{"id":144380,"date":"2025-10-08T11:11:58","date_gmt":"2025-10-08T09:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-5-0"},"modified":"2025-10-08T11:11:58","modified_gmt":"2025-10-08T09:11:58","slug":"kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-5-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-5-0","title":{"rendered":"Cisco has released the antivirus package ClamAV 1.5.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
After more than a year of development, Cisco has released the free antivirus package ClamAV 1.5.0. The project came under Cisco's ownership in 2013 following its acquisition of Sourcefire, the company behind ClamAV and Snort. The project's code is distributed under the GPLv2 license. The 1.5.0 branch is categorized as a regular (not LTS) version, with updates published for at least 4 months after the release of the first version of the next branch. The ability to download signature databases for non-LTS branches is also provided for at least another 4 months after the release of the next branch. <\/p>\n
Key changes in ClamAV 1.5: <\/p>\n
\n
Added a check that identifies encrypted Microsoft Office documents.\n
The ability to extract links present in processed HTML and PDF files has been added. Links are output in JSON format when JSON metadata generation is active. This feature can be disabled via the ClamScan command line options «—json-store-html-uris=no» and «—json-store-pdf-uris=no», directives «JsonStoreHTMLURIs no» and «JsonStorePDFURIs no» in clamd.conf, or environment variables CL_SCAN_GENERAL_STORE_HTML_URIS and CL_SCAN_GENERAL_STORE_PDF_URIS.\n
In the «OnAccessExcludePath» setting, it is now allowed to specify exclusion masks for file paths using regular expressions.\n
Support for verifying and signing the digital signatures of signature database archives (CVD) and changes to the database (CDIFF) has been added, using external files with the «.sign» extension, which are automatically downloaded by the Freshclam utility along with CVD databases and CDIFF patches. The «sigtool verify» and «sigtool sign» commands can be used for verification and signature generation. The certificates used are set by default in the directory «<prefix>\\\/etc\\\/certs», which can be changed at build time with the «-D CVD_CERTS_DIRECTORY=PATH» option, the CVDCertsDirectory setting, the CVD_CERTS_DIR environment variable, or the command line parameter «—cvdcertsdir PATH».\n
The Freshclam, ClamD, ClamScan, and Sigtool programs have added the capability to disable the unreliable hashing algorithms MD5 and SHA1 during digital signature verification and false positive checks for trusted files. Disabling MD5 and SHA1 is done through the «FIPSCryptoHashLimits» setting or the «—fips-limits» option.\n
In the implementation of the cache for verified files, the SHA2-256 algorithm is used instead of MD5.\n
Clamd has added settings EnableShutdownCommand, EnableReloadCommand, EnableStatsCommand, and EnableVersionCommand to disable the handling of shutdown, restart, statistics output, and version display commands.\n
libclamav has added additional functions for scanning operations, enhanced features for hash handling, and options for managing recursive directory traversals with temporary files. Each scanned object is assigned a unique object identifier.\n
The ClamScan utility has improved the accuracy of counters for the size of read and scanned data. It now includes the ability to display sizes in gigabytes, megabytes, kilobytes, or bytes.\n
New command line options have been added to ClamScan: «—hash-hint», «—log-hash», «—file-type-hint», and «—log-file-type».\n
The maximum value for the max-recursion setting in the configuration file is limited to 100 to prevent failures when processing files with deep recursion.\n
The code quality in the ZIP archive module has been improved. Enhanced support for extracting data from corrupted zip archives has also been introduced.\n
File type detection with AI models has been implemented.\n
It is now allowed to specify a comment at the end of a line with the active option (for example, «LogVerbose yes #no»).\n
On the Windows platform, support for file names with UTF-8 characters not marked in ANSI and OEM code pages has been improved.\n
Build support for GNU\/Hurd, Solaris, and AIX platforms has been enhanced. <\/ul>\n