ClamAV 1.5.0 beta now available!
"Val Snyder \(micasnyd\) via clamav-announce" <[email protected]> Mon, 31 Mar 2025 18:23:48 +0000
| Newsgroups | gmane.comp.security.virus.clamav.announce |
|---|---|
| Message-ID | <CH3PR11MB875006C5AA7C2CEB420418F6C6AD2__26662.8337137931$1743445688$gmane$org@CH3PR11MB8750.namprd11.prod.outlook.com> |
--===============5834904512871472508==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_CH3PR11MB875006C5AA7C2CEB420418F6C6AD2CH3PR11MB8750namp_"
--_000_CH3PR11MB875006C5AA7C2CEB420418F6C6AD2CH3PR11MB8750namp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Read this online at: https://blog.clamav.net/2025/03/clamav-150-beta-now-av=
ailable.html
The ClamAV 1.5.0 beta is now available. You may find the source code and in=
stallers for this release at clamav.net/downloads<https://www.clamav.net/do=
wnloads> or on the ClamAV GitHub release page<https://github.com/Cisco-Talo=
s/clamav/releases/tag/clamav-1.5.0-beta>.
The beta phase is expected to last two to four weeks before we publish the =
stable release or else publish a release candidate. This will depend on how=
many changes are required to stabilize this version. Please take this time=
to evaluate ClamAV 1.5.0.
Please help us validate this release by providing feedback via GitHub issue=
s<https://github.com/Cisco-Talos/clamav/issues>, via the ClamAV mailing lis=
t<https://lists.clamav.net/mailman/listinfo/clamav-users> or on our Discord=
<https://discord.gg/sGaxA5Q>.
IMPORTANT: A major feature of the 1.5 release is a FIPS-compliant method fo=
r verifying the authenticity of CVD signature database archives and CDIFF s=
ignature database patch files. The feature is ready to test in this beta, b=
ut we are not yet distributing the associated =93.cvd.sign=94 signature fil=
es for the daily, main, and bytecode databases. Because these files aren=92=
t available, ClamAV will fall back to using the legacy MD5-based RSA signat=
ure check. In other words, Freshclam will continue to fail on FIPS-enabled =
systems, for now. However, the unit tests do include a test signing key and=
certificate pair along with tests to exercise signing and verification usi=
ng the FIPS-compliant method.
Note: Windows builds on GitHub Actions, which use VCPkg to provide C librar=
y dependencies, are failing at this time.
Tip: If you are downloading the source from the GitHub release page, the pa=
ckage labeled "clamav-1.5.0-beta.tar.gz" does not require an internet conne=
ction to build. All dependencies are included in this package. However, if =
you download the ZIP or TAR.GZ generated by GitHub, located at the very bot=
tom, then an internet connection will be required during the build to downl=
oad additional Rust dependencies.
For Docker users, there is no specific Docker tag for the beta, but you can=
use the clamav:unstable or clamav:unstable_base tags.
ClamAV 1.5.0 includes the following improvements and changes:
Major changes
* Added checks to determine if an OLE2-based Microsoft Office document =
is encrypted.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/129=
5>
* Added the ability to record URLs found in HTML if the generate-JSON-m=
etadata feature is enabled. Also adds an option to disable this in case you=
want the JSON metadata feature but don't want to record HTML URL's. The Cl=
amScan command-line option is =93--json-store-html-urls=3Dno=94. The clamd.=
conf config option is =93JsonStoreHTMLUrls no=94.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/128=
1>
* Added regex support for the clamd.conf OnAccessExcludePath config opt=
ion. This change courtesy of GitHub user b1tg.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/131=
4>
* Added FIPS-compliant CVD signing/verification with external .sign fil=
es.
Freshclam will now attempt to download external signature files to accompan=
y existing .cvd databases and .cdiff patch files. Sigtool now has commands =
to sign and verify using the external signatures.
ClamAV now installs a 'certs' directory in the app config directory (e.g. <=
prefix>/etc/certs). The install path is configurable. The CMake option to c=
onfigure the CVD certs directory is =93-D CVD_CERTS_DIRECTORY=3DPATH=94.
Added sign/verify commands to Sigtool.
New options to set an alternative CVD certs directory:
- The command-line option for Freshclam, ClamD, ClamScan, and Sigtool is: -=
-cvdcertsdir PATH
- The environment variable for Freshclam, ClamD, ClamScan, and Sigtool is: =
CVD_CERTS_DIR
The config option for Freshclam and ClamD is: CVDCertsDirectory PATH
Added two new APIs to the public clamav.h header:
extern cl_error_t cl_cvdverify_ex(const char *file,
const char *certs_directory);
extern cl_error_t cl_cvdunpack_ex(const char *file,
const char *dir,
bool dont_verify,
const char *certs_directory);
The original cl_cvdverify and cl_cvdunpack are deprecated.
Added a cl_engine_field enum option CL_ENGINE_CVDCERTSDIR. You may set this=
option with cl_engine_set_str and get it with cl_engine_get_str to overrid=
e the compiled in default CVD certs directory.
Thank you to Mark Carey at SAP for inspiring work on this feature with an i=
nitial proof of concept for external-signature FIPS compliant CVD signing.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/141=
7>
Other improvements
* Set a limit on the max-recursion config option. Users will no longer =
be able to set max-recursion higher than 100. This change prevents errors o=
n start up or possible crashes if encountering a file with that many layers=
of recursion.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/126=
4>
* Build system: CMake improvements to support compiling for the AIX pla=
tform. This change is courtesy of GitHub user KamathForAIX.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/138=
7>
* Improve support for extracting malformed .zip archives. This change i=
s courtesy of Frederick Sell.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/146=
0>
* Windows: Code quality improvement for the ClamScan and ClamDScan --mo=
ve and --remove options. This change is the courtesy of Maxim Suhanov.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/147=
0>
* Added file type recognition for some kinds of AI model files.
The file type appears as a string parameter for these callback functions:
- clcb_pre_cache
- clcb_pre_scan
- clcb_file_inspection
When scanning these files, the `type` parameter will now show "CL_TYPE_AI_M=
ODEL" instead of "CL_TYPE_BINARY_DATA".
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/147=
6>
Bug fixes
* Technical debt: Reduced email multipart message parser complexity.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/134=
7>
* Fixed possible undefined behavior in inflate64 module. The inflate64 =
module is a modified version of the zlib library, taken from version 1.2.3 =
with some customization and with some cherry-picked fixes. This adds one ad=
ditional fix from zlib 1.2.9. Thank you to TITAN Team for reporting this is=
sue.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/146=
9>
* Fixed a bug in ClamD that broke reporting of memory usage on Linux. T=
he STATS command can be used to monitor ClamD directly or through ClamDTOP.=
The memory stats feature does not work on all platforms (e.g. Windows).
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/146=
5>
* Windows: Fix a build issue when the same library dependency is found =
in two different locations.
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/145=
3>
* Fix an infinite loop when scanning some email files in debug-mode. Th=
is fix is courtesy of Yoann Lecuyer
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/144=
5>
Acknowledgments
Special thanks to the following people for code contributions and bug repor=
ts:
* b1tg
* Frederick Sell
* KamathForAIX
* Mark Carey at SAP
* Maxim Suhanov
* TITAN Team
* Yoann Lecuyer
Val Snyder (they/them)
ClamAV Development
Talos
Cisco Systems, Inc.
--_000_CH3PR11MB875006C5AA7C2CEB420418F6C6AD2CH3PR11MB8750namp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 10pt; c=
olor: rgb(0, 0, 0);">
Read this online at: <a href=3D"https://blog.clamav.net/2025/03/clamav-150-=
beta-now-available.html" id=3D"LPlnk533440">
https://blog.clamav.net/2025/03/clamav-150-beta-now-available.html</a></div=
>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
<span style=3D"color: rgb(0, 0, 0);">The ClamAV 1.5.0 beta is now available=
. You may find the source code and installers for this release at
</span><span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://www.clam=
av.net/downloads" id=3D"OWA37bcb307-6258-80f3-dd9f-c9e63eac43bb" class=3D"O=
WAAutoLink" style=3D"color: rgb(239, 62, 66);">clamav.net/downloads</a></sp=
an><span style=3D"color: rgb(0, 0, 0);"> or
on the </span><span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://=
github.com/Cisco-Talos/clamav/releases/tag/clamav-1.5.0-beta" id=3D"OWA25de=
be6b-6989-9a95-a775-14bcaaf84e4e" class=3D"OWAAutoLink" style=3D"color: rgb=
(239, 62, 66);">ClamAV GitHub release page</a></span><span style=3D"color: =
rgb(0, 0, 0);">.</span></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
The beta phase is expected to last two to four weeks before we publish the =
stable release or else publish a release candidate. This will depend on how=
many changes are required to stabilize this version. Please take this time=
to evaluate ClamAV 1.5.0.</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
<span style=3D"color: rgb(0, 0, 0);">Please help us validate this release b=
y providing feedback via
</span><span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.c=
om/Cisco-Talos/clamav/issues" id=3D"OWAfd7bd168-5107-6dd1-5f71-898bdf4e1b48=
" class=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub issues</a=
></span><span style=3D"color: rgb(0, 0, 0);">,
via the </span><span style=3D"color: rgb(239, 62, 66);"><a href=3D"https:/=
/lists.clamav.net/mailman/listinfo/clamav-users" id=3D"OWAd0db1449-b28f-908=
0-74b4-45d834fd5874" class=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66)=
;">ClamAV mailing list</a></span><span style=3D"color: rgb(0, 0, 0);"> =
;or
on </span><span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://disc=
ord.gg/sGaxA5Q" id=3D"OWA8fce2a8d-4306-d638-83ca-a757bca82398" class=3D"OWA=
AutoLink" style=3D"color: rgb(239, 62, 66);">our Discord</a></span><span st=
yle=3D"color: rgb(0, 0, 0);">.</span></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
<i>IMPORTANT: A major feature of the 1.5 release is a FIPS-compliant method=
for verifying the authenticity of CVD signature database archives and CDIF=
F signature database patch files. The feature is ready to test in this beta=
, but we are not yet distributing
the associated =93.cvd.sign=94 signature files for the daily, main, and by=
tecode databases. Because these files aren=92t available, ClamAV will fall =
back to using the legacy MD5-based RSA signature check. In other words, Fre=
shclam will continue to fail on FIPS-enabled
systems, for now. However, the unit tests do include a test signing key an=
d certificate pair along with tests to exercise signing and verification us=
ing the FIPS-compliant method.</i></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
<i>Note: Windows builds on GitHub Actions, which use VCPkg to provide C lib=
rary dependencies, are failing at this time.</i></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
<i>Tip: If you are downloading the source from the GitHub release page, the=
package labeled "clamav-1.5.0-beta.tar.gz" does not require an i=
nternet connection to build. All dependencies are included in this package.=
However, if you download the ZIP or TAR.GZ
generated by GitHub, located at the very bottom, then an internet connecti=
on will be required during the build to download additional Rust dependenci=
es.</i></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
For Docker users, there is no specific Docker tag for the beta, but you can=
use the clamav:unstable or clamav:unstable_base tags.</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
ClamAV 1.5.0 includes the following improvements and changes:</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
<b>Major changes</b></div>
<ul style=3D"text-align: left; margin: 0.5em 0px; padding-right: 2.5em; pad=
ding-left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Added checks to determine if an OLE2-based Microsoft Office document is enc=
rypted.</li><ul style=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-l=
eft: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1295" id=3D"OWA248b7523-7c21-4ff8-ab99-99a29308e51b" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Added the ability to record URLs found in HTML if the generate-JSON-metadat=
a feature is enabled. Also adds an option to disable this in case you want =
the JSON metadata feature but don't want to record HTML URL's. The ClamScan=
command-line option is =93--json-store-html-urls=3Dno=94.
The clamd.conf config option is =93JsonStoreHTMLUrls no=94.</li><ul s=
tyle=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list-=
style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1281" id=3D"OWA58ef49fe-4ada-4081-a113-9e2fd9e7fe2c" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Added regex support for the clamd.conf OnAccessExcludePath config opti=
on. This change courtesy of GitHub user b1tg.</li><ul style=3D"margin: 0.5e=
m 0px; padding-right: 2.5em; padding-left: 2.5em; list-style-position: init=
ial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1314" id=3D"OWAa24c42f6-7bdb-35bc-6649-806a4988bd10" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Added FIPS-compliant CVD signing/verification with external .sign file=
s. <br>
Freshclam will now attempt to download external signature files to accompan=
y existing .cvd databases and .cdiff patch files. Sigto=
ol now has commands to sign and verify using the external signatures.<br>
<br>
ClamAV now installs a 'certs' directory in the app config directory (e.g.&n=
bsp;<prefix>/etc/certs). The install path is configurable. The CMake =
option to configure the CVD certs directory is =93-D CVD_CERTS_DIRECTORY=3D=
PATH=94. <br>
<br>
Added sign/verify commands to Sigtool.<br>
<br>
New options to set an alternative CVD certs directory:<br>
- The command-line option for Freshclam, ClamD, ClamScan, and Sigtool is:&n=
bsp;--cvdcertsdir PATH<br>
- The environment variable for Freshclam, ClamD, ClamScan, and Sigtool is:&=
nbsp;CVD_CERTS_DIR<br>
<br>
The config option for Freshclam and ClamD is: CVDCertsDirectory PATH<b=
r>
<br>
Added two new APIs to the public clamav.h header:<br>
extern cl_error_t cl_cvdverify_ex(const char *file, <br>
 =
; const char *certs_directory);<b=
r>
extern cl_error_t cl_cvdunpack_ex(const char *file, <br>
 =
; const char *dir, <br>
 =
; bool dont_verify, <br>
 =
; const char *certs_directory);&n=
bsp;<br>
<br>
The original cl_cvdverify and cl_cvdunpack are deprecat=
ed. <br>
<br>
Added a cl_engine_field enum option CL_ENGINE_CVDCERTSDIR. Y=
ou may set this option with cl_engine_set_str and get it with&nbs=
p;cl_engine_get_str to override the compiled in default CVD certs dire=
ctory.<br>
<br>
Thank you to Mark Carey at SAP for inspiring work on this feature with an i=
nitial proof of concept for external-signature FIPS compliant CVD signing.&=
nbsp;</li><ul style=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-lef=
t: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1417" id=3D"OWA7a992472-ec25-0f62-7c71-2bced03c4aa2" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
</ul>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
<b>Other improvements</b></div>
<ul style=3D"text-align: left; margin: 0.5em 0px; padding-right: 2.5em; pad=
ding-left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Set a limit on the max-recursion config option. Users will no longer be abl=
e to set max-recursion higher than 100. This change prevents errors on star=
t up or possible crashes if encountering a file with that many layers of re=
cursion.</li><ul style=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-=
left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1264" id=3D"OWA93db562e-8225-29c7-29d3-d51d9d77a02d" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Build system: CMake improvements to support compiling for the AIX platform.=
This change is courtesy of GitHub user KamathForAIX.</li><ul style=3D"marg=
in: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list-style-positi=
on: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1387" id=3D"OWA52e66c8f-0fb9-271d-86ca-d58f4004cf9d" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Improve support for extracting malformed .zip archives. This change is cour=
tesy of Frederick Sell.</li><ul style=3D"margin: 0.5em 0px; padding-right: =
2.5em; padding-left: 2.5em; list-style-position: initial; list-style-type: =
disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1460" id=3D"OWAebd978d8-254a-4252-8267-8ab7a5eb7f65" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Windows: Code quality improvement for the ClamScan and ClamDScan --move and=
--remove options. This change is the courtesy of Maxim Suhanov.</li><ul st=
yle=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list-s=
tyle-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1470" id=3D"OWA04547548-6603-a6ef-11da-5ffd2d3a7b97" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Added file type recognition for some kinds of AI model files.<br>
<br>
The file type appears as a string parameter for these callback functions:<b=
r>
- clcb_pre_cache<br>
- clcb_pre_scan<br>
- clcb_file_inspection<br>
<br>
When scanning these files, the `type` parameter will now show "CL_TYPE=
_AI_MODEL" instead of "CL_TYPE_BINARY_DATA".</li><ul style=
=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list-styl=
e-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1476" id=3D"OWAe9c931fb-c6cf-afee-62c1-9ba2e8156b14" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
</ul>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
<b>Bug fixes</b></div>
<ul style=3D"text-align: left; margin: 0.5em 0px; padding-right: 2.5em; pad=
ding-left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Technical debt: Reduced email multipart message parser complexity.</li><ul =
style=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list=
-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1347" id=3D"OWA7ebe6402-5787-f22c-3f25-f2bb61749bea" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Fixed possible undefined behavior in inflate64 module. The inflate64 module=
is a modified version of the zlib library, taken from version 1.2.3 with s=
ome customization and with some cherry-picked fixes. This adds one addition=
al fix from zlib 1.2.9. Thank you
to TITAN Team for reporting this issue.</li><ul style=3D"margin: 0.5em 0px=
; padding-right: 2.5em; padding-left: 2.5em; list-style-position: initial; =
list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1469" id=3D"OWA5dd2b382-db13-71d1-1922-ba84f1026383" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Fixed a bug in ClamD that broke reporting of memory usage on Linux. The STA=
TS command can be used to monitor ClamD directly or through ClamDTOP. The m=
emory stats feature does not work on all platforms (e.g. Windows).</li><ul =
style=3D"margin: 0.5em 0px; padding-right: 2.5em; padding-left: 2.5em; list=
-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1465" id=3D"OWA51747ecf-f1b9-ae5d-30f6-6907998ad505" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Windows: Fix a build issue when the same library dependency is found in two=
different locations.</li><ul style=3D"margin: 0.5em 0px; padding-right: 2.=
5em; padding-left: 2.5em; list-style-position: initial; list-style-type: di=
sc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1453" id=3D"OWA31d99967-b09a-0ffc-26da-45922c4c69ec" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
Fix an infinite loop when scanning some email files in debug-mode. This fix=
is courtesy of Yoann Lecuyer</li><ul style=3D"margin: 0.5em 0px; padding-r=
ight: 2.5em; padding-left: 2.5em; list-style-position: initial; list-style-=
type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
<span style=3D"color: rgb(239, 62, 66);"><a href=3D"https://github.com/Cisc=
o-Talos/clamav/pull/1445" id=3D"OWAf1b2dbe8-a204-add3-4857-fb72bca8bd57" cl=
ass=3D"OWAAutoLink" style=3D"color: rgb(239, 62, 66);">GitHub pull request<=
/a></span></li></ul>
</ul>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
<b>Acknowledgments</b></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin: 0px 0px 10.6667px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MS=
FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=
0, 0);">
Special thanks to the following people for code contributions and bug repor=
ts:</div>
<ul style=3D"text-align: left; margin: 0.5em 0px; padding-right: 2.5em; pad=
ding-left: 2.5em; list-style-position: initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); text-i=
ndent: 0px; margin: 0px 0px 0.25em;">
b1tg</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontS=
ervice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0=
); text-indent: 0px; margin: 0px 0px 0.25em;">
Frederick Sell</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Apt=
os_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: r=
gb(0, 0, 0); text-indent: 0px; margin: 0px 0px 0.25em;">
KamathForAIX</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos=
_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=
(0, 0, 0); text-indent: 0px; margin: 0px 0px 0.25em;">
Mark Carey at SAP</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, =
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color=
: rgb(0, 0, 0); text-indent: 0px; margin: 0px 0px 0.25em;">
Maxim Suhanov</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Apto=
s_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rg=
b(0, 0, 0); text-indent: 0px; margin: 0px 0px 0.25em;">
TITAN Team</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_M=
SFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0=
, 0, 0); text-indent: 0px; margin: 0px 0px 0.25em;">
Yoann Lecuyer</li></ul>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div id=3D"Signature" class=3D"elementToProof">
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Val Snyder (they/t=
hem)</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">ClamAV Development=
</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Talos</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Cisco Systems, Inc=
.</span><br>
</div>
</div>
</body>
</html>
--_000_CH3PR11MB875006C5AA7C2CEB420418F6C6AD2CH3PR11MB8750namp_--
--===============5834904512871472508==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
clamav-announce mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-announce
http://www.clamav.net/contact.html#ml
--===============5834904512871472508==--