2010-04-14 16:49:22 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Apr 14 15:59:45 CEST 2010 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Extended the libmilter compatibility patch for SLES9.
|
|
|
|
|
|
- Explicitly disabling LLVM for versions older than SLES10 and
|
|
|
|
|
|
archs other than i586 and x86_64.
|
|
|
|
|
|
|
2010-04-13 21:23:12 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Apr 12 11:42:39 CEST 2010 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Leave it up to configure to decide whether the arch supports JIT
|
|
|
|
|
|
compiling through LLVM (currntly only x86 and x86_64).
|
|
|
|
|
|
|
2010-04-08 22:11:51 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Apr 7 19:17:05 CEST 2010 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- ClamAV 0.96 introduces new malware detection mechanisms and
|
|
|
|
|
|
other significant improvements to the scan engine.
|
|
|
|
|
|
The key features are:
|
|
|
|
|
|
|
|
|
|
|
|
* The Bytecode Interpreter: the interpreter built into LibClamAV
|
|
|
|
|
|
allows the signature writers to create and distribute very
|
|
|
|
|
|
complex detection routines and remotely enhance the scanner’s
|
|
|
|
|
|
functionality.
|
|
|
|
|
|
|
|
|
|
|
|
* Heuristic improvements: improve the PE heuristics detection
|
|
|
|
|
|
engine by adding support of bogus icons and fake PE header
|
|
|
|
|
|
information. In a nutshell, ClamAV can now detect malware that
|
|
|
|
|
|
tries to disguise itself as a harmless application by using
|
|
|
|
|
|
the most common Windows program icons.
|
|
|
|
|
|
|
|
|
|
|
|
* Signature Improvements: logical signature improvements to
|
|
|
|
|
|
allow more detailed matching and referencing groups of
|
|
|
|
|
|
signatures. Additionally, improvements to wildcard matching on
|
|
|
|
|
|
word boundaries and newlines.
|
|
|
|
|
|
|
|
|
|
|
|
* Support for new archives: 7zip, InstallShield and CPIO.
|
|
|
|
|
|
LibClamAV can now transparently unpack and inspect their
|
|
|
|
|
|
contents.
|
|
|
|
|
|
|
|
|
|
|
|
* Support for new executable file formats: 64-bit ELF files and
|
|
|
|
|
|
OS X Universal Binaries with Mach-O files. Additionally, the
|
|
|
|
|
|
PE module can now decompress and inspect executables packed
|
|
|
|
|
|
with UPX 3.0.
|
|
|
|
|
|
|
|
|
|
|
|
* Support for DazukoFS in clamd
|
|
|
|
|
|
|
|
|
|
|
|
* Performance improvements: overall performance improvements and
|
|
|
|
|
|
memory optimizations for a better overall resource utilization
|
|
|
|
|
|
experience.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Mar 11 16:21:19 CET 2010 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.96rc1
|
|
|
|
|
|
- Added gcc-c++ to BuildRequires to enable the JIT compiler.
|
|
|
|
|
|
|
2010-02-09 22:07:58 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Feb 9 14:29:29 CET 2010 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
|
|
- build -db subpackage as noarch
|
|
|
|
|
|
|
2009-10-30 16:51:31 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Oct 29 11:32:57 CET 2009 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Bugfix release 0.95.3 (bnc#550929)
|
|
|
|
|
|
- Changes include:
|
|
|
|
|
|
* Fix various error path leaks.
|
|
|
|
|
|
* Drop hardcoded offset limits for embedded objects.
|
|
|
|
|
|
* Fix matching of logical sigs.
|
|
|
|
|
|
* Fix handling of broken .ldb sigs.
|
|
|
|
|
|
* Improve handling of PDF files.
|
|
|
|
|
|
* Work around possible race condition during db updates.
|
|
|
|
|
|
* Fix detection of encrypted zip files embedded into other files.
|
|
|
|
|
|
* Properly handle clamd disconnection in clamav-milter.
|
|
|
|
|
|
|
2009-06-17 15:41:46 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jun 17 12:27:48 CEST 2009 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- clamav-sles9.patch: smfi_insheader() doesn't exist in libmilter
|
|
|
|
|
|
on SLES9, so we revert a recent change that introduced its
|
|
|
|
|
|
usage to improve the handling of DomainKeys Identified Mail.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jun 15 12:17:33 CEST 2009 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security release: 0.95.2 (bnc#511963).
|
|
|
|
|
|
|
2009-04-18 13:53:13 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Apr 14 16:04:26 CEST 2009 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security release: 0.95.1 (bnc#493562)
|
|
|
|
|
|
|
2009-04-07 12:45:24 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Apr 6 17:14:47 CEST 2009 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Version 0.95 also fixes two security issues:
|
|
|
|
|
|
bnc#491935 and bnc#491938.
|
|
|
|
|
|
- Removed unneeded tcpd build dependency.
|
|
|
|
|
|
- Removed obsolete configure switches.
|
|
|
|
|
|
- ncurses-devel is needed for building clamtop.
|
|
|
|
|
|
- Patched clamav-milter up to the latest upstream version to fix
|
|
|
|
|
|
the non-detection of virus code outside of attachments.
|
|
|
|
|
|
(bnc#445137)
|
|
|
|
|
|
- Improved rcclamd to print a more instructive message when the
|
|
|
|
|
|
virus database files are missing.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Mar 24 18:33:34 CET 2009 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version 0.95 (bnc#488317):
|
|
|
|
|
|
|
|
|
|
|
|
* clamav-milter got rewritten. Standalone mode got dropped and
|
|
|
|
|
|
using multiple instances of clamd in parallel got added for
|
|
|
|
|
|
load sharing and fail-safety. The command lin
|
|
|
|
|
|
|
|
|
|
|
|
* Changes to the libclamav API will make future changes less
|
|
|
|
|
|
likely, but require adjustment of applications linking to
|
|
|
|
|
|
libclamav.
|
|
|
|
|
|
|
|
|
|
|
|
* Numerous other bug fixes and improvements.
|
|
|
|
|
|
|
|
|
|
|
|
* libGMP is no longer needed.
|
|
|
|
|
|
|
|
|
|
|
|
- Drop support for versions older than 9.1/SLES9.
|
|
|
|
|
|
|
|
|
|
|
|
- Improve init script of clamav-milter (bnc#445137).
|
|
|
|
|
|
|
2008-12-01 17:51:11 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Dec 1 16:32:27 CET 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version 0.94.2 fixes recursion limits in JPEG scanning code
|
|
|
|
|
|
(bnc#450207).
|
|
|
|
|
|
|
2008-11-11 15:27:45 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Nov 11 11:24:28 CET 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Version 0.94.1 also fixes bnc#443311.
|
|
|
|
|
|
- Disabled valgrind tests again, as they show false positives with
|
|
|
|
|
|
current glibc.
|
|
|
|
|
|
|
2008-11-08 00:46:45 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Nov 7 16:12:37 CET 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New bugfix release: 0.94.1:
|
|
|
|
|
|
* daily.ign was overwriting local.ign
|
|
|
|
|
|
* vba_extract.c: get_unicode_name off-by-one
|
|
|
|
|
|
* Don't execute special events twice in interactive mode
|
|
|
|
|
|
* Fix leak on rare error path in clamd/scanner.c.
|
|
|
|
|
|
* Fix URL parsing in phishing checks.
|
|
|
|
|
|
* Improve the javascript scanner.
|
|
|
|
|
|
* Fixes to bzip2 uncompression.
|
|
|
|
|
|
* Properly close descriptors before forking in clamav-milter.
|
|
|
|
|
|
* enable ScanPDF by default
|
|
|
|
|
|
* Testsuite improvements
|
|
|
|
|
|
* Many more minor bug fixes.
|
|
|
|
|
|
- Fix pid file format of clamav-milter.
|
|
|
|
|
|
- Improve clamav-milter configuration and init script (bnc#347684).
|
|
|
|
|
|
- Suppressing valgrind error on iconv_open.
|
|
|
|
|
|
|
2008-09-29 17:30:44 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Sep 29 13:58:15 CEST 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Limit valgrind to i586 and x86_64.
|
|
|
|
|
|
|
2008-09-05 22:14:53 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Sep 3 09:26:12 CEST 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Added check-devel and valgrind to BuildRequires for 10.3 and
|
|
|
|
|
|
newer to support the new unit testing feature. This does not
|
|
|
|
|
|
add new runtime dependencies.
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.94:
|
|
|
|
|
|
|
|
|
|
|
|
* fix out-of-memory null dereferenc (bb#1141)
|
|
|
|
|
|
|
|
|
|
|
|
* fix possible invalid memory access (bb#1089)
|
|
|
|
|
|
|
|
|
|
|
|
* fix error path memleaks and fd leaks (bb#1141)
|
|
|
|
|
|
|
|
|
|
|
|
* Logical Signatures: The logical signature technology uses
|
|
|
|
|
|
operators such as AND, OR and NOT to allow the combination
|
|
|
|
|
|
of more than one signature into one entry in the signature
|
|
|
|
|
|
database resulting in more detailed and flexible pattern
|
|
|
|
|
|
matching.
|
|
|
|
|
|
|
|
|
|
|
|
* Anti-phishing Technology: Users can now change the priority
|
|
|
|
|
|
and reporting of ClamAV's heuristic anti-phishing scanner
|
|
|
|
|
|
within the detection engine process.
|
|
|
|
|
|
|
|
|
|
|
|
* Disassembly Engine: The initial version of the disassembly
|
|
|
|
|
|
engine improves ClamAV's detection abilities.
|
|
|
|
|
|
|
|
|
|
|
|
* PUA Detection: Users can now decide which PUA signatures
|
|
|
|
|
|
should be loaded
|
|
|
|
|
|
|
|
|
|
|
|
* Data Loss Prevention (DLP): This version includes a new
|
|
|
|
|
|
module that, when enabled, scans data for the inclusion of
|
|
|
|
|
|
US formated Social Security Numbers and credit card numbers.
|
|
|
|
|
|
|
|
|
|
|
|
* IPv6 Support: Freshclam now supports IPv6
|
|
|
|
|
|
|
|
|
|
|
|
* Improved Scanning of Scripts: The normalization of scripts
|
|
|
|
|
|
now covers JavaScript
|
|
|
|
|
|
|
|
|
|
|
|
* Improved QA and Unit Testing: The improved QA process now
|
|
|
|
|
|
includes API testing and new library of test files in
|
|
|
|
|
|
various formats that are tested on a wide variety of systems.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jul 8 14:44:33 CEST 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version 0.93.3 (bnc#406994):
|
|
|
|
|
|
* make sigtool compatible with the new OLE2 scan scheme (bb#1086)
|
|
|
|
|
|
* add missing checks for recv() failures (bb#1079)
|
|
|
|
|
|
* add missing check for file open failure (bb #1083).
|
|
|
|
|
|
* fix handling of nodes which also match single bytes (bb#1054)
|
|
|
|
|
|
* libclamav: faster loading of uncompressed .cld files, also
|
|
|
|
|
|
fixes bb#1064
|
|
|
|
|
|
* freshclam/manager.c: add missing closesocket on error path
|
|
|
|
|
|
(bb #1073).
|
|
|
|
|
|
|
2008-07-11 22:41:26 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jun 16 15:57:42 CEST 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update 0.93.1 (bnc#399302, CVE-2008-2713)
|
|
|
|
|
|
- Improved clamav-milter configuration and init script (bnc#382907)
|
|
|
|
|
|
|
2008-04-21 18:37:35 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Apr 18 19:04:35 CEST 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Convert the database to the new format instead of running
|
|
|
|
|
|
freshclam to re-fetch it (bnc#380787).
|
|
|
|
|
|
- Added main.cld and daily.cld as %ghost
|
|
|
|
|
|
- Refined the logic in %post of clamav-db as to when the dist
|
|
|
|
|
|
files need to get copied over.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Apr 15 13:07:00 CEST 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update 0.93 (bnc#350987, bnc#368963).
|
|
|
|
|
|
- CVE-2007-6595: symlink attack on temporary files
|
|
|
|
|
|
- CVE-2007-6596: recognize Base64 UUEncoded archives
|
|
|
|
|
|
- CVE-2008-1100: Buffer overflow in the cli_scanpe function.
|
|
|
|
|
|
- Remove bogus dependencies from libclamav.pc (bnc#196236)
|
|
|
|
|
|
- Run freshclam on update before restarting clamd to convert the
|
|
|
|
|
|
database into the new format.
|
|
|
|
|
|
|
2008-02-25 17:07:24 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Feb 13 12:12:56 CET 2008 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update 0.92.1: (bnc#361374)
|
|
|
|
|
|
* CVE-2008-0318: libclamav PE File Integer Overflow Vulnerability
|
|
|
|
|
|
* CVE-2008-0728: heap corruption
|
|
|
|
|
|
|
2008-01-17 22:13:55 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jan 15 21:21:41 CET 2008 - aj@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Fix open call to build again.
|
|
|
|
|
|
|
2008-02-25 17:07:24 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Dec 14 14:56:29 CET 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update 0.92 (#343277):
|
|
|
|
|
|
* CVE-2007-6335 - MEW PE File Integer Overflow
|
|
|
|
|
|
* CVE-2007-6336 - Off-by-one error in LZX_READ_HUFFSYM()
|
|
|
|
|
|
* CVE-2007-6337 - bzlib issue
|
|
|
|
|
|
- Make clamd error out if /dev/null can't be opened (#300019).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Nov 5 16:50:30 CET 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Added sendmail and sendmail-devel to BuildRequires.
|
|
|
|
|
|
- Enabled clamav-milter and added an init script for it.
|
|
|
|
|
|
(fate#302362)
|
|
|
|
|
|
|
2007-08-24 00:50:29 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Aug 21 18:55:36 CEST 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Bugfix update 0.91.2.
|
|
|
|
|
|
- Fixes some NULL dereferences and variable initialisation problems
|
|
|
|
|
|
- Fix some rpmlint warnings in init scripts.
|
|
|
|
|
|
|
2007-08-10 01:43:25 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Aug 9 11:06:45 CEST 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Inform the user that to use Clamuko, clamd needs to run as root,
|
|
|
|
|
|
so that it can read the files it needs to scan (#201730).
|
|
|
|
|
|
|
2007-07-19 04:27:36 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jul 17 13:39:44 CEST 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Stability and bugfix update: 0.91.1 (#292297)
|
|
|
|
|
|
- Run ldconfig on (un)installation.
|
|
|
|
|
|
- Make %check conditional to fix building on SLES8.
|
|
|
|
|
|
|
2007-07-12 02:11:37 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2007-07-16 07:48:13 +02:00
|
|
|
|
Sun Jul 15 00:24:08 CEST 2007 - lrupp@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- add zlib-devel to build requires
|
|
|
|
|
|
- suppress some false positives from rpmlint
|
|
|
|
|
|
- added %check section and remove unneeded INSTALL file from %doc
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2007-07-12 02:11:37 +02:00
|
|
|
|
Wed Jul 11 17:27:51 CEST 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Update to version 0.91 (#289830)
|
|
|
|
|
|
- improved handling of .mdb files (fixes long startup times)
|
|
|
|
|
|
- Adds anti-phishing support
|
|
|
|
|
|
- unpacker for NSIS (Nullsoft Scriptable Install System)
|
|
|
|
|
|
self-extracting archives
|
|
|
|
|
|
- unpacker for ASPack 2.12
|
|
|
|
|
|
- new implementation of the Aho-Corasick pattern matcher providing
|
|
|
|
|
|
better detection for wildcard enabled signatures
|
|
|
|
|
|
- support for nibble matching and floating offsets
|
|
|
|
|
|
- extraction of PE files embedded into other executables
|
|
|
|
|
|
- better handling of PE & UPX
|
|
|
|
|
|
- removed dependency on libcurl (improves stability)
|
|
|
|
|
|
- many other improvements and bugfixes
|
|
|
|
|
|
|
2007-05-31 20:47:36 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu May 31 16:45:25 CEST 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update: 0.90.3 (#279536)
|
|
|
|
|
|
- libclamav/unsp.c: fix end of buffer calculation (bb#464)
|
|
|
|
|
|
- libclamav/others.c: use strict permissions (0600) for temporary files
|
|
|
|
|
|
created in cli_gentempstream() (bb#517).
|
|
|
|
|
|
- libclamav/unrar/unrar.c: heap corruption causing DoS with corrupted
|
|
|
|
|
|
rar archive, better handle truncated files
|
|
|
|
|
|
- libclamav/phishcheck.c: isURL() regex execution hangs on Solaris
|
|
|
|
|
|
- libclamav/ole2_extract.c: detect block list loop (bb#466)
|
|
|
|
|
|
|
2007-04-15 10:57:41 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Apr 13 11:48:12 CEST 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update: 0.90.2 (#264189)
|
|
|
|
|
|
- CVE-2007-1997: CAB File Unstore Buffer Overflow Vulnerability
|
|
|
|
|
|
- CVE-2007-1745: file descriptor leak in CHM handler
|
|
|
|
|
|
- File descriptor leaks in libclamav/pdf.c and libclamav/lockdb.c
|
|
|
|
|
|
|
2007-03-06 09:02:48 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Mar 5 16:00:56 CET 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Extended the database presence check in rcclamd to accept the
|
|
|
|
|
|
main.inc directory in addition to the main.cvd file, because
|
|
|
|
|
|
freshclam can delete the file during a scripted update.
|
|
|
|
|
|
|
2007-03-03 12:44:39 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Mar 2 14:38:54 CET 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Update to version 0.90.1 (#250566)
|
|
|
|
|
|
- Some bug fixes and code improvements
|
|
|
|
|
|
- Bumps the version of libclamav's soname, which should have been
|
|
|
|
|
|
done in 0.90 already.
|
|
|
|
|
|
|
2007-02-25 12:09:43 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Feb 20 14:55:04 CET 2007 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Update to version 0.90 (#246214) to fix two Vulnerabilities:
|
|
|
|
|
|
- CAB File Denial of Service (CVE-2007-0897)
|
|
|
|
|
|
- MIME Parsing Directory Traversal (CVE-2007-0898)
|
|
|
|
|
|
- Other changes of 0.90 include:
|
|
|
|
|
|
- Changed config file syntax (automatic conversion is done by the
|
|
|
|
|
|
RPM on update)
|
|
|
|
|
|
- New unpacker for RAR3, RAR2 and RAR1
|
|
|
|
|
|
- Rewritten unpackers for Zip and CAB files
|
|
|
|
|
|
- Support for RAR-SFX, Zip-SFX and CAB-SFX archives
|
|
|
|
|
|
- New PE parsing model
|
|
|
|
|
|
- Support for PE32+ (64-bit) executables
|
|
|
|
|
|
- Support for MD5 signatures based on PE sections (.mdb)
|
|
|
|
|
|
- ELF file parser
|
|
|
|
|
|
- Support for Sensory Networks' NodalCore hardware acceleration
|
|
|
|
|
|
technology
|
|
|
|
|
|
- Algorithmic detection can be controlled with CL_SCAN_ALGORITHMIC
|
|
|
|
|
|
- Support for new obfuscators: SUE, Y0da Cryptor, CryptFF
|
|
|
|
|
|
- Support for new packers: NsPack, wwpack32, MEW, Upack
|
|
|
|
|
|
- Support for SIS files (SymbianOS packages)
|
|
|
|
|
|
- Support for PDF and RTF files
|
|
|
|
|
|
- TCP and local sockets can be operated simultaneously
|
|
|
|
|
|
- New command: MULTISCAN (scan directory with multiple threads)
|
|
|
|
|
|
- There where also some API/ABI changes which might affect packages
|
|
|
|
|
|
that link against libclamav. Affected functions are: cl_loaddb,
|
|
|
|
|
|
cl_loaddir and cl_scanbuff.
|
|
|
|
|
|
- Cleaned up daemonizing of clamd and freshclam.
|
|
|
|
|
|
|
2007-01-16 00:07:16 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Dec 12 12:20:34 CET 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update: 0.88.7 (#227827, CVE-2006-5874)
|
|
|
|
|
|
- handle consecutive errors in base64 decoding
|
|
|
|
|
|
- honour recursion limit when scanning email messages
|
|
|
|
|
|
- clamscan: new option --mail-max-recursion
|
|
|
|
|
|
- libclamav/untar.c: honour archive limits
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Nov 7 15:58:32 CET 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Add homedir of user vscan to the package (FATE300731).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Nov 6 12:17:53 CET 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Bugfix release: 0.88.6 (#218313)
|
|
|
|
|
|
- freshclam: apply timeout patch from Everton da Silva Marques
|
|
|
|
|
|
(new options: ConnectTimeout and ReceiveTimeout)
|
|
|
|
|
|
- clamd: change stack size at the right place (closes bug#103)
|
|
|
|
|
|
- libclamav/petite.c: sanity check the number of rebuilt sections
|
|
|
|
|
|
(speeds up handling of malformed files)
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Oct 17 15:26:12 CEST 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Bugfix release 0.88.5 fixes two serious security issues.
|
|
|
|
|
|
#212898, CVE-2006-4182, CVE-2006-5295
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Aug 8 11:02:28 CEST 2006 - lnussel@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version 0.88.4 fixes heap overflow in UPX decoder
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jul 6 16:02:15 CEST 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Bugfix release 0.88.3:
|
|
|
|
|
|
- fix possible false matches of alternatives
|
|
|
|
|
|
- Large binhex files were not being handled gracefully.
|
|
|
|
|
|
- fix zero allocation warning
|
|
|
|
|
|
- Added bc and pkgconfig to BuildRequires to fix curl version
|
|
|
|
|
|
detection.
|
|
|
|
|
|
- Prevent a file conflict on the database files when main and db
|
|
|
|
|
|
packages of different versions are installed.
|
|
|
|
|
|
- Renamed clamav.conf to clamd.conf for SLES9.
|
|
|
|
|
|
- Added the db subpackage to SLES9.
|
|
|
|
|
|
- Bugzilla: 190647
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue May 2 11:31:54 CEST 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.88.2
|
|
|
|
|
|
- Fixes a buffer overflow in freshclam's get_database function
|
|
|
|
|
|
(CVE-2006-1989, Bug #171496).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Apr 10 10:26:49 CEST 2006 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Fixed several implicit warnings which lead to failures
|
|
|
|
|
|
on 64bit platforms.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Apr 5 14:50:00 CEST 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.88.1, fixes several security issues:
|
|
|
|
|
|
CVE-2006-1614, CVE-2006-1615, CVE-2006-1630, bug #164039.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Feb 9 15:30:43 CET 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Removed unneeded dependencies from the init script to break a
|
|
|
|
|
|
dependency loop.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jan 25 21:35:02 CET 2006 - mls@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sat Jan 14 13:08:57 CET 2006 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Add gmp-devel to nfb
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jan 12 16:53:26 CET 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Added gcc-4.1 stack protection (-fstack-protector).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jan 9 19:41:07 CET 2006 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.88 (Bug #142298).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Nov 7 17:44:21 CET 2005 - lnussel@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Security update: version 0.87.1 (#132305, CVE-2005-3239,
|
|
|
|
|
|
CVE-2005-3303)
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Sep 19 12:18:45 CEST 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.87 (bug #117648).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jul 25 12:22:09 CEST 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.86.2
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jul 14 17:37:09 CEST 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.86.1
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jun 21 15:33:53 CEST 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.86
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue May 17 11:21:27 CEST 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.85.1 (Bug #81264).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed May 11 18:28:03 CEST 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.85 (Bug #81264).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue May 3 11:33:01 CEST 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.84 (Bug #81264).
|
|
|
|
|
|
- Added and special-cased the patch that is needed for 9.1/SLES9.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Mar 11 16:34:24 CET 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Fixed %doc file list (wildcards matched too much).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Feb 28 14:31:56 CET 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.83
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Feb 7 16:45:47 CET 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.82
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jan 27 12:22:11 CET 2005 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.81
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Nov 11 14:56:06 CET 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- pkgconfig files go to libdir rather than /usr/lib.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Nov 11 11:02:01 CET 2004 - coolo@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- fixing file list for debug packages
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Nov 3 15:38:26 CET 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Fixed path to freshclam in init script, and rcfreshclam link.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Oct 18 17:36:31 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Updated to the final 0.80 release.
|
|
|
|
|
|
|
|
|
|
|
|
- Added a runlevel script for freshclam.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Oct 11 18:39:37 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Updated to 0.80rc4.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Sep 29 15:04:36 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Updated to 0.80rc3. The README says:
|
|
|
|
|
|
"This release candidate eliminates possible false positive alerts
|
|
|
|
|
|
in UPX/FSG compressed files and clarifies behaviour of default
|
|
|
|
|
|
actions in clamd and freshclam."
|
|
|
|
|
|
|
|
|
|
|
|
- This also eliminates the need to patch configure.in in order to
|
|
|
|
|
|
recognize resolv.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Sep 23 15:54:11 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Updated to 0.80rc2 which fixes a critical bug in the handling of
|
|
|
|
|
|
empty lines in text/plain emails.
|
|
|
|
|
|
|
|
|
|
|
|
- Build with curl support.
|
|
|
|
|
|
|
|
|
|
|
|
- Fixed building of shared libraries instead of static.
|
|
|
|
|
|
|
|
|
|
|
|
- Removed unneeded %run_ldconfig calls.
|
|
|
|
|
|
|
|
|
|
|
|
- Fixed file lists.
|
|
|
|
|
|
|
|
|
|
|
|
- Check for main.cvd instead of daily.cvd on daemon startup.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Sep 20 17:44:02 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Updated to version 0.80rc which adds support for more file
|
|
|
|
|
|
formats, and HTML parsing. See the README file for details.
|
|
|
|
|
|
|
|
|
|
|
|
- Added a warning to the init script if no virus database is
|
|
|
|
|
|
installed.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Aug 5 10:38:15 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.75.1
|
|
|
|
|
|
- Moved the virus database files into a subpackage, as they are
|
|
|
|
|
|
large and not needed if the database is kept up to date with
|
|
|
|
|
|
freshclam.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Jul 23 15:37:13 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.75
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jul 8 19:31:41 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- Added -fno-strict-aliasing to CFLAGS.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jul 5 17:12:50 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.74
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jun 15 17:06:58 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.73
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Apr 26 18:17:35 CEST 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.70
|
|
|
|
|
|
- Changes the format of the virus definition file.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Feb 16 16:01:01 CET 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.67
|
|
|
|
|
|
- Added support for tcpd (/etc/hosts.{allow,deny}).
|
|
|
|
|
|
- Obsoletes clamav-manager.patch.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Feb 13 18:26:01 CET 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New version: 0.66
|
|
|
|
|
|
- Fixes a remote DoS vulnerability (Bug #34412).
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jan 27 12:19:51 CET 2004 - max@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- New package: ClamAV Anti-Virus Toolkit
|
|
|
|
|
|
|
