ClamAV 0.90.1 is out

Fri Mar 2 14:03:10 CET 2007

Improved RAR, tar, zip, and PDF handling, permissions fix in freshclam,
several memory leaks fixed in libclamav, and a load more:

-----------------------------------------------------------------------

This release includes various bugfixes and code enhancements. Please see
ChangeLog for complete list of changes.

Important note: please run 'ldconfig' after installing this version.

Changes:

Fri Mar  2 02:02:31 CET 2007 (tk)
---------------------------------
  * 0.90.1 (released with JS and PST code removed)

Fri Mar  2 01:44:10 CET 2007 (tk)
---------------------------------
  * shared/output.c: revert patch for bb#360 (didn't work properly when
		     mprintf() was called from logg())

Thu Mar  1 22:12:22 CET 2007 (tk)
---------------------------------
  * clamd/server-th.c: make more attempts when cl_load returns
CL_ELOCKDB

Thu Mar  1 18:50:01 GMT 2007 (njh)
----------------------------------
  * libclamav/blob.h:	NAME_MAX is now in others.h

Thu Mar  1 17:42:07 CET 2007 (tk)
---------------------------------
  * shared/misc: dircopy: use 0755 permissions for new directories
(fixes
		 possible permission problems with backup directories in
		 freshclam)

Thu Mar  1 17:23:31 CET 2007 (tk)
---------------------------------
  * libclamav/lockdb.c: fix handling of read locks

Thu Mar  1 16:21:48 CET 2007 (tk)
---------------------------------
  * shared/output.c: fix handling of special characters in mprintf
(bb#360)

Thu Mar  1 14:56:44 GMT 2007 (njh)
----------------------------------
  * libclamav/mbox.c:	Fix bug 358

Thu Mar  1 14:25:12 GMT 2007 (njh)
----------------------------------
  * libclamav/pdf.c:	Fix compilation error on machines without mmap()

Thu Mar  1 11:24:40 GMT 2007 (trog)
-----------------------------------
  * libclamav/unrar/unrar.c, unrarvm.c: better fix for bb#350

Thu Mar  1 11:43:07 CET 2007 (tk)
---------------------------------
  * libclamav/unrar/unrar.c: skip all files inside multi-volume solid
archives
			     (but still scan their metadata)

Thu Mar  1 09:10:04 GMT 2007 (njh)
----------------------------------
  * libclamav/pdf.c:	Try with both real and calculated Length fields,
since
				the Length object can't always be
trusted
			Improved backing out of unhandled formats (e.g.
				Predictor for images and embedded fonts)

Thu Mar  1 02:36:40 CET 2007 (tk)
---------------------------------
  * libclamav/unrar/unrar.c: improve handling of multi-volume archives:
do not
			     report CL_ESUPPORT, instead scan all
complete
			     files and do full metadata scan

Wed Feb 28 23:40:04 CET 2007 (tk)
---------------------------------
  * libclamav/others.h: update NAME_MAX block and add workaround for
HP-UX
			(bb#367)

Wed Feb 28 21:55:22 CET 2007 (tk)
---------------------------------
  * libclamav/unrar/unrar.c: fix leak in cli_unrar_extract_next_prepare
(bb#352)
			     Patch from Edwin

Wed Feb 28 21:48:59 CET 2007 (tk)
---------------------------------
  * libclamav/unrar/unrar.c: fix rarvm memory leak (bb#350), patch from
Edwin

Wed Feb 28 16:22:08 CET 2007 (tk)
---------------------------------
  * libclamav/filetypes.c: comment out dead code (see bb#373), spotted
by
			   &quot;alex&quot; &lt;alex77*vip.sina.com&gt;

Wed Feb 28 02:17:39 CET 2007 (tk)
---------------------------------
  * shared: merge win32 patches from NJH

Wed Feb 28 01:48:27 CET 2007 (tk)
---------------------------------
  * drop shared/memory.[ch]

Wed Feb 28 01:14:19 CET 2007 (tk)
---------------------------------
  * libclamav: minor cleanup (bb#247)

Tue Feb 27 23:25:46 CET 2007 (acab)
-----------------------------------
  * libclamav/petite.c: invalid read in valgrind (bb#369)

Mon Feb 26 20:16:14 CET 2007 (acab)
-----------------------------------
  * libclamav/pe.c: minor cleanup (bb#247)

Sun Feb 25 20:50:54 CET 2007 (tk)
---------------------------------
  * libclamav/scanners.c: fix small memory leak (bb#359)

Sun Feb 25 17:00:31 CET 2007 (acab)
-----------------------------------
  * libclamav/pe.c: fix leaks on upack return (bb#351)

Sun Feb 25 14:40:10 CET 2007 (tk)
---------------------------------
  * libclamav/unzip.c: fix memory leak when extracting stored files

Sun Feb 25 12:18:42 CET 2007 (tk)
---------------------------------
  * libclamav/readdb.c,lockdb.c: merge win32 patches from NJH

Sun Feb 25 01:58:55 CET 2007 (tk)
---------------------------------
  * clamscan: merge win32 patches from NJH

Sat Feb 24 22:47:28 GMT 2007 (njh)
----------------------------------
  * libclamav/pdf.c:	Remove warning on FreeBSD4.11

Sat Feb 24 19:40:01 CET 2007 (tk)
---------------------------------
  * clamscan, clamdscan, clamconf: compile with CL_NOTHREADS defined

Sat Feb 24 17:47:54 CET 2007 (tk)
---------------------------------
  * libclamav: fix memory leaks in db handling code

Sat Feb 24 11:44:34 GMT 2007 (njh)
----------------------------------
  * libclamav/mbox.c:	Fix confusion when recursing to
multipart/related

Sat Feb 24 02:32:57 CET 2007 (tk)
---------------------------------
  * configure, libclamav: add support for HP-UX 11.11 with native
			  compiler (bb#180), thanks to Edwin

Fri Feb 23 21:42:08 CET 2007 (tk)
---------------------------------
  * configure: use -pthread also for FreeBSD 6.x

Fri Feb 23 20:22:20 GMT 2007 (njh)
----------------------------------
 * libclamav/untar.c:	Added extra functionality (bug 269) - based on
				patches from Andy Fiddaman clamav *
fiddaman.net

Fri Feb 23 19:22:43 GMT 2007 (njh)
----------------------------------
  * clamav-milter/clamav-milter.c:	Fix compilation error on Solaris
			(bug 347)

Fri Feb 23 18:19:43 CET 2007 (tk)
---------------------------------
  * clamd/scanner.c: fix compilation error on Solaris (bb#341)

Fri Feb 23 15:37:40 GMT 2007 (njh)
----------------------------------
  * libclamav/mbox.c:	Handle wide characters on Windows

Thu Feb 22 18:40:20 GMT 2007 (njh)
----------------------------------
  * libclamav/tnef.c:	Remove warning messages

Thu Feb 22 19:03:50 CET 2007 (tk)
---------------------------------
  * freshclam: merge win32 patches from NJH

Thu Feb 22 18:12:53 CET 2007 (tk)
---------------------------------
  * clamd/clamd.c: print some more information in Foreground mode
(bb#317)

Thu Feb 22 17:16:54 CET 2007 (tk)
---------------------------------
  * shared/misc.c: drop rmdirs() and use cli_rmdirs() instead

Thu Feb 22 16:51:33 CET 2007 (tk)
---------------------------------
  * libclamav: new scan setting CL_SCAN_PDF
  * clamd: new option ScanPDF (default: no)
  * clamscan: new switch --no-pdf (PDF scanning enabled by default)
  * docs: update

Thu Feb 22 15:32:33 GMT 2007 (njh)
----------------------------------
  * libclamav:	s/sanitiseFilename/cli_sanitise_filename/, patch from
trog
		Changed some strdup to cli_strdup

Thu Feb 22 15:43:33 CET 2007 (acab)
-----------------------------------
  * clamd: handle signals while polling in select mode

Thu Feb 22 14:57:10 GMT 2007 (njh)
----------------------------------
  * clamav-milter/clamav-milter.c:	Fix typo

Thu Feb 22 13:28:00 CET 2007 (tk)
---------------------------------
  * shared/misc.c: daemonize: don't re-utilize descriptor 0

Thu Feb 22 10:31:23 CET 2007 (acab)
-----------------------------------
  * clamd: handle signals while polling the sockets in the main loop
(bb#320)

Thu Feb 22 09:00:31 GMT 2007 (njh)
----------------------------------
  * clamav-milter/clamav-milter.c:	Better recovery when a remote
clamd
			goes down

Wed Feb 21 20:40:49 GMT 2007 (njh)
----------------------------------
  * libclamav/message.c:	Better warning message, bug 311

Wed Feb 21 20:07:00 GMT 2007 (njh)
----------------------------------
  * libclamav/pst.c:	Include upstream patches
  * libclamav/mbox.c:	Fix bug 326, reported by Edvin

Wed Feb 21 19:10:42 GMT 2007 (njh)
----------------------------------
  * clamav-milter/clamav-milter.c:	Use logg() functions instead of
			syslog. Needed for code tidy, and also possibly
fixes
			bug 332.

Wed Feb 21 17:26:00 CET 2007 (edwin)
------------------------------------
  * libclamav/entconv.c: don't cache iconv_open() failures. (bb #329)

Tue Feb 20 21:11:29 CET 2007 (tk)
---------------------------------
  * configure: fix compilation errors on FreeBSD (bb#306)

Tue Feb 20 20:51:57 CET 2007 (tk)
---------------------------------
  * configure: add support for osf/tru64

Tue Feb 20 20:19:04 CET 2007 (tk)
---------------------------------
  * clamd: merge multiscan() with dirscan() (also closes bb#302)

Tue Feb 20 16:43:27 CET 2007 (tk)
---------------------------------
  * libclamav/others.c: increase f-level to activate RTF extractor

Tue Feb 20 15:59:12 CET 2007 (tk)
---------------------------------
  * clamd, clamconf: merge win32 patches from NJH

Tue Feb 20 11:53:47 GMT 2007 (trog)
-----------------------------------
  * libclamav/unrar: allow for sparc aligned access requirements
(bb#304)

Mon Feb 19 18:28:52 CET 2007 (tk)
---------------------------------
  * libclamav/sis.c: improve debug messages

Sun Feb 18 21:26:26 CET 2007 (acab)
-----------------------------------
  * libclamav/pe.c: improved broken detection - closes bb#305

Sun Feb 18 21:23:12 CET 2007 (tk)
---------------------------------
  * libclamav/lockdb.c: win32 fix (bb#255)

Sun Feb 18 16:42:45 CET 2007 (edwin)
------------------------------------
  * libclamav/phish_*.c, regex_list.c: Remove obsolete $Log$ keyword.

Sun Feb 18 15:32:45 CET 2007 (tk)
---------------------------------
  * libclamav/filetypes.c: add more tags to HTML rule set (bb#218)

Sun Feb 18 15:03:37 CET 2007 (tk)
---------------------------------
  * libclamav/unzip.c: handle some deflate64 compressed files

Sat Feb 17 11:20:17 CET 2007 (edwin)
------------------------------------
  * libclamav/entconv.c: Don't normalize buffer shorter than 2 bytes.

Sat Feb 17 11:20:17 CET 2007 (edwin)
------------------------------------
  * libclamav/rtf.c: Fix possible memory leak, and add more sanity
checks.

Sat Feb 17 02:34:17 CET 2007 (acab)
-----------------------------------
  * libclamav/rtf.c: Don't spin on on cli_readn (bb#312) - patch from
Edvin

Sat Feb 17 01:31:45 CET 2007 (acab)
-----------------------------------
  * libclamav/regex_list.c: Close #303 - patch from Edvin

Fri Feb 16 12:29:51 GMT 2007 (njh)
----------------------------------
  * libclamav/clamav-milter.c:	Added support for sendmail 8.14, bug
267,
			patch from Andy Fiddaman &lt;clam
fiddaman.net&gt;

Thu Feb 15 16:34:48 CET 2007 (tk)
---------------------------------
  * libclamav/rtf.c: add more sanity checks (Edwin)

Thu Feb 15 16:18:53 CET 2007 (tk)
---------------------------------
  * freshclam/manager.c: fix warning message (bb#292)

Thu Feb 15 12:27:22 GMT 2007 (njh)
----------------------------------
  * libclamav/mbox.c:	Fixed bugs in the handling of boundary lines
			Improved handling of the warning messages
associated
				with recursion limits
			Fixed handling of OK_ATTACHMENTS_NOT_SAVED in
some
				larger files

Wed Feb 14 13:15:25 CET 2007 (tk)
---------------------------------
  * libclamav/entconv.c: fix incorrect use of isspace() in experimental
code

Tue Feb 13 22:34:40 CET 2007 (tk)
---------------------------------
  * libclamav: fix some debug messages

Tue Feb 13 19:48:22 GMT 2007 (njh)
----------------------------------
  * libclamav/mbox.c:	Fix BeOS link error

Tue Feb 13 19:24:49 GMT 2007 (njh)
----------------------------------
  * libclamav/phishcheck.c:	Fix warning message, patch from Edvin

Tue Feb 13 19:04:35 GMT 2007 (njh)
----------------------------------
  * libclamav/mbox.c,phishcheck.c:	Fix compilation errors on BeOS

--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Martin.Hepworth
> Sent: 02 March 2007 12:44
> To: MailScanner discussion
> Subject: RE: ClamAV 0.90.1 is out
> 
> Phil
> 
> Wonderful, anyone summarised the changelog into something 
> readable....ie
> what's changed in a nutshell.
> 
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
> 
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Randal, Phil
> > Sent: 02 March 2007 12:28
> > To: MailScanner (mailscanner at lists.mailscanner.info)
> > Subject: ClamAV 0.90.1 is out
> >
> > I dropped it into the perl-tar subdirectory of install-ClamSA.
> >
> > This patch to install.sh is needed - ldconfig needs running
> > unconditionally:
> >
> > --- install.sh.old      2007-03-02 12:26:48.000000000 +0000
> > +++ install.sh  2007-03-02 12:26:17.000000000 +0000
> > @@ -1,6 +1,6 @@
> >  #!/bin/sh
> >
> > -CLAMAVVERSION=0.90
> > +CLAMAVVERSION=0.90.1
> >  export CLAMAVVERSION
> >  LDSOCONF=/etc/ld.so.conf
> >  CLAMETC=/usr/local/etc
> > @@ -232,8 +232,8 @@
> >      echo the ClamAV library can be found by the clamavmodule and
> >      echo clamav virus scanners.
> >      echo /usr/local/lib >> $LDSOCONF
> > -    /sbin/ldconfig
> >    fi
> > +  /sbin/ldconfig
> >    sleep 2
> >  else
> >    echo You may need to add /usr/local/lib to the 
> directories searched
> >
> > Cheers,
> >
> > Phil
> >
> > --
> > Phil Randal
> > Network Engineer
> > Herefordshire Council
> > Hereford, UK
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> 
> 
> 
> 
> **********************************************************************
> Confidentiality : This e-mail and any attachments are 
> intended for the 
> addressee only and may be confidential. If they come to you in error 
> you must take no action based on them, nor must you copy or show them 
> to anyone. Please advise the sender by replying to this e-mail 
> immediately and then delete the original from your computer.
> 
> Opinion : Any opinions expressed in this e-mail are entirely those of 
> the author and unless specifically stated to the contrary, are not 
> necessarily those of the author's employer.
> 
> Security Warning : Internet e-mail is not necessarily a secure 
> communications medium and can be subject to data corruption. 
> We advise 
> that you consider this fact when e-mailing us. 
> 
> Viruses : We have taken steps to ensure that this e-mail and any 
> attachments are free from known viruses but in keeping with good 
> computing practice, you should ensure that they are virus free.
> 
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales 
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
> United Kingdom
> **********************************************************************
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
> 