Latest updates on Clamav

Dear ClamAV users,

This version improves handling of PDF, CAB, RTF, OLE2 and HTML files
and includes various bugfixes for 0.93 issues.

--
The ClamAV team (http://www.clamav.net/team)

--
Luca Gibelli (luca _at_ clamav.net)       ClamAV, a GPL anti-virus toolkit
[Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce

Dear ClamAV users,

This release introduces many new features and engine enhancements, please
see the notes below for the list of major changes. The most visible one
is the new logic in scan limits which affects some command line and config
options of clamscan and clamd. Please see clamscan(1) and clamd.conf(5)
and the example config file for more information on the new options.

Most important changes include:

  * libclamav:
    - New logic in scan limits: provides much more efficient protection against
      DoS attacks but also results in different command line and config options
      to clamscan and clamd (see below)
    - New/improved modules: unzip, SIS, cabinet, CHM, SZDD, text normalisator,
      entity converter
    - Improved filetype detection; filetype definitions can be remotely updated
    - Support for .cld containers (which replace .inc directories)
    - Improved pattern matcher and signature formats
    - More efficient scanning of HTML files
    - Many other improvements

  * clamd:
    - NEW CONFIG FILE OPTIONS: MaxScanSize, MaxFileSize, MaxRecursion, MaxFiles
    - ** THE FOLLOWING OPTIONS ARE NO LONGER SUPPORTED **: MailMaxRecursion,
      ArchiveMaxFileSize, ArchiveMaxRecursion, ArchiveMaxFiles,
      ArchiveMaxCompressionRatio, ArchiveBlockMax

  * clamscan:
    - NEW CMDLINE OPTIONS: --max-filesize, --max-scansize
    - REMOVED OPTIONS: --block-max, --max-space, --max-ratio

  * freshclam:
    - NEW CONFIG OPTION CompressLocalDatabase
    - NEW CMDLINE SWITCH --no-warnings
    - main.inc and daily.inc directories are no longer used by ClamAV; please
      remove them manually from your database directory

--
The ClamAV team (http://www.clamav.net/team)

--
Luca Gibelli (luca _at_ clamav.net)       ClamAV, a GPL anti-virus toolkit
[Tel] +39 06 916502176 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce

Biju Abraham N. wrote: Why not just volunteer and do it yourself... SCNR...

Not sure if release candidates should be in (even though it's volatile).


--
To UNSUBSCRIBE, email to debian-volatile-request@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

debian@... wrote: The problem is there has been a version in
etch-proposed-updates/volatile for over a month and it still is not out
the door.  The issue is why is .93 taking so long to get out.  I has
taken so long that upstream has .93.1rc1 out and .93 still isn't
released to voilatile?

Thanks
Robert


--
To UNSUBSCRIBE, email to debian-volatile-request@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

On 27/05/08 16:07, Robert Middleswarth wrote:
The maintainer appears to have released it to etch-volatile proper on
the 20th of this month:

http://packages.qa.debian.org/c/clamav/news/20080520T173605Z.html

No idea why the delay though.

However, for some reason, this change still isn't reflected in the
Packages listing...

Gavin

(debian.solutium.co.uk volatile mirror)


--
To UNSUBSCRIBE, email to debian-volatile-request@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Gavin Westwood wrote:
Hi.

This happened to me last year with freshclam/clamav 0.90.

http://lists.debian.org/debian-volatile/2007/04/msg00008.html

I don't know who fixed it in the end, but several days later,
IIRC, the server Packages/Release files were up-to-date.

If these two cases were a matter of doing a mirror/ftp update,
it would be nice to clarify this issue, so that it won't
happen a third time.

Cheers, Tobias.

P.S. I seem to use every pitfall to violate codeofconduct for
mailing lists... plz tell me privately, if I did it again...;)


--
To UNSUBSCRIBE, email to debian-volatile-request@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Tobias Ulbricht wrote: I just checked again and apt-get still isn't finding .93 so there is
something broken with the volatile repo.

Thanks
Robert


--
To UNSUBSCRIBE, email to debian-volatile-request@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Hello,

Tobias Ulbricht <ulbricht@...> writes:
I am CC'ing the clamv maintainer, maybe he knows what the problem
could be. Stephen, the updated clamv packages from May 3rd are still
not available from volatile.debian.org. Do you have any idea what the
reason might be or whom one should contact in this regard?


Thanks in advance,

   -Nikolaus

--
 Nikolaus@... | College Ring 6, 28759 Bremen, Germany
 Class of 2008 - Physics | Jacobs University Bremen

 »My opinions may have changed, but not the fact that I am right.«


--
To UNSUBSCRIBE, email to debian-volatile-request@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

This one time, at band camp, Nikolaus Rath said:
> I am CC'ing the clamv maintainer, maybe he knows what the problem
> could be. Stephen, the updated clamv packages from May 3rd are still
> not available from volatile.debian.org. Do you have any idea what the
> reason might be or whom one should contact in this regard?

As far as I know, we are where we were when I uploaded the packages to
volatile.  ClamAV upstream seems to have no regard for API or ABI
stability across releases, so they frequently break 3rd party software
with every new release.  This is one of those releases.  I have sent
emails to the maintainers of all the affected packages and to the
-release list, but I have gotten exactly no replies at all to my queries
to the other maintainers.  In the past, I have shepeherded all of the
affected packages through clamav breakages, but I am currently too busy
to do the work for the other maintainers right now.

I am not sure that this is the blocker for a volatile release, but I
assume so.  Interested people can help by helping with maintenance of
the affected packages (see my mail to debian-release for a list) and
uploading fixed versions to volatile and unstable.

Take care,
--
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran@... |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------