After five months of development, Cisco has released version 1.1.0 of the free antivirus package ClamAV. The project was taken over by Cisco in 2013 after acquiring Sourcefire, which developed ClamAV and Snort. The project's code is distributed under the GPLv2 license. The 1.1.0 branch is categorized as a regular (non-LTS) release, with updates published for at least 4 months after the first release of the next branch. The signature database for non-LTS branches will also be available for at least another 4 months after the next branch's release.
Key Improvements in ClamAV 1.1:
- The ability to extract images embedded in CSS style blocks has been implemented.
- The sigtool utility has been enhanced with the ‘--vba’ option, which allows for the extraction of VBA code from MS Office documents, similar to how libclamav operates.
- The options ‘--fail-if-cvd-older-than=number_of_days’ have been added to clamscan and clamd, along with the configuration parameter FailIfCvdOlderThan, which will cause clamscan and clamd to exit with an error if the virus database is older than the specified number of days.
- New functions have been added to the API: cl_cvdgetage() for determining the last update of CVD/CLD files and cl_engine_set_clcb_vba() for setting a callback handler for VBA code extracted from documents.
- For mathematical operations with large numbers, the capabilities of OpenSSL are utilized instead of the separate TomsFastMath library.
- The CMake build scripts have been updated with the option DO_NOT_SET_RPATH to disable setting RPATH in Unix-like systems. A version-script has been used to limit the symbols exported for the libclamav, libfreshclam, libclamunrar_iface, and libclamunrar libraries. It is now possible to pass custom flags to the Rust compiler using the RUSTFLAGS variable. Support has been added for selecting a specific Python version through the CMake option ‘-D PYTHON_FIND_VER=version’.
- Name matching optimization has been ensured domains for PDB, WDB, and CDB signatures.
- The log information of the clamonacc process has been enhanced to simplify error diagnostics.
- On the Windows platform, the MSI installer now facilitates the upgrade of ClamAV versions installed in a directory different from the default C:\Program Files\ClamAV.
- Sigtool now includes the ‘--tempdir’ and ‘--leave-temps’ options for selecting the directory for temporary files and retaining temporary files after the process has completed.
Source: opennet.ru
