... | ... |
@@ -1,45 +1,14 @@ |
1 |
-0.98.7 |
|
1 |
+0.99-beta1 |
|
2 | 2 |
------ |
3 | 3 |
|
4 |
-ClamAV 0.98.7 is here! This release contains new scanning features |
|
5 |
-and bug fixes. |
|
4 |
+This is a preview release of some upcoming ClamAV 0.99 features: |
|
6 | 5 |
|
7 |
- - Improvements to PDF processing: decryption, escape sequence |
|
8 |
- handling, and file property collection. |
|
9 |
- - Scanning/analysis of additional Microsoft Office 2003 XML format. |
|
10 |
- - Fix infinite loop condition on crafted y0da cryptor file. Identified |
|
11 |
- and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221. |
|
12 |
- - Fix crash on crafted petite packed file. Reported and patch |
|
13 |
- supplied by Sebastian Andrzej Siewior. CVE-2015-2222. |
|
14 |
- - Fix false negatives on files within iso9660 containers. This issue |
|
15 |
- was reported by Minzhuan Gong. |
|
16 |
- - Fix a couple crashes on crafted upack packed file. Identified and |
|
17 |
- patches supplied by Sebastian Andrzej Siewior. |
|
18 |
- - Fix a crash during algorithmic detection on crafted PE file. |
|
19 |
- Identified and patch supplied by Sebastian Andrzej Siewior. |
|
20 |
- - Fix an infinite loop condition on a crafted "xz" archive file. |
|
21 |
- This was reported by Dimitri Kirchner and Goulven Guiheux. |
|
22 |
- CVE-2015-2668. |
|
23 |
- - Fix compilation error after ./configure --disable-pthreads. |
|
24 |
- Reported and fix suggested by John E. Krokes. |
|
25 |
- - Apply upstream patch for possible heap overflow in Henry Spencer's |
|
26 |
- regex library. CVE-2015-2305. |
|
27 |
- - Fix crash in upx decoder with crafted file. Discovered and patch |
|
28 |
- supplied by Sebastian Andrzej Siewior. CVE-2015-2170. |
|
29 |
- - Fix segfault scanning certain HTML files. Reported with sample by |
|
30 |
- Kai Risku. |
|
31 |
- - Improve detections within xar/pkg files. |
|
32 |
- |
|
33 |
-As always, we appreciate contributions of bug reports, code fixes, |
|
34 |
-and sample submission from the ClamAV community members: |
|
35 |
- |
|
36 |
-Sebastian Andrzej Siewior |
|
37 |
-Minzhaun Gong |
|
38 |
-Dimitri Kirchner |
|
39 |
-Goulven Guiheux |
|
40 |
-John E. Krokes |
|
41 |
-Kai Risku |
|
6 |
+ - Process YARA rules(with limitations) as ClamAV signatures. |
|
7 |
+ - Support in ClamAV logical signatures many of the features |
|
8 |
+ added for YARA, such as Perl Compatible Regular Expressions. |
|
42 | 9 |
|
10 |
+For more details about ClamAV 0.99-beta1, please see the blog post |
|
11 |
+on blog.clamav.net. |
|
43 | 12 |
|
44 | 13 |
-- |
45 | 14 |
The ClamAV team (http://www.clamav.net/about.html#credits) |
... | ... |
@@ -2,6 +2,18 @@ Note: This README/NEWS file refers to the source tarball. Some things described |
2 | 2 |
here may not be available in binary packages. |
3 | 3 |
-- |
4 | 4 |
|
5 |
+0.99-beta1 |
|
6 |
+------ |
|
7 |
+ |
|
8 |
+This is a preview release of some upcoming ClamAV 0.99 features: |
|
9 |
+ |
|
10 |
+ - Process YARA rules(with limitations) as ClamAV signatures. |
|
11 |
+ - Support in ClamAV logical signatures many of the features |
|
12 |
+ added for YARA, such as Perl Compatible Regular Expressions. |
|
13 |
+ |
|
14 |
+For more details about ClamAV 0.99-beta1, please see the blog post |
|
15 |
+on blog.clamav.net. |
|
16 |
+ |
|
5 | 17 |
0.98.7 |
6 | 18 |
------ |
7 | 19 |
|