git-svn: trunk@2465
Tomasz Kojm authored on 2006/10/30 21:50:05... | ... |
@@ -3,12 +3,12 @@ here may not be available in binary packages. |
3 | 3 |
-- |
4 | 4 |
|
5 | 5 |
|
6 |
-0.90RC1 |
|
6 |
+0.90RC2 |
|
7 | 7 |
------- |
8 | 8 |
|
9 |
-The first Release Candidate of the long awaited ClamAV 0.90 is ready for |
|
10 |
-general testing! This version introduces lots of new interesting features |
|
11 |
-and marks a big step forward in the development of our antivirus engine. |
|
9 |
+The Release Candidate of the long awaited ClamAV 0.90 is ready for general |
|
10 |
+testing! This version introduces lots of new interesting features and marks |
|
11 |
+a big step forward in the development of our antivirus engine. |
|
12 | 12 |
|
13 | 13 |
The most important change is the introduction of scripted updates. |
14 | 14 |
Instead of transferring the whole cvd file at each update, only the |
... | ... |
@@ -38,7 +38,8 @@ rate and performances. |
38 | 38 |
RAR3, SIS and SFX archives support is finally available together with |
39 | 39 |
new unpackers and decryptors: pespin, sue, yc, wwpack32 and others. |
40 | 40 |
Additionally, ClamAV now includes better mechanisms for scanning ELF, PDF |
41 |
-and tar files. |
|
41 |
+and tar files. The email decoding has been improved to reduce both the memory |
|
42 |
+requirements and the time taken to process attachments. |
|
42 | 43 |
|
43 | 44 |
As part of the Google Summer of Code program, we have introduced support for |
44 | 45 |
a new phishing signatures format that has proved very effective in detecting |
... | ... |
@@ -54,6 +55,64 @@ compiled in if the ncore libraries are detected at compile time. NodalCore |
54 | 54 |
acceleration allows highly improved scan speeds on systems equipped with |
55 | 55 |
NodalCore cards. |
56 | 56 |
|
57 |
+Detailed list of changes (to be finished): |
|
58 |
+ |
|
59 |
+-) libclamav: |
|
60 |
+ + New unpacker for RAR3, RAR2 and RAR1 |
|
61 |
+ + Support for RAR and Zip SFX archives |
|
62 |
+ + Support for PE32+ (64-bit) executables |
|
63 |
+ + Support for PE section based MD5 signatures (.mdb) |
|
64 |
+ + ELF file parser |
|
65 |
+ + Support for Sensory Networks' NodalCore hardware acceleration technology |
|
66 |
+ + Advanced phishing detection module (experimental) |
|
67 |
+ + Phishing detection can be disabled with CL_DB_NOPHISHING |
|
68 |
+ + Signatures are stored in separate trees depending on their target type |
|
69 |
+ + Algorithmic detection can be controlled with CL_SCAN_ALGO |
|
70 |
+ + Support for obfuscators: SUE (experimental), Y0da Cryptor, CryptFF |
|
71 |
+ + Support for unpackers: NsPack (experimental), wwpack32 |
|
72 |
+ + Support for SIS files (SybmianOS installer packages) |
|
73 |
+ + Support for PDF files |
|
74 |
+ |
|
75 |
+-) clamd: |
|
76 |
+ + New config file parser: |
|
77 |
+ * all options require arguments (options without args must be now followed |
|
78 |
+ by boolean values: (yes, no), (1, 0), or (true, false) |
|
79 |
+ * optional arguments (as in NotifyClamd) are no longer supported |
|
80 |
+ * removed "DisableDefaultScanOptions" option (scan options can be |
|
81 |
+ configured individually) |
|
82 |
+ + TCP and local sockets can be operated simultaneously |
|
83 |
+ + New command: MULTISCAN (scan directory with multiple threads) |
|
84 |
+ + New option DetectPhishing |
|
85 |
+ + New option AlgorithmicDetection |
|
86 |
+ + New option NodalCore |
|
87 |
+ + New option PhishingStrictURLCheck |
|
88 |
+ + New option ScanELF |
|
89 |
+ |
|
90 |
+-) clamav-milter: |
|
91 |
+ + Black list mode: optionally black lists an IP for a configurable amount |
|
92 |
+ of time |
|
93 |
+ + Black hole mode: detects emails that will be discarded and refrains from |
|
94 |
+ scanning them |
|
95 |
+ + Reporting: ability to report phishing attempts to anti-phishing |
|
96 |
+ organisations to help close the sites |
|
97 |
+ + Improved load balancing for scanning with clusters |
|
98 |
+ |
|
99 |
+-) clamscan: |
|
100 |
+ + New options: --no-phishing, --no-algorithmic (disable phishing and |
|
101 |
+ algorithmic detection respectively) |
|
102 |
+ + New option: --ncore |
|
103 |
+ + New option: --no-elf |
|
104 |
+ + New option: --copy |
|
105 |
+ |
|
106 |
+-) freshclam: |
|
107 |
+ + interpreter for .cdiff files (scripted updates) |
|
108 |
+ + new option HTTPUserAgent to force different User-Agent header |
|
109 |
+ |
|
110 |
+-) sigtool: |
|
111 |
+ + New option: --utf16-decode (decode UTF16 encoded files) |
|
112 |
+ + New options: --diff, --run-cdiff, --verify-cdiff (update script management) |
|
113 |
+ |
|
114 |
+ |
|
57 | 115 |
-- |
58 | 116 |
The ClamAV team (http://www.clamav.net/team.html) |
59 | 117 |
|