ClamAV 1.4.0

A new version of the free antivirus ClamAV 1.4.0 has been released, developed by Cisco Talos. Official builds are available for Linux, macOS, and Windows. Additionally, ClamAV is unofficially built for AIX, BSD, HP-UX, OpenVMS, OSF (Tru64), Solaris, and Haiku.

Starting with this version, the official build for 32-bit Linux distributions is no longer provided, but users of such distributions can compile ClamAV from source.

Key changes

• Support for new file formats:

  • Added support for extracting archives ALZ. New ClamAV file type for ALZ archives - cl_type_alz. Support for ALZ archives can be enabled or disabled using the DCONF option.
  • Added support for extracting archives LHA/LZH. New ClamAV file type for LHA/LZH archives - cl_type_lha_lzh. Support for LHA/LZH archives can be enabled or disabled using the DCONF option.

• Fuzzy hashing of images:

  • Added the ability to disable fuzzy hashing of images. This is useful for detecting malware by matching images included in malware or phishing emails/documents.
  • New options for clamscan:
    • --scan-image [=yes(*)/no]
    • --scan-image-fuzzy-hash [=yes(*)/no]
  • New configuration options for clamd:
    • ScanImage yes(*)/no
    • ScanImageFuzzyHash yes(*)/no
  • New scanning options for libclamav:
    • options.parse &= ~CL_SCAN_PARSE_IMAGE;
    • options.parse &= ~CL_SCAN_PARSE_IMAGE_FUZZY_HASH;

• Platform support:

  • ClamAV 1.4.0 no longer provides packages for 32-bit versions of Linux. Users can compile the program from source.
  • Packages for ARM64 for Windows have been introduced, but similar support for Linux is absent in this release.

• Bytecode compiler update:

  • The ClamAV bytecode compiler has been updated to version 1.4.0 and now uses LLVM 16. The bytecode compiler project now builds several shared object files instead of one, using a new pass manager.

• Other improvements:

  • Cross-compilation instructions for ARM64/AArch64 processors for Windows and Linux have been added.
  • Warnings from FreshClam when blocking or throttling have been improved to include Cloudflare Ray ID.
  • Unnecessary memory allocation checks have been removed.
  • The FreshClam documentation has been improved to clearly state that the --datadir option must be an absolute path to an existing directory.
  • The CMake build system has been optimized and dependencies on version map files have been added.
  • Various bugs and compiler warnings have been fixed.

ClamAV 1.4.0 is a significant update with numerous new features and enhancements aimed at improving security and usability. Users are advised to upgrade to the latest version to benefit from all the advantages.

Source: linux.org.ru