;" class="">example code</a></li>
<li style="max-width: 100%;" class=""><a href="https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.101/docs/UserManual/libclamav.md#data-scan-functions" target="_blank" style="color: rgb(65, 110, 210); max-width: 100%;" class="">documentation</a></li>
</ul>
</ul>
<li style="max-width: 100%;" class="">With our move to openssl versions >1.0.1, the <code style="max-width: 100%;" class="">cl_cleanup_crypto()</code>
function has been deprecated. This is because cleanup of open-ssl init functions is now handled by an auto-deinit procedure within the openssl library, meaning the call to <code style="max-width: 100%;" class="">EVP_cleanup()</code>
may cause problems to processes external to Clam.</li>
<li style="max-width: 100%;" class=""><code style="max-width: 100%;" class="">CL_SCAN_HEURISTIC_ENCRYPTED</code>
scan option was replaced by 2 new scan options:</li>
<ul class="code-block" style="max-width: 100%;">
<li style="max-width: 100%;" class=""><code style="max-width: 100%;" class="">CL_SCAN_HEURISTIC_ENCRYPTED_ARCHIVE</code>
</li>
<li style="max-width: 100%;" class=""><code style="max-width: 100%;" class="">CL_SCAN_HEURISTIC_ENCRYPTED_DOC</code>
</li>
</ul>
<li style="max-width: 100%;" class="">clamd.conf and command line interface (CLI) changes:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">As in 0.100.2, the clamd.conf <code style="max-width: 100%;" class="">OnAccessExtraScanning</code> has been temporarily disabled in order to prevent resource cleanup issues from impacting clamd stability. As noted below, <code style="max-width: 100%;" class="">OnAccessExtraScanning</code>
is an opt-in minor feature of on-access scanning on Linux systems and its loss does not significantly impact the effectiveness of on-access scanning. The option still exists, but the feature will not be enabled and a warning will show if <code style="max-width: 100%;" class="">LogVerbose</code>
is enabled.</li>
<li style="max-width: 100%;" class="">For details, see: <a href="https://bugzilla.clamav.net/show_bug.cgi?id=12048" style="color: rgb(65, 110, 210); max-width: 100%;" class="">https://bugzilla.clamav.net/show_bug.cgi?id=12048</a></li>
</ul>
<li style="max-width: 100%;" class="">"Heuristic Alerts" (aka "Algorithmic Detection") options have been changed to make the names more consistent. The original options are deprecated in 0.101, and will be removed in a future feature release.</li>
<li style="max-width: 100%;" class="">In addition, <i style="max-width: 100%;" class="">two new scan options</i> were added to alert specifically on encrypted archives or encrypted docs. Previous functionality did both, even though it claimed to be specific to archives:</li>
<li style="max-width: 100%;" class="">Scan option details:</li>
</ul>
<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<div class="scrollable" style="max-width: 100%; overflow-x: scroll; word-wrap: normal;"><pre style="max-width: 100%; font-size: 0.9em; line-height: 1.45em;" class=""> | Old `clamd.conf` option | *New* `clamd.conf` option |
| -------------------------------- | ---------------------------- |
| `AlgorithmicDetection` | `HeuristicAlerts` |
| `DetectBrokenExecutables` | `AlertBrokenExecutables` |
| `PhishingAlwaysBlockCloak` | `AlertPhishingCloak` |
| `PhishingAlwaysBlockSSLMismatch` | `AlertPhishingSSLMismatch` |
| `PartitionIntersection` | `AlertPartitionIntersection` |
| `BlockMax` | `AlertExceedsMax` |
| `OLE2BlockMacros` | `AlertOLE2Macros` |
| `ArchiveBlockEncrypted` | `AlertEncrypted` |
| | `AlertEncryptedArchive` |
| | `AlertEncryptedDoc` |
| Old `clamscan` option | *New* `clamscan` option |
| ---------------------------- | -------------------------------- |
| `--algorithmic-detection` | `--heuristic-alerts` |
| `--detect-broken` | `--alert-broken` |
| `--phishing-cloak` | `--alert-phishing-cloak` |
| `--phishing-ssl` | `--alert-phishing-ssl` |
| `--partition-intersection` | `--alert-partition-intersection` |
| `--block-max` | `--alert-exceeds-max` |
| `--block-macros` | `--alert-macros` |
| `--block-encrypted` | `--alert-encrypted` |
| | `--alert-encrypted-archive` |
| | `--alert-encrypted-doc` |
</pre></div>
<br style="max-width: 100%;" class="">
Some more subtle improvements:<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Logical signatures have been extended with a new sub-signature type which allows for numerical byte sequence comparison. For those familiar with Snort, this byte comparison feature works similarly to the byte_extract and byte_test feature, in that it allows signature writers to extract and compare a specified number of bytes (offset from a match) against another numeric value. You can read more about this feature, see how it works, and look over examples in our documentation.</li>
<li style="max-width: 100%;" class="">Backwards compatibility improvements for detecting the OpenSSL dependency.</li>
<li style="max-width: 100%;" class="">Freshclam updated to match exit codes defined in the freshclam.1 man page.</li>
<li style="max-width: 100%;" class="">Upgrade from libmspack 0.5alpha to libmspack 0.7.1alpha. As a reminder, we support system-installed versions of libmspack. <i style="max-width: 100%;" class="">However</i>, at this time the ClamAV-provided version of libmspack provides additional abilities to parse broken or non-standard CAB files beyond what the stock libmspack 0.7.1alpha provides. We are working with the upstream project to incorporate our modifications, and hopefully these changes will appear in a future release of libmspack.</li>
<li style="max-width: 100%;" class="">Updated the bundled 3rd party library libxml2 included for Windows builds to version 2.9.8.</li>
<li style="max-width: 100%;" class="">Updated the bundled 3rd party library pcre included for Windows builds to pcre2 version 10.31.</li>
<li style="max-width: 100%;" class="">Upgraded Aspack PE unpacking capability with support up to version 2.42.</li>
<li style="max-width: 100%;" class="">Improvements to PDF parsing capability.</li>
<li style="max-width: 100%;" class="">Replaced the Windows installer with a new installer built using InnoSetup 5.</li>
<li style="max-width: 100%;" class="">Improved <code style="max-width: 100%;" class="">curl-config</code>
detection logic</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">GitHub pull-request by Thomas Petazzoni.</li>
</ul>
<li style="max-width: 100%;" class="">Added file type <code style="max-width: 100%;" class="">CL_TYPE_LNK</code>
to more easily identify Windows Shortcut files when writing signatures.</li>
<li style="max-width: 100%;" class="">Improved parsing of Windows executable (PE) Authenticode signatures. </li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Pull request by Andrew Williams.</li>
</ul>
<li style="max-width: 100%;" class="">Added support for Authenticode signature properties commonly used by Windows system files. These files are now much more likely to be whitelisted correctly.</li>
<li style="max-width: 100%;" class="">Signature parsing now works correctly on big endian systems.</li>
<li style="max-width: 100%;" class="">Some simplification to freshclam mirror management code, including changes to reduce timeout on ignoring mirrors after errors, and to make freshclam more tolerant when there is a delay between the time the new signature database content is announced and the time that the content-delivery-network has the content available for download.</li>
<li style="max-width: 100%;" class="">Email MIME Header parsing changes to accept argument values with unbalanced quotes. Improvement should improve detection of attachments on malformed emails.</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">GitHub pull request by monnerat.</li>
</ul>
<li style="max-width: 100%;" class="">Included the config filename when reporting errors parsing ClamAV configs.</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">GitHub pull request by Josh Soref.</li>
</ul>
<li style="max-width: 100%;" class="">Improvement to build scripts for clamav-milter.</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">GitHub pull request by Renato Botelho.</li>
</ul>
</ul>
<br style="max-width: 100%;" class="">
Other changes:<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Removed option handler for <code style="max-width: 100%;" class="">AllowSupplementaryGroups</code>
from libfreshclam. This option was previously deprecated from freshclam in ClamAV 0.100.0 but remained in libfreshclam by mistake.</li>
<li style="max-width: 100%;" class="">In older versions of pcre2 and in pcre, a higher <code style="max-width: 100%;" class="">PCRERecMatchLimit</code>
may cause <div class="scrollable" style="max-width: 100%; overflow-x: scroll; word-wrap: normal;"><pre style="max-width: 100%; font-size: 0.9em; line-height: 1.45em;" class="">clamd</pre></div>
to crash on select files. We have lowered the default <code style="max-width: 100%;" class="">PCRERecMatchLimit</code>
to 2000 to reduce the likelihood of a crash and have added warnings to recommend using pcre2 v10.30 or higher to eliminate the issue.</li>
</ul>
<br style="max-width: 100%;" class="">
Supporting infrastructure:<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
As you might imagine, ClamAV is much more than just the tarball or EXE you download and install. Here at Cisco Talos, we've been working hard on the support infrastructure that's so easy to take for granted.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Test Frameworks</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Feature Testing:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Throughout the development of ClamAV 0.101, our quality assurance engineers have been hard at work rebuilding our QA automation framework in Python from the ground up to test ClamAV features on 32-and-64bit versions:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Linux: Ubuntu, Debian, CentOS, Fedora</li>
<li style="max-width: 100%;" class="">FreeBSD 11</li>
<li style="max-width: 100%;" class="">Windows 10</li>
</ul>
</ul>
<li style="max-width: 100%;" class="">In addition to building out the framework, they've written over 260 individual feature tests to validate correctness of the new features going into 0.101 as well as to validate many existing features.</li>
</ul>
</ul>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class=""> Build Acceptance Testing:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Another major task accomplished during the development of 0.101 was the creation of a build acceptance test framework that we run from our Jenkins CI server.</li>
</ul>
</ul>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Similar to the feature testing framework, our build acceptance framework tests across 64bit and 32bit (where available):</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">macOS 10 (.10, .11, .13)</li>
<li style="max-width: 100%;" class="">Windows (7, 10)</li>
<li style="max-width: 100%;" class="">Debian (8, 9), Ubuntu (16.04, 18.04), CentOS (6, 7)</li>
<li style="max-width: 100%;" class="">FreeBSD (10, 11)</li>
</ul>
</ul>
<br style="max-width: 100%;" class="">
This pipeline creates our release materials including the Windows installers, and then validates that the basic install, update, start, scan, and stop procedures all work as expected each time commits are made to our development branches.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Signature Database Distribution:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">During the course of ClamAV 0.101 development, our Community team has been able to migrate us from a network of third-party mirrors over to use the services of CloudFlare to provide a more unified content-delivery-network.</li>
<li style="max-width: 100%;" class="">With CloudFlare, users in geographic regions that had few mirrors will notice much improved signature update speeds and reliability. In addition, we're excited to be able to finally see user metrics that will help us continue to improve ClamAV. We've observed a 57% improvement in download speeds (on average) across the globe. We are of course grateful to all of the community members who have donated their server bandwidth to mirror the ClamAV signature databases over the years. Thank you so much! We have not called for an official shutdown of the old mirror network yet.</li>
</ul>
</ul>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Development Processes:</li>
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">As many of you know, ClamAV 0.100 was in development for a good two years. Not only was this frustrating for users awaiting new features and bug-fixes, it also made for a difficult transition for users that weren't expecting two years worth of change when 0.100 landed.</li>
<li style="max-width: 100%;" class="">We have learned from the experience and are committed to providing shorter and more responsive ClamAV development cycles.</li>
</ul>
</ul>
<br style="max-width: 100%;" class="">
ClamAV 0.101 is the first of many smaller feature releases where we created a roadmap with distinct deadlines and with specific planned features. We based the feature list on both community requests and our own needs and then executed that plan.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
We're very proud of ClamAV 0.101 and we hope you enjoy it.<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
Acknowledgements:<br style="max-width: 100%;" class="">
<br style="max-width: 100%;" class="">
The ClamAV team thanks the following individuals for their code submissions:<br style="max-width: 100%;" class="">
<ul style="max-width: 100%;" class="">
<li style="max-width: 100%;" class="">Andrew Williams, Cisco Talos</li>
<li style="max-width: 100%;" class="">Craig Andrews</li>
<li style="max-width: 100%;" class="">Josh Soref</li>
<li style="max-width: 100%;" class="">monnerat</li>
<li style="max-width: 100%;" class="">Renato Botelho</li>
<li style="max-width: 100%;" class="">tchernomax</li>
<li style="max-width: 100%;" class="">Thomas Petazzoni</li>
</ul>
<div style="max-width: 100%;" class="">
As always, we welcome discussion about ClamAV on our <a href="https://www.clamav.net/community" target="_blank" style="color: rgb(65, 110, 210); max-width: 100%;" class="">mailing lists</a>.</div></div></div></div></blockquote></div></body></html>
--Apple-Mail=_344EF084-7B8E-491C-BE00-A96DD29E9D66--
--Apple-Mail=_2F1D5959-C79A-4434-BC54-4F45878DC3C1
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCCRYw
ggRuMIIDVqADAgECAgphEIBtAAAAAAAOMA0GCSqGSIb3DQEBBQUAMDUxFjAUBgNVBAoTDUNpc2Nv
IFN5c3RlbXMxGzAZBgNVBAMTEkNpc2NvIFJvb3QgQ0EgMjA0ODAeFw0xNDA0MDQyMDI0MThaFw0y
OTA1MTQyMDI1NDJaMCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBD
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrffhZMUxX7I1bNxrllCgSV5d5MRWeM
DMcG4KsfbV83Knvn7aOtgH8RyPOC6+6fUNnJvz2hL7s8EQc177il2VFO2bD3U6CUgCwskmWtEG+h
hmtfQAqZpVBEGpBNz+ZM+0YGjUjjB9fhrWPX1egnABW/bgeyQ7tlBi999lldmxLFLH2960SwUuHC
/B7tnVn3HZOnqzGmQkI5J9OBYsZULCaM2z0U0KiOFeoopBv+vaw8nk3W1UyvjMv/S58FbA9xgTIk
Ye0Zq77qcbRojLvI9OSLP3dTon4VnnML41d0XoPS6JPGzDSRDAKXndcHk3VUtF+DLAIXqLCQZXfZ
UuTuIncCAwEAAaOCAYcwggGDMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBSflTa0jl3VS8MK
wacpk0NRBv2JUTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwEgYDVR0T
AQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQn88gVHm6aAgkWrSugiWBf2nsvqjBDBgNVHR8EPDA6
MDigNqA0hjJodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY3JsL2NyY2EyMDQ4LmNy
bDBQBggrBgEFBQcBAQREMEIwQAYIKwYBBQUHMAKGNGh0dHA6Ly93d3cuY2lzY28uY29tL3NlY3Vy
aXR5L3BraS9jZXJ0cy9jcmNhMjA0OC5jZXIwXAYDVR0gBFUwUzBRBgorBgEEAQkVARUAMEMwQQYI
KwYBBQUHAgEWNWh0dHA6Ly93d3cuY2lzY28uY29tL3NlY3VyaXR5L3BraS9wb2xpY2llcy9pbmRl
eC5odG1sMA0GCSqGSIb3DQEBBQUAA4IBAQA+Tr4jGkYCjV5r24oCNAtjm+UBPCZdjHCyJOtgXuyK
hGQuG1kVo2ca4Rbj/eBNfUSaIyjS7bb3oh/nRM3tbeqGIVQorGxhvPvIZVAEQIoqi/yfbhie9cU+
paKpHACucaYXu0kyS0pYE5NMNun3Lw3ogOs4XVR5yoVSpKTiVnfTDQchTpwkMgzivqXDcS1OiDfU
8C9WaEZHRWtdUIgl9zoppPGIQa1TflcxhirW4GeH2FOrgaN1d77bIcg6R7RpJ9Xu3/f01nGNunrR
cy993c2meJQoZcOJd15C6ugHwhAxeXY6QXYgkY8KQVCCGwkpshEgbwPrC+I/Itb6P7hGq7awMIIE
oDCCA4igAwIBAgIKAYYRaDD7OEqcKzANBgkqhkiG9w0BAQsFADAsMQ4wDAYDVQQKEwVDaXNjbzEa
MBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwHhcNMTgxMTIxMDAwMDAwWhcNMjAxMTIwMDAxMDAw
WjCBlTEcMBoGA1UEAxMTSm9lbCBFc2xlciAoamVzbGVyKTEUMBIGA1UECxMLQ2lzY28gVXNlcnMx
EjAQBgNVBAsTCUVtcGxveWVlczETMBEGCgmSJomT8ixkARkTA2NvbTEVMBMGCgmSJomT8ixkARkT
BWNpc2NvMR8wHQYJKoZIhvcNAQkBDBBqZXNsZXJAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjY9Yo3zw0WCxtdtE4oQyXJqoSbeuJULMuLBbZbmalv2w7vNluXG9Qhsh
7zttHIU+z1j0XpG2BnYZMl4AgO23yOyghTAo5u8hBH9Riox9bw0hRkB/pAE89QeZ+1kNOGLuZfN8
B5sTFFmRTztX+TZtIkFONq7q9Wj+h0P5ikvyCgr3tjsbnJRNVSAynEfWGFxIxAGyEYIGMHeSz1ej
SenHps4yI8qTKsX9o3KLRz1nLucUDpm/TCLbQEI87Uv9Phd2v0FptbWUKik9agDjTW4/Q7PjBTPc
OpXem/8w8H9S7TKa248Opt2Nv24oqJZMVAUu6It9oQZWubO0bsYYp8yiDQIDAQABo4IBWDCCAVQw
DgYDVR0PAQH/BAQDAgTwMAwGA1UdEwEB/wQCMAAwegYIKwYBBQUHAQEEbjBsMDwGCCsGAQUFBzAC
hjBodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY2VjYS5jZXIwLAYIKwYB
BQUHMAGGIGh0dHA6Ly9wa2ljdnMuY2lzY28uY29tL3BraS9vY3NwMB8GA1UdIwQYMBaAFJ+VNrSO
XdVLwwrBpymTQ1EG/YlRMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jaXNjb2NlcnRzLmNpc2Nv
LmNvbS9maWxlL2NlY2EuY3JsMBsGA1UdEQQUMBKBEGplc2xlckBjaXNjby5jb20wHQYDVR0OBBYE
FDTmAUtoBuQRY6GKIvCllZGSohm5MB8GA1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0G
CSqGSIb3DQEBCwUAA4IBAQA3p6fJ3fQlcqszfVLrike+NXunUtbNejhKDOPMhVc3bsozBPggAZbo
m62BvhsvgVLj/+IS2qIEflQxhS2ToplJi8nXRpZ9Qtsu4mhCByy0Z0Xtaw0v2f78B1pskPxDdXZm
T47sc84h0iW+wuZ4yADZb2azb+2j7GNd/vdPLnVyDE209ksjrYyYNO7LifZqmSqIipBYOyG3JZ25
BMTQP7ttExfRKbrkRFSHapvISiFoBeakwGRSqiF7aTAnilXm0Kp1Aj6cQH0Ju3xgXSUpxQewDvZm
Q+AYG6sV6V0yy4fwa1UQAOVKH0dadXp1z9K5WcrqC8Wqz0ojBLT/Avhfy3sXMYICajCCAmYCAQEw
OjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGEWgw+zhK
nCswDQYJYIZIAWUDBAIBBQCgggEBMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcN
AQkFMQ8XDTE4MTIwMzIxNTEyMVowLwYJKoZIhvcNAQkEMSIEIOhLjv1TjjRBFgEEohtL8rfQyT4s
AJjznr8BRgmasrkBMEkGCSsGAQQBgjcQBDE8MDowLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMT
EUNpc2NvIEVtcGxveWVlIENBAgoBhhFoMPs4SpwrMEsGCyqGSIb3DQEJEAILMTygOjAsMQ4wDAYD
VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGEWgw+zhKnCswDQYJKoZI
hvcNAQEBBQAEggEAHpl6l4nhhcmmI+zByqvS4Zwgr4bYDgBuiaf/X4+c3Ccnl6io1LRL2aifxMUx
tmwqGfUbkpgldgjubvUV/q3WMbcSsSU4h9f7Sz10ByE6baEgOPGpB1e40kOICN9CVGAB79FWRajw
omN/tZb8dUqNQKM383AOQtYbur5Fc+pN5wpN3BocwmrxSOFFd5gawoGCvn46eqzJsNzza3Om7MmS
OtCO49XXL1e4t9hkmNcugj2tnPfWWC5G5eATOrQoieerSlxpT45tbv5kOVYeQaGBizqpAw6T2IFU
IbkPUOjzRNh+1ORyVwp+s8kqvot9co1lFA66cc+IAyZ/2S897/G2ZQAAAAAAAA==
--Apple-Mail=_2F1D5959-C79A-4434-BC54-4F45878DC3C1--
--===============2319436778484636116==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce
http://www.clamav.net/contact.html#ml
--===============2319436778484636116==--