...
|
...
|
@@ -3,11 +3,11 @@ here may not be available in binary packages.
|
3
|
3
|
--
|
4
|
4
|
|
5
|
5
|
|
6
|
|
-0.90RC3
|
|
6
|
+0.90
|
|
7
|
+----
|
7
|
8
|
|
8
|
|
-The Release Candidate of the long awaited ClamAV 0.90 is ready for general
|
9
|
|
-testing! This version introduces lots of new interesting features and marks
|
|
9
|
+The ClamAV team is proud to announce the long awaited ClamAV 0.90.
|
|
10
|
+This version introduces lots of new interesting features and marks
|
10
|
11
|
a big step forward in the development of our antivirus engine.
|
11
|
12
|
|
12
|
13
|
The most important change is the introduction of scripted updates.
|
...
|
...
|
@@ -28,18 +28,17 @@ is no longer required.
|
28
|
28
|
Cosmetic changes apart, the 0.9x series introduces lots of new code, but some
|
29
|
29
|
parts are not compiled in by default because they are not ready for production
|
30
|
30
|
systems yet. You are encouraged to pass the --enable-experimental flag to
|
31
|
|
-./configure when compiling ClamAV. If you find a bug, please take some time
|
32
|
|
-to report it on our bugzilla: http://bugs.clamav.net. Your help in testing the
|
33
|
|
-new code is really appreciated.
|
34
|
|
-
|
35
|
|
-The experimental code introduces many improvements in terms of detection
|
36
|
|
-rate and performances.
|
|
31
|
+./configure when compiling ClamAV. The experimental code introduces many
|
|
32
|
+improvements in terms of detection rate and performances. If you find a bug,
|
|
33
|
+please take some time to report it on our bugzilla: http://bugs.clamav.net.
|
|
34
|
+Your help in testing the new code is really appreciated. The experimental code
|
|
35
|
+introduces many improvements in terms of detection rate and performances.
|
37
|
36
|
|
38
|
37
|
RAR3, SIS and SFX archives support is finally available together with
|
39
|
|
-new unpackers and decryptors: pespin, sue, yc, wwpack32 and others.
|
40
|
|
-Additionally, ClamAV now includes better mechanisms for scanning ELF, PDF
|
41
|
|
-and tar files. The email decoding has been improved to reduce both the memory
|
42
|
|
-requirements and the time taken to process attachments.
|
|
38
|
+new unpackers and decryptors: pespin, sue, yc, wwpack32, nspack, mew, upack
|
|
39
|
+and others. Additionally, ClamAV now includes better mechanisms for scanning
|
|
40
|
+ELF, PDF and tar files. The email decoding has been improved to reduce both
|
|
41
|
+the memory requirements and the time taken to process attachments.
|
43
|
42
|
|
44
|
43
|
As part of the Google Summer of Code program, we have introduced support for
|
45
|
44
|
a new phishing signatures format that has proved very effective in detecting
|
...
|
...
|
@@ -49,16 +48,17 @@ comparing the real site with the URL displayed to the user in the message.
|
49
|
49
|
|
50
|
50
|
On the performance side, support for the MULTISCAN command has been
|
51
|
51
|
implemented in clamd, allowing to scan multiple files simultaneously.
|
52
|
|
-Support for Sensory Networks NodalCore Acceleration
|
53
|
|
-(http://www.clamav.net/nodalcore/) in ClamAV is now available and will be
|
|
52
|
+Support for Sensory Networks' NodalCore acceleration technology
|
|
53
|
+(http://www.clamav.net/nodalcore/) is now available in ClamAV and will be
|
54
|
54
|
compiled in if the ncore libraries are detected at compile time. NodalCore
|
55
|
55
|
acceleration allows highly improved scan speeds on systems equipped with
|
56
|
56
|
NodalCore cards.
|
57
|
57
|
|
58
|
|
-Detailed list of changes (to be finished):
|
|
58
|
+Detailed list of changes:
|
59
|
59
|
|
60
|
60
|
-) libclamav:
|
61
|
61
|
+ New unpacker for RAR3, RAR2 and RAR1
|
|
62
|
+ + Rewritten unpackers for Zip and CAB files
|
62
|
63
|
+ Support for RAR-SFX, Zip-SFX and CAB-SFX archives
|
63
|
64
|
+ New PE parsing model:
|
64
|
65
|
- Accurate virtual and raw size and offset calculations
|
...
|
...
|
@@ -92,11 +92,15 @@ Detailed list of changes (to be finished):
|
92
|
92
|
configured individually)
|
93
|
93
|
+ TCP and local sockets can be operated simultaneously
|
94
|
94
|
+ New command: MULTISCAN (scan directory with multiple threads)
|
95
|
|
- + New option PhishingSignatures
|
96
|
95
|
+ New option AlgorithmicDetection
|
97
|
|
- + New option NodalCore
|
98
|
|
- + New option PhishingStrictURLCheck
|
99
|
96
|
+ New option ScanELF
|
|
97
|
+ + New option NodalCoreAcceleration (requires hardware accelerator)
|
|
98
|
+ + New option PhishingSignatures
|
|
99
|
+ + New options to control the phishing module:
|
|
100
|
+ - PhishingRestrictedScan
|
|
101
|
+ - PhishingScanURLs
|
|
102
|
+ - PhishingAlwaysBlockSSLMismatch
|
|
103
|
+ - PhishingAlwaysBlockCloak
|
100
|
104
|
|
101
|
105
|
-) clamav-milter:
|
102
|
106
|
+ Black list mode: optionally black lists an IP for a configurable amount
|
...
|
...
|
@@ -112,20 +116,36 @@ Detailed list of changes (to be finished):
|
112
|
112
|
-) clamscan:
|
113
|
113
|
+ New options: --no-phishing-sigs, --no-algorithmic (disable phishing and
|
114
|
114
|
algorithmic detection respectively)
|
115
|
|
- + New option: --ncore
|
|
115
|
+ + New options to control the phishing module: --no-phishing-scan-urls,
|
|
116
|
+ --no-phishing-restrictedscan, --phishing-ssl, --phishing-cloak
|
|
117
|
+ + New option: --ncore (requires hardware accelerator)
|
116
|
118
|
+ New option: --no-elf
|
117
|
119
|
+ New option: --copy
|
118
|
120
|
|
119
|
121
|
-) freshclam:
|
120
|
122
|
+ Interpreter for .cdiff files (scripted updates)
|
121
|
123
|
+ Initial version of mirror manager
|
122
|
|
- + New option: --list-mirrors
|
|
124
|
+ + New option: --list-mirrors (list details on mirrors accessed by the mirror
|
|
125
|
+ manager)
|
123
|
126
|
+ New option HTTPUserAgent to force different User-Agent header
|
124
|
127
|
|
125
|
128
|
-) sigtool:
|
126
|
129
|
+ New option: --utf16-decode (decode UTF16 encoded files)
|
127
|
130
|
+ New options: --diff, --run-cdiff, --verify-cdiff (update script management)
|
|
131
|
+ + New option: --mdb (generated .mdb compatible signatures)
|
|
132
|
+
|
|
133
|
+-) clamconf: initial version of configuration utility for clamd and freshclam
|
|
134
|
+
|
|
135
|
+We are happy to announce new interesting software with support for ClamAV:
|
|
136
|
+
|
|
137
|
+ + AqMail - a POP3 client with additional filtering
|
|
138
|
+ + ClamFS - a FUSE-based file system with on-access anti-virus scanning
|
|
139
|
+ + c-icap - an ICAP server coded in C with support for ClamAV
|
|
140
|
+ + MailCleaner - a complete email filtering gateway
|
|
141
|
+ + mod_streamav - a ClamAV based antivirus filter for Apache 2
|
|
142
|
+ + pyClamd - a python interface to Clamd
|
128
|
143
|
|
|
144
|
+More information at http://www2.clamav.net/download/third-party-tools/
|
129
|
145
|
|
130
|
146
|
--
|
131
|
147
|
The ClamAV team (http://www.clamav.net/team)
|