[Bug 537636] [NEW] FFE for Clamav 0.96
Scott Kitterman
ubuntu at kitterman.com
Thu Mar 11 20:44:01 GMT 2010
Public bug reported:
Binary package hint: clamav
Clamav 0.96 will be released in the next couple of weeks. The first RC
is out now.
So far I've produced a draft package (it builds, but still needs some
work on debconf templates for new options) and we've rebuilt all the
libclamav rdepends to make sure they build:
https://launchpad.net/~ubuntu-
clamav/+archive/ppa/+packages?field.name_filter=&field.status_filter=published&field.series_filter=lucid
This update does NOT drive a library transition as we just went from
soversion 6.0.4 to 6.1.0.
Upstream changes:
0.96rc1
-------
This release of ClamAV introduces new malware detection mechanisms and other
significant improvements to the scan engine. The key features include:
- The Bytecode Interpreter: the interpreter built into LibClamAV allows
the signature writers to create and distribute very complex detection
routines and remotely enhance the scanner's functionality
- Heuristic improvements: improve the PE heuristics detection engine by
adding support of bogus icons and fake PE header information. In a
nutshell, ClamAV can now detect malware that tries to disguise itself
as a harmless application by using the most common Windows program icons.
- Signature Improvements: logical signature improvements to allow more
detailed matching and referencing groups of signatures. Additionally,
improvements to wildcard matching on word boundaries and newlines.
- Support for new archives: 7zip, InstallShield and CPIO. LibClamAV
can now transparently unpack and inspect their contents.
- Support for new executable file formats: 64-bit ELF files and OS X
Universal Binaries with Mach-O files. Additionally, the PE module
can now decompress and inspect executables packed with UPX 3.0.
- Performance improvements: overall performance improvements and memory
optimizations for a better overall resource utilization experience.
Packaging changes (so far):
clamav (0.96~rc1+dfsg-0ubuntu1~ppa2) lucid; urgency=low
* New upstream RC releease
- Add OfficialDatabaseOnly option to clamav-freshclam.postinst.in and
clamav-base.postinst.in
- Add LocalSocketGroup option to clamav-base.postinst.in
- Add LocalSocketMode option to clamav-base.postinst.in
- Add CrossFilesystems option to clamav-base.postinst.in
- Add ClamukoScannerCount option to clamav-base.postinst.in
- Add BytecodeSecurity opiton to clamav-base.postinst.in
- Add DetectionStatsHostID option to clamav-freshclam.postinst.in
- Add Bytecode option to clamav-freshclam.postinst.in
- Add MilterSocketGroup option to clamav-milter.postinst.in
- Add MilterSocketMode option to clamav-milter.postinst.in
- Add ReportHostname option to clamav-milter.postinst.in
- Bump libclamav SO version to 6.1.0 in libclamav6.install
- Drop clamdmon from clamav.examples (no longer shipped by upstream)
- Drop libclamav.a from libclamav-dev.install, not built by upstream)
- Update SO version for lintian override for libclamav6
- Add new Bytecode Testing Tool, usr/bin/clambc, to clamav.install
- Add build-depends on python and python-setuptools for new test suite
-- Scott Kitterman <scott at kitterman.com> Wed, 10 Mar 2010 15:54:47
-0500
As usual, I think we definitely want to release with the current clamav
version.
** Affects: clamav (Ubuntu)
Importance: Undecided
Status: New
--
FFE for Clamav 0.96
https://bugs.launchpad.net/bugs/537636
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to clamav in ubuntu.
More information about the Ubuntu-server-bugs
mailing list