Cisco has released new versions of the free antivirus package ClamAV 0.104.1 and 0.103.4. Recall that the project came under Cisco's control in 2013 after acquiring Sourcefire, which developed ClamAV and Snort. The project's code is distributed under the GPLv2 license.
Key changes in ClamAV 0.104.1:
- The FreshClam utility now has a pause feature for 24 hours after receiving a 403 response from server. This change is intended to reduce the load on the content delivery network from clients that are blocked due to excessive requests for updates.
- The logic for recursive scanning and data extraction from nested archives has been revamped. New limitations have been added to determine nested files while scanning each file.
- Messages regarding limit exceedances during scanning, such as Heuristics.Limits.Exceeded.MaxFileSize, have been updated to include the base virus name to establish a correlation between the virus and the block.
- Warnings ‘Heuristics.Email.ExceedsMax.*’ have been renamed to ‘Heuristics.Limits.Exceeded.*’ for consistency.
- Issues leading to memory leaks and crashes have been resolved.
Source: opennet.ru
