forked from Cisco-Talos/clamav
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ChangeLog
21956 lines (17276 loc) · 749 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Thu, 22 Apr 2016 12:45:00 -0500 (Steven Morgan)
------------------------------------------
* ClamAV 0.99.2 release.
Thu, 31 Mar 2016 17:07:39 -0400 (Kevin Lin)
------------------------------------------
* 7z: fix for FolderStartPackStreamIndex array index heck
Tue, 29 Mar 2016 16:18:51 -0400 (Steven Morgan)
------------------------------------------
* bb11547 - print all CDBNAME entries for a zip file when using the
-z flag.
Tue, 2 Sep 2014 22:44:41 +0200 (Sebastian Andrzej Siewior)
------------------------------------------
* try to minimize the err cleanup path
Tue, 2 Sep 2014 22:44:14 +0200 (Sebastian Andrzej Siewior)
------------------------------------------
* clamunrar: notice if unpacking comment failed
Wed, 23 Mar 2016 16:39:52 -0400 (Steven Morgan)
------------------------------------------
* bb9042 - signature manual update.
Wed, 23 Mar 2016 16:14:42 -0400 (Kevin Lin)
------------------------------------------
* bb#11396 - use temp var for realloc to prevent pointer loss. Patch by
Bill Parker.
Wed, 23 Mar 2016 15:49:56 -0400 (Kevin Lin)
------------------------------------------
* bb#11397 - fix debug VI hex truncation
Wed, 23 Mar 2016 15:38:21 -0400 (Kevin Lin)
------------------------------------------
* bb#11398 - freshclam: avoid random data in mirrors.dat. Patch by
Tomasz Kojm.
Wed, 23 Mar 2016 15:28:51 -0400 (Kevin Lin)
------------------------------------------
* libclamav: print raw certificate metadata
Wed, 23 Mar 2016 14:16:00 -0400 (Kevin Lin)
------------------------------------------
* bb#11529 - freshclam manager check return code of strdup. Patch by
Sebastian A. Siewior.
Tue, 22 Mar 2016 16:21:59 -0400 (Kevin Lin)
------------------------------------------
* bb#11261 - additional suppress IP notification when using proxy
Tue, 22 Mar 2016 12:54:52 -0400 (Kevin Lin)
------------------------------------------
* bb#10983 - fix download and verification of *.cld through PrivateMirrors
Mon, 21 Mar 2016 11:21:08 -0400 (Kevin Lin)
------------------------------------------
* bb#11261 - suppress IP notification when using proxy
Mon, 21 Mar 2016 11:20:01 -0400 (Kevin Lin)
------------------------------------------
* bb#11543 - remove redundant mempool assignment
Thu, 17 Mar 2016 11:49:26 -0400 (Kevin Lin)
------------------------------------------
* bb#11003 - divide out dumpcerts output for better readability
Wed, 16 Mar 2016 15:42:35 -0400 (Kevin Lin)
------------------------------------------
* bb#11003 - fix dconf and option handling for nocert and dumpcert
Mon, 14 Mar 2016 16:07:45 -0400 (Mickey Sola)
------------------------------------------
* bb11463 - patch by Jim Morris to increase clamd's soft file descriptor to
its potential maximum on 64-bit systems
Mon, 14 Mar 2016 17:12:20 -0400 (Steven Morgan)
------------------------------------------
* Move libfreshclam config to m4/reorganization.
Fri, 11 Mar 2016 13:32:31 -0700 (andrey mirtchovski)
------------------------------------------
* adding libfreshclam
Sun, 13 Mar 2016 23:27:23 -0400 (Tom Judge)
------------------------------------------
* Add 'cdb' datafile to sigtools list of datafile types.
Fri, 11 Mar 2016 16:02:22 -0500 (Steven Morgan)
------------------------------------------
* bb11526 - NULL pointer check. Patch by Bill Parker.
Fri, 11 Mar 2016 15:48:01 -0500 (Steven Morgan)
------------------------------------------
* bb11524 - malloc() NULL pointer check. Patch by Bill Parker.
Thu, 10 Mar 2016 18:26:33 -0500 (Steven Morgan)
------------------------------------------
* bb1436 - clamscan 'block-macros' option. Patch by Kai Risku.
Wed, 9 Mar 2016 17:07:06 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - initialize cpio name buffer
Wed, 9 Mar 2016 16:43:03 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - initialize mspack decompression buffers
Wed, 9 Mar 2016 12:15:16 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - prevent memory allocations on used pointers (folder objects)
Tue, 8 Mar 2016 16:04:21 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - prevent memory allocations on used pointers (boolvectors)
Tue, 8 Mar 2016 14:37:20 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - initialize ARJ metadata structures
Tue, 8 Mar 2016 14:37:01 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - change cli_malloc with cli_calloc
Mon, 7 Mar 2016 16:25:10 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - check packSizes prior to dereference
Mon, 7 Mar 2016 16:10:09 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - fixed inconsistent folder state on failure
Mon, 7 Mar 2016 15:11:08 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - pre-check on (*unpackSizes) dereference
Mon, 7 Mar 2016 13:56:42 -0500 (Kevin Lin)
------------------------------------------
* bb11514 - fix on pre-checks on dereferenced array
Fri, 4 Mar 2016 16:57:14 -0500 (Kevin Lin)
------------------------------------------
* bb11514 - pre-checks on dereferenced array size values (not =0)
Wed, 2 Mar 2016 13:57:03 -0500 (Mickey Sola)
------------------------------------------
* bb-11514 - adding sanity checks to 7z header parsing
Tue, 1 Mar 2016 12:43:01 -0500 (Kevin Lin)
------------------------------------------
* bb#11514 - fixed mew source read issue
Fri, 4 Mar 2016 17:05:01 -0500 (Steven Morgan)
------------------------------------------
* bb11188 - Upgrade to use libtool 2.4.6 for ClamAV building: fixes issues
with MacOSX 10.10 and 10.11.
Tue, 1 Mar 2016 12:34:48 -0500 (Kevin Lin)
------------------------------------------
* bb#11513 - documentation update on targets
Mon, 29 Feb 2016 16:58:19 -0500 (Kevin Lin)
------------------------------------------
* filetype consistency
Mon, 29 Feb 2016 11:34:25 -0500 (Kevin Lin)
------------------------------------------
* move llvm option flag handling to new m4 file
Wed, 24 Feb 2016 13:29:42 -0500 (Kevin Lin)
------------------------------------------
* hwp5.x: fix for streams without names
Wed, 24 Feb 2016 18:45:00 -0500 (Steven Morgan)
------------------------------------------
* ClamAV 0.99.1 release build.
Wed, 24 Feb 2016 13:29:42 -0500 (Kevin Lin)
------------------------------------------
* hwp5.x: fix for streams without names
Sat, 20 Feb 2016 15:53:48 +0100 (Sebastian Andrzej Siewior)
------------------------------------------
* libclamav: yara: avoid unaliged access to 64bit variable
Fri, 19 Feb 2016 16:16:39 -0500 (Mickey Sola)
------------------------------------------
* bb11496 - adding signal handling to clamav-milter to allow for socket
removal and cleanup at close
Thu, 18 Feb 2016 11:44:54 -0500 (Kevin Lin)
------------------------------------------
* hwp3.x: enable password cancelling of parsing
Wed, 17 Feb 2016 18:12:58 -0500 (Steven Morgan)
------------------------------------------
* Kick out yara rules containing single byte subpatterns.
Tue, 16 Feb 2016 14:15:18 -0500 (Kevin Lin)
------------------------------------------
* added 'CustomXML' as trigger for likely OOXML
Tue, 16 Feb 2016 12:04:14 -0500 (Kevin Lin)
------------------------------------------
* fix make check issue with llvm builds with assertion
Thu, 11 Feb 2016 15:56:47 -0500 (Mickey Sola)
------------------------------------------
* bb11455 - patch by Mark Allan to add show-progress option to freshclam.
Tue, 9 Feb 2016 13:46:13 -0500 (Mickey Sola)
------------------------------------------
* bb10568 - patch from Andreas Cadhalpun to add systemd support for
clamd and freshclam
Mon, 8 Feb 2016 11:28:42 -0500 (Kevin Lin)
------------------------------------------
* PCRE2 support
Mon, 8 Feb 2016 11:25:43 -0500 (Kevin Lin)
------------------------------------------
* clamconf: reports usage of PCRE2
Tue, 3 Feb 2016 17:30:00 -0500 (Steven Morgan)
------------------------------------------
* ClamAV 0.99.1 beta1 release.
Tue, 2 Feb 2016 14:23:13 -0500 (Kevin Lin)
------------------------------------------
* add scanning options for scanning xml-based documents
(MSXML, OOXML, HWPML) and HWP3
Fri, 29 Jan 2016 16:17:40 -0500 (Kevin Lin)
------------------------------------------
* add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
Tue, 2 Feb 2016 12:38:27 -0500 (Kevin Lin)
------------------------------------------
* hwp: scan decompressed data on limits exceeded
Sun, 31 Jan 2016 15:41:54 -0500 (Steven Morgan)
------------------------------------------
* Fix for signature name length<3 in .ign & .ign2 CVD files.
Fri, 29 Jan 2016 11:21:46 -0500 (Steven Morgan)
------------------------------------------
* Change RTF file magic from '{\rtf' to '{\rt'
Wed, 27 Jan 2016 14:17:47 -0500 (Mickey Sola)
------------------------------------------
* bb11444 - zeroing out buffer at allocation to avoid writing uninitialized
bytes to a file
Wed, 20 Jan 2016 16:21:58 -0500 (Mickey Sola)
------------------------------------------
* bb11446 - adding check for compressed input stream
Wed, 13 Jan 2016 14:56:46 -0500 (Kevin Lin)
------------------------------------------
* clean up and boost accuracy to detecting OOXML documents
Thu, 14 Jan 2016 17:01:01 -0500 (Steven Morgan)
------------------------------------------
* 11477 - Fix crash when using pcre statistics due to inconsistent memory
management function calls
Thu, 14 Jan 2016 15:31:02 -0500 (Mickey Sola)
------------------------------------------
* bb11444: adding check to verify a valid number of rounds for rijndael aes
encryption/decryption
Wed, 13 Jan 2016 13:18:01 -0500 (Mickey Sola)
------------------------------------------
* bb11441 - fixing edge case revealed by unit testing
Tue, 12 Jan 2016 17:20:26 -0500 (Steven Morgan)
------------------------------------------
* bb11466 - let html be scanned raw when --scan-html=no is in effect.
Tue, 12 Jan 2016 16:14:40 -0500 (Steven Morgan)
------------------------------------------
* bb11475: fix crash due to memory overlay with crafted 7z files.
Tue, 12 Jan 2016 14:30:41 -0500 (Mickey Sola)
------------------------------------------
* bb11441 - fixing off by one OOB write in htmlnorm
Mon, 11 Jan 2016 14:47:30 -0500 (Mickey Sola)
------------------------------------------
* bb11446 - fixing autoit OOB bufferread
Wed, 6 Jan 2016 14:57:48 -0500 (Mickey Sola)
------------------------------------------
* sigtool: adding support for decoding cdb sigs
Tue, 5 Jan 2016 13:13:47 -0500 (Steven Morgan)
------------------------------------------
* bb11467 - fix embedded http links.
Tue, 22 Dec 2015 19:04:42 -0500 (Steven Morgan)
------------------------------------------
* bb11451 - fix guard macro name collision on AIX.
Tue, 22 Dec 2015 13:36:51 -0500 (Steven Morgan)
------------------------------------------
* fix regression crash on sid 1005597703 due to uninitialzed
(i.e., garbage initialized) structure.
Mon, 21 Dec 2015 17:39:47 -0500 (Steven Morgan)
------------------------------------------
* bb11456 - corrects mso stream prefix value for big endian processors.
Patch by Jim Morris.
Thu, 17 Dec 2015 16:16:55 -0500 (Kevin Lin)
------------------------------------------
* ooxml_hwp: add support for filetyping and preclassification
Thu, 17 Dec 2015 11:04:00 -0500 (Kevin Lin)
------------------------------------------
* hwpole2: new filetype and handler for hwp embedded ole2 files
Thu, 17 Dec 2015 12:46:38 -0500 (Mickey Sola)
------------------------------------------
* bb11443 - fixing possible oob dereference when parsing mbox files
Tue, 15 Dec 2015 16:12:01 -0500 (Mickey Sola)
------------------------------------------
* bb11442 - adding explicit wwunpack oob checks
Tue, 15 Dec 2015 10:53:05 -0500 (Mickey Sola)
------------------------------------------
* bb11445 - fixing edge case where a null terminator was unintentionally
written into an adjacent buffer.
Wed, 16 Dec 2015 16:13:05 -0500 (Kevin Lin)
------------------------------------------
* hwpml: use msxml_parser callback scanner for binary data
Wed, 16 Dec 2015 16:12:20 -0500 (Kevin Lin)
------------------------------------------
* msxml_parser: add callback-based scanning mechanism
Tue, 15 Dec 2015 13:01:40 -0500 (Kevin Lin)
------------------------------------------
* HWPML: added hwpml_keys for hwpml parsing
Tue, 15 Dec 2015 10:54:20 -0500 (Kevin Lin)
------------------------------------------
* add HMPML filetype, tab fixes in filetype.c
Mon, 14 Dec 2015 16:34:11 -0500 (Kevin Lin)
------------------------------------------
* Hwp3.x: inflate compressed segment and offset tracking
Fri, 11 Dec 2015 17:50:40 -0500 (Kevin Lin)
------------------------------------------
* Hwp3.x file header parsing and preclass
Wed, 16 Dec 2015 14:56:56 -0500 (Kevin Lin)
------------------------------------------
* pcre: fixed minimum pcre version check
Fri, 11 Dec 2015 17:41:38 -0500 (Steven Morgan)
------------------------------------------
* bb11452 - endianess correction for swf files on sparc -
patch supplied by Jim Morris.
Wed, 9 Dec 2015 12:15:16 -0500 (Mickey Sola)
------------------------------------------
* bb11424 - correcting buffer alignemnt for riff detection on sparc systems;
patch by Jim Morris
Wed, 9 Dec 2015 00:17:41 +0100 (Andreas Cadhalpun)
------------------------------------------
* fix detection of libcheck without pkg-config file
Wed, 9 Dec 2015 11:43:35 -0500 (Kevin Lin)
------------------------------------------
* add HWP5 filetype tracking to preclassification
Tue, 8 Dec 2015 15:05:30 -0500 (Kevin Lin)
------------------------------------------
* add HWP 3.x internal filetypes
Tue, 8 Dec 2015 14:47:12 -0500 (Kevin Lin)
------------------------------------------
* add hwp5 contents to preclass set
Fri, 4 Dec 2015 11:55:52 -0500 (Kevin Lin)
------------------------------------------
* proper identification of HWP file format
Tue, 8 Dec 2015 18:36:48 -0500 (Steven Morgan)
------------------------------------------
* bb11438 - strengthen file typing for OOXML.
Wed, 2 Dec 2015 14:06:32 -0500 (Mickey Sola)
------------------------------------------
* bb-11099 - normalization of whitelist signatures
Wed, 2 Dec 2015 16:23:48 -0500 (Steven Morgan)
------------------------------------------
* github issue #9 - wrong length & offset.
Wed, 25 Nov 2015 11:30:00 -0500 (Steven Morgan)
------------------------------------------
* ClamAV 0.99 Release.
Wed, 4 Nov 2015 14:46:46 -0500 (Steven Morgan)
------------------------------------------
* ClamAV 0.99-rc2 Release.
Wed, 4 Nov 2015 14:46:46 -0500 (Steven Morgan)
------------------------------------------
* bb11420 - fix preclass/cache interaction.
Fri, 30 Oct 2015 13:34:56 -0400 (Steven Morgan)
------------------------------------------
* bb11419 - fix valgrind-detected uninitialized value when caching
is disabled.
Fri, 30 Oct 2015 12:48:26 -0400 (Steven Morgan)
------------------------------------------
* bb11418 - fix clamdscan segfault when using stream(stdin) input.
Thu, 29 Oct 2015 17:44:43 -0400 (Kevin Lin)
------------------------------------------
* bb#11421 - CUD digital signature verification and empty files
Wed, 28 Oct 2015 17:05:37 -0400 (Kevin Lin)
------------------------------------------
* change unknown database default to skip from .db
Thu, 22 Oct 2015 20:50:53 +0200 (Andreas Cadhalpun)
------------------------------------------
* use pkg-config to determine CHECK_LIBS
Mon, 26 Oct 2015 15:19:22 -0400 (Kevin Lin)
------------------------------------------
* bb#11015(2) - refactor automated pwdb target assignment for tdb
Mon, 26 Oct 2015 11:47:25 -0400 (Kevin Lin)
------------------------------------------
* fix error reporting for pwdb signature loading
Mon, 26 Oct 2015 12:49:01 -0400 (Steven Morgan)
------------------------------------------
* fix crash in clamd scan callback function.
Thu, 22 Oct 2015 14:50:41 -0400 (Kevin Lin)
------------------------------------------
* fix for openssl build with specific openssl location
Mon, 21 Sep 2015 18:28:54 -0400 (Mickey Sola)
------------------------------------------
* onas: adding better feedback for users attempting to use fanotify
prevention on kernels with unsupported configurations.
Thu, 15 Oct 2015 15:16:40 -0400 (Mickey Sola)
------------------------------------------
* onas: adding throttling to notifications when handling fanotify errors
on large files.
Mon, 5 Oct 2015 13:48:03 -0400 (Mickey Sola)
------------------------------------------
* onas: adding optional extra scanning for inotify events
Wed, 14 Oct 2015 09:37:59 -0400 (Mickey Sola)
------------------------------------------
* onas: improving handling of fanotify read errors for large files.
Wed, 6 Oct 2015 14:25:00 -0400 (Steven Morgan)
------------------------------------------
* ClamAV 0.99-rc1 Release.
Mon, 5 Oct 2015 14:24:58 -0400 (Mickey Sola)
------------------------------------------
* Configuration patch by Bernd Kuhls to allow for building statically
linked libraries.
Fri, 2 Oct 2015 12:24:58 -0400 (Steven Morgan)
------------------------------------------
* bb11209: fix for static-only build for uClibc - patch supplied by
Yann E. Morin.
Thu, 1 Oct 2015 17:47:37 -0400 (Steven Morgan)
------------------------------------------
* Add 'virus found' callback. Refactor scan-all API.
Thu, 1 Oct 2015 17:23:35 -0400 (Steven Morgan)
------------------------------------------
* Improve freshclam performance - patch posted to clamav-users list by
Andreas Schulze.
Tue, 29 Sep 2015 11:10:14 -0400 (Mickey Sola)
------------------------------------------
* onas: preventing use of ddd system to watch '/'
Mon, 21 Sep 2015 15:05:19 -0400 (Steven Morgan)
------------------------------------------
* Change ClamAV Windows icon.
Mon, 21 Sep 2015 14:41:19 -0400 (Mickey Sola)
------------------------------------------
* Sanity check update patches submitted by Bill Parker
Fri, 18 Sep 2015 17:43:06 -0400 (Steven Morgan)
------------------------------------------
* Change windows install directory, change windows Sourcefire artifacts
to Cisco.
Thu, 17 Sep 2015 16:49:42 -0400 (Mickey Sola)
------------------------------------------
* onas: changing clamd NotifyOnly option to Prevention and disabling
Prevention option by default.
Wed, 16 Sep 2015 13:40:19 -0400 (Mickey Sola)
------------------------------------------
* bb11250 - Removing deprecated function gethostbyname
Mon, 14 Sep 2015 12:11:47 -0400 (Mickey Sola)
------------------------------------------
* fanotify: consolidating prevention options into a single NotifyOnly option.
Mon, 14 Sep 2015 11:46:35 -0400 (Mickey Sola)
------------------------------------------
* fanotify: adding option to watch and notify on mountpoints.
Fri, 11 Sep 2015 14:17:35 -0400 (Mickey Sola)
------------------------------------------
* fanotify: adding clamd configuration toggle options to prevent read and
access attempts
Thu, 10 Sep 2015 16:43:45 -0400 (Mickey Sola)
------------------------------------------
* fanotify: adding clamd option to disable ddd
Wed, 9 Sep 2015 17:58:04 -0400 (Steven Morgan)
------------------------------------------
* Improve pkgconfig. Patch supplied by Andreas Cadhalpun.
Wed, 9 Sep 2015 11:19:11 -0400 (Mickey Sola)
------------------------------------------
* fanotify: blocking fanotify during database reload.
Tue, 8 Sep 2015 16:15:52 -0400 (Mickey Sola)
------------------------------------------
* onas: improving handling of thread exit cleanup and db reload.
Tue, 1 Sep 2015 18:53:45 -0400 (Steven Morgan)
------------------------------------------
* DLP: refactor inline code CC range checks to table based. Check IIN
range before applying Luhn algorithm.
Tue, 1 Sep 2015 16:13:00 -0400 (Kevin Lin)
------------------------------------------
* ac-alt: check last altstr for fixed property in expr analysis
Fri, 28 Aug 2015 17:10:00 -0400 (Mickey Sola)
------------------------------------------
* Adding FANOTIFY checks to ddd and onas hash files.
Fri, 28 Aug 2015 16:03:29 -0400 (Mickey Sola)
------------------------------------------
* Overhauling clamd onaccess scanning to support dynamic directory
determination.
Tue, 25 Aug 2015 15:12:03 -0400 (Steven Morgan)
------------------------------------------
* bb11352 - fix HP-UX 11.11 compile warnings. Patch sent by
Michael Pelletier.
Tue, 25 Aug 2015 10:53:23 -0400 (Steven Morgan)
------------------------------------------
* bb11351 - add missing sys/un.h header. Patch by Dmitry Marakasov.
Mon, 24 Aug 2015 15:17:02 -0400 (Steven Morgan)
------------------------------------------
* make retcode passed to post-scan callback to be CL_VIRUS when an
heuristic virus was detected.
Fri, 21 Aug 2015 12:43:26 -0400 (Kevin Lin)
------------------------------------------
* bb#11377 - stub pcre functions for dynamic library mapping
Thu, 20 Aug 2015 18:46:30 -0400 (Kevin Lin)
------------------------------------------
* bb#11377 - search for pcre/pcre.h if pcre.h not found
Fri, 14 Aug 2015 15:28:02 -0400 (Steven Morgan)
------------------------------------------
* bb11371 - fix integer underflow. Issue identified by Felix Groebert
and the Google Security Team.
Fri, 14 Aug 2015 12:22:49 -0400 (Kevin Lin)
------------------------------------------
* bb#11372 - finalize encrypted hex strings correctly
Thu, 13 Aug 2015 15:59:27 -0400 (Kevin Lin)
------------------------------------------
* bb#11370 - do not update mirrors on custom database urls
Tue, 11 Aug 2015 17:12:15 -0400 (Kevin Lin)
------------------------------------------
* dconf: disable swizzor heuristic by default
Mon, 3 Aug 2015 17:18:31 -0400 (Kevin Lin)
------------------------------------------
* bb#11366 - add 7z heuristic for encrypted header
Thu, 30 Jul 2015 18:05:09 -0400 (Kevin Lin)
------------------------------------------
* win32: update 3rdparty pcre to 8.37; clean up pcre sources
Thu, 30 Jul 2015 17:37:05 -0400 (Kevin Lin)
------------------------------------------
* tiff: added heuristic check for invalid tiff IFD fields
Wed, 29 Jul 2015 12:51:19 -0400 (Steven Morgan)
------------------------------------------
* bb11361 - add file magics for TIFF files.
Wed, 29 Jul 2015 12:05:44 -0400 (Steven Morgan)
------------------------------------------
* bb11359 - correct clamdscan handling of the --infected flag for files
excluded with ExcludePath clamd parameter. Patch provided by
devel at rinx dot com.
Tue, 28 Jul 2015 13:44:41 -0400 (Kevin Lin)
------------------------------------------
* bb#11196 - autoit script file misclassified as HTML
Fri, 24 Jul 2015 13:24:11 -0400 (Mickey Sola)
------------------------------------------
* bb11343: Automatically appennding YARA. to all yara rule sigs.
Thu, 23 Jul 2015 15:36:16 -0400 (Mickey Sola)
------------------------------------------
* bb11343: Adding yara-rules (yes|no|only) runtime option for clamscan.
Thu, 23 Jul 2015 16:37:15 -0400 (Kevin Lin)
------------------------------------------
* bb#9858 - added target 14 for binary (unidentified) files
Wed, 22 Jul 2015 18:09:50 -0400 (Kevin Lin)
------------------------------------------
* sigtool: added nested string alternative handling
Tue, 21 Jul 2015 16:35:48 -0400 (Mickey Sola)
------------------------------------------
* bb11343: Adding configure option to remove yara at compile-time.
Tue, 21 Jul 2015 17:30:14 -0400 (Kevin Lin)
------------------------------------------
* sigtool: added usage of cli_ldbtokenize to sigtool sigtool: handles
signature modifiers
Tue, 21 Jul 2015 14:16:14 -0400 (Kevin Lin)
------------------------------------------
* PCREMaxFileSize now correctly parses sizes (K,M,G suffixes)
Thu, 16 Jul 2015 12:35:38 -0400 (Kevin Lin)
------------------------------------------
* dconf: added passwd dconf for archives, applied to unzip
Tue, 14 Jul 2015 18:26:22 -0400 (Kevin Lin)
------------------------------------------
* unzip: added scanning of decrypted files
Tue, 14 Jul 2015 17:25:01 -0400 (Kevin Lin)
------------------------------------------
* unzip: added traditional PKWARE decryption password verification
Tue, 14 Jul 2015 17:23:43 -0400 (Kevin Lin)
------------------------------------------
* pwdb: added name tracking the pwdb entry
Thu, 9 Jul 2015 17:30:47 -0400 (Kevin Lin)
------------------------------------------
* engine: added .pwdb handler and storage
Wed, 15 Jul 2015 17:08:17 -0400 (Mickey Sola)
------------------------------------------
* bb11253: Upgrading win32 pthreads to version 2.9.1
Thu, 9 Jul 2015 15:35:49 -0400 (Mickey Sola)
------------------------------------------
* bb11219: Fixing scanscript to scan on a normalized map when using
relative offsets with type 7 signatures.
Wed, 8 Jul 2015 12:16:03 -0400 (Kevin Lin)
------------------------------------------
* bb#11356 - fixed an issue regarding yara_exec OP_OF
Tue, 7 Jul 2015 16:46:19 -0400 (Mickey Sola)
------------------------------------------
* Adding ascii file normalization option to sigtool.
Tue, 7 Jul 2015 14:02:57 -0400 (Kevin Lin)
------------------------------------------
* check-matcher: added prefix altstr test cases
Thu, 2 Jul 2015 15:06:04 -0400 (Kevin Lin)
------------------------------------------
* matcher-ac: added calc and storage for min/max lengths
Wed, 1 Jul 2015 16:53:07 -0400 (Kevin Lin)
------------------------------------------
* ac_special: tracks both the min and max lengths
Wed, 1 Jul 2015 16:14:14 -0400 (Steven Morgan)
------------------------------------------
* bb11348 - Patch for HPUX sent by Michael Pelletier.
Fri, 19 Jun 2015 16:33:59 -0400 (Steven Morgan)
------------------------------------------
* Add support for YARA private rules and referencing other rules in a
YARA condition.
Sat, 22 Nov 2014 15:26:02 +0100 (Andreas Cadhalpun)
------------------------------------------
* Avoid emitting incremental progress messages when not outputting to a
terminal.
Tue, 16 Jun 2015 14:56:32 -0400 (Mickey Sola)
------------------------------------------
* bb-11305: Initialized dbstat entries after clamd first loads.
Wed, 10 Jun 2015 17:39:50 -0400 (Steven Morgan)
------------------------------------------
* add unit tests for offset matching yara rules using 'at' and 'in' keywords.
Tue, 9 Jun 2015 11:12:20 -0400 (Kevin Lin)
------------------------------------------
* unit_test: pcre and sigopt test cases added to check_matchers
Fri, 5 Jun 2015 11:28:50 -0400 (Kevin Lin)
------------------------------------------
* unit_tests: added a few pcre test cases
Fri, 5 Jun 2015 11:11:35 -0400 (Kevin Lin)
------------------------------------------
* pcre: added warnings in regard to CVE-2015-3210
Thu, 4 Jun 2015 17:14:26 -0400 (Mickey Sola)
------------------------------------------
* bb-11149: Fixing bzip2 scan to cease scanning after reaching max filesize.
Wed, 3 Jun 2015 15:28:39 -0400 (Kevin Lin)
------------------------------------------
* unit_test: basis for pcre subsig testing
Mon, 1 Jun 2015 17:48:39 -0400 (Kevin Lin)
------------------------------------------
* removed offset 0 limitation on cli_scanraw (revert change from 0.95.2)
Mon, 1 Jun 2015 17:45:14 -0400 (Kevin Lin)
------------------------------------------
* updated internal msxml 2003 file magics
Mon, 1 Jun 2015 16:33:03 -0400 (Kevin Lin)
------------------------------------------
* added 'PCRE_STATIC' to preprocessor macros for 3rdparty pcre linking
Fri, 29 May 2015 16:08:35 -0400 (Kevin Lin)
------------------------------------------
* added pcre source for windows build; needs trimming
Thu, 28 May 2015 18:10:54 -0400 (Kevin Lin)
------------------------------------------
* win32: added yara compiler source to build
Thu, 28 May 2015 18:00:16 -0400 (Steven Morgan)
------------------------------------------
* Add the YARA compiler files.
Thu, 28 May 2015 17:50:20 -0400 (Kevin Lin)
------------------------------------------
* win32: updated sources to include new yara sources
Wed, 27 May 2015 18:27:48 -0400 (Steven Morgan)
------------------------------------------
* Enable YARA include directives, import YARA compiler struct and
functions, improve YARA parse/lex error messages.
Thu, 21 May 2015 15:04:22 -0400 (Kevin Lin)
------------------------------------------
* altstr: optimized fixed length alternate runtime
Thu, 21 May 2015 15:03:46 -0400 (Kevin Lin)
------------------------------------------
* added implementation of cli_qsort_r (qsort with cb arg)
Tue, 19 May 2015 12:21:36 -0400 (Kevin Lin)
------------------------------------------
* yara: added support for PUA, IGN, and sigload_cb
Tue, 19 May 2015 12:04:59 -0400 (Kevin Lin)
------------------------------------------
* ac_special_altstr: sigopt support
Mon, 18 May 2015 09:59:04 -0400 (Kevin Lin)
------------------------------------------
* matcher-ac: wildcard support for variable alternates (needs optimization)
Thu, 14 May 2015 13:03:21 -0400 (Steven Morgan)
------------------------------------------
* bb6934 - Incorporate Bill Parker's DLP functions for Canadian RTN/EFT
and U.S. MICR codes. TBD - options for invoking those functions.
Thu, 14 May 2015 12:47:54 -0400 (Kevin Lin)
------------------------------------------
* ac: verifier alternative to handling nocase
Wed, 13 May 2015 17:48:22 -0400 (Kevin Lin)
------------------------------------------
* matcher-ac: expansion of nested alternates within alternate expr
matcher-ac: three types of alternates: byte, fixed, and generic
Wed, 13 May 2015 17:27:44 -0400 (Steven Morgan)
------------------------------------------
* bb6230 - additional credit/debit card checks for dlp.c. Function by
Bill Parker.
Mon, 11 May 2015 11:55:43 -0400 (Kevin Lin)
------------------------------------------
* matcher-ac: basic framework+debug for processing nested alternates
Fri, 8 May 2015 15:52:30 -0400 (Steven Morgan)
------------------------------------------
* bb10731 specify group for socket of which user is not a member - patch by
Sebastian Andrzej Siewior.
Fri, 1 May 2015 17:15:55 -0400 (Steven Morgan)
------------------------------------------
* Improve fidelity of reporting error conditions from YARA strings and
to continue processing additional YARA rules within files where previous
string errors are found.
Wed, 29 Apr 2015 17:17:31 -0400 (Kevin Lin)
------------------------------------------
* msxml: virus detection and allmatch fixes
Tue, 28 Apr 2015 17:28:23 -0400 (Kevin Lin)
------------------------------------------
* bb#11306 - LZMA decompression support for flash files
Tue, 28 Apr 2015 14:56:14 -0400 (Kevin Lin)
------------------------------------------
* added default filetype magic for LZMA compressed SWF
Wed, 22 Apr 2015 04:34:02 -0400 (Kevin Lin)
------------------------------------------
* ole2: added MSO inflation and scanning (detached)
Mon, 27 Apr 12:00:00 EDT
-----------------------------------
* 0.98.7 Release.
Tue, 14 Apr 2015 15:53:17 EDT (klin)
-----------------------------------
* bb#11296 - various fixes to pdf string base64 string conversion
Mon, 13 Apr 2015 12:14:41 EDT (smorgan)
-----------------------------------
* bb11298 - look for TOC element name <unarchived-checksum>
(as a synonynm for <extracted-checksum>). Continue processing rather
than exit in the event of missing or error in TOC checksum specification.
Wed, 8 Apr 2015 15:51:04 EDT (smorgan)
-----------------------------------
* iso9660: remove unnecessaty parameter on iso_parse_dir() and reset return
code when scanall is in effect.
Wed, 1 Apr 2015 17:41:59 EDT (klin)
-----------------------------------
* pdf: correctly handle decoding, decryption, character set conversions,
and file properties collection(base64 encoded as needed).
Fri, 27 Mar 2015 13:21:49 EDT (klin)
-----------------------------------
* converted cb_file_props from using engine-based ctx to file-based ctx
Thu, 26 Mar 2015 12:24:02 EDT (smorgan)
-----------------------------------
* bb11281 - Reworked reverted upack.c crash patch to fix regression
false negatives.
Tue, 24 Mar 2015 12:06:57 EDT (klin)
-----------------------------------
* make check: added env check 'T' to set timeout
Mon, 23 Mar 2015 17:58:35 EDT (klin)
-----------------------------------
* bb#11282 - patch for code clean up in rebuildpe. Patch
supplied by Sebastian Andrzej Siewior.
Mon, 23 Mar 2015 13:04:54 EDT (klin)
-----------------------------------
* bb#11284 - fixed integer underflow in detecting W32.Polipos.A method.
Patch supplied by Sebastian Andrzej Siewior.
Mon, 16 Mar 2015 18:35:14 EDT (klin)
-----------------------------------
* updated documentation on document property collection
Mon, 16 Mar 2015 18:26:07 EDT (klin)
-----------------------------------
* added support for MS Office 2003 XML(msxml) document types and msxml
file properties collection.
Mon, 16 Mar 2015 13:11:56 EDT (klin)
-----------------------------------
* fixed converity issue ID 12109 buffer was not freed on rare error case
Mon, 16 Mar 2015 13:08:03 EDT (klin)
-----------------------------------
* fixed coverity ID 12110 12111 changed a the type of a value from unsigned
to signed due to possible negative values
Thu, 12 Mar 2015 19:06:23 EDT (smorgan)
-----------------------------------
* Fix for infinite loop on crafted xz file.
Wed, 11 Mar 2015 15:03:43 EDT (smorgan)
-----------------------------------
* bb11278 - was not detecting viruses on files inside iso9660.
Also fix up all-match logic.
Mon, 9 Mar 2015 13:02:25 EDT (smorgan)
-----------------------------------
* bb11274 - adds out of bounds check for petite packed files.
Patch from Sebastian Andrzej Siewior.
Wed, 4 Mar 2015 14:04:24 EDT (klin)
-----------------------------------
* updated example fileprop analysis bytecodes moved old example bytecodes
to examples/fileprop_analysis/old/
Wed, 4 Mar 2015 12:08:34 EDT (klin)
-----------------------------------
* backwards compatibility for target type 13 json scanning
Tue, 3 Mar 2015 17:47:55 EDT (klin)
-----------------------------------
* generates fmap from desc if no map is NULL
Tue, 3 Mar 2015 16:37:08 EDT (smorgan)
-----------------------------------
* Apply y0da cryptor patch sent in by Sebastian Andrzej Siewior.
Tue, 3 Mar 2015 16:12:48 EDT (klin)
-----------------------------------
* flevel updated to 80 (new bytecode hook type)
Tue, 3 Mar 2015 16:12:22 EDT (klin)
-----------------------------------
* clambc info option updated for new hook type
Tue, 3 Mar 2015 15:00:41 EDT (klin)
-----------------------------------
* added BC_PRECLASS hook support; replaces target type 13
Mon, 2 Mar 2015 19:06:23 EDT (klin)
-----------------------------------
* pdf string UTF-16 conversion no longer solely depends on ICONV reason:
no ICONV meant no conversion even though conversion function existed
Fri, 27 Feb 2015 15:23:51 EDT (klin)
-----------------------------------
* bb#11269 - bm matcher no longer sets scanning window offset reason:
certain segments could be hashed multiple times
Wed, 25 Feb 2015 14:55:21 EDT (klin)
-----------------------------------
* bb#11269 - hash does not compute on segments smaller than the maxpatlen
Tue, 24 Feb 2015 16:21:09 EDT (klin)
-----------------------------------
* bb#11267 - libclamav upx cover against hand crafted section ove patch
supplied bySebastian Andrzej Siewior.
Fri, 27 Feb 2015 16:57:19 EDT (smorgan)
-----------------------------------
* Patch for integer overflow checks for petite unpack code supplied by
Sebastian Andrzej Siewior.
Fri, 27 Feb 2015 16:54:55 EDT (smorgan)
-----------------------------------
* remove obsolete parameters from the clamd.conf man page: MailMaxRecursion,
ArchiveMaxFileSize, ArchiveMaxRecursion, ArchiveMaxFiles,
ArchiveMaxCompressionRatio, ArchiveBlockMax, ArchiveLimitMemoryUsage, Clamuko*.
Wed, 18 Feb 2015 15:23:54 EDT (klin)
-----------------------------------
* bb#11212 - fix MEW unpacker
Mon, 16 Feb 2015 11:46:21 EDT (smorgan)
-----------------------------------