Mailing List Archive

[clamav-users] ClamAV 1.3.0 release candidate published
Read this online at: https://blog.clamav.net/2023/12/clamav-130-release-candidate-now.html


We are excited to announce the ClamAV 1.3.0 release candidate.

You may find the source code and installers for this release on the clamav.net/downloads<https://www.clamav.net/downloads> page or the ClamAV GitHub release page<https://github.com/Cisco-Talos/clamav/releases/tag/clamav-1.2.0-rc>.

Tip: If you are downloading the source from the GitHub release page, the package labeled "clamav-1.3.0-rc.tar.gz" does not require an internet connection to build. All dependencies are included in this package. But if you download the ZIP or TAR.GZ generated by GitHub, located at the very bottom, then an internet connection will be required during the build to download additional Rust dependencies.

For Docker users, there is no specific Docker tag for the release candidate, but you can use the clamav:unstable or clamav:unstable_base tags.

The release candidate phase is expected to last two to three weeks before we publish the stable release or a second release candidate. Please take this time to evaluate ClamAV 1.3.0.

Please help us validate this release by providing feedback via the ClamAV mailing list<https://lists.clamav.net/mailman/listinfo/clamav-users> or on our Discord<https://discord.gg/sGaxA5Q>.

ClamAV 1.3.0 includes the following improvements and changes:

Major changes

* Added support for extracting and scanning attachments found in Microsoft OneNote section files. OneNote parsing will be enabled by default, but may be optionally disabled using one of the following options:
a. The clamscan command line option: --scan-onenote=no,
b. The clamd.conf config option: ScanOneNote no,
c. The libclamav scan option options.parse &= ~CL_SCAN_PARSE_ONENOTE;,
d. A signature change to the daily.cfg dynamic configuration (DCONF).
* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1048>

Other improvements

* Fixed issue when building ClamAV on the Haiku (BeOS-like) operating system. Patch courtesy of Luca D'Amico

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1061>
* ClamD: When starting, ClamD will now check if the directory specified by TemporaryDirectory in clamd.conf exists. If it doesn't, ClamD will print an error message and will exit with exit code 1. Patch courtesy of Andrew Kiggins.

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1037>
* CMake: If configured to build static libraries, CMake will now also install the libclamav_rust, libclammspack, libclamunrar_iface, and libclamunrar static libraries required by libclamav.

Note: These libraries are all linked into the clamscan, clamd, sigtool, and freshclam programs, which is why they did not need to be installed to function. However, these libraries would be required if you wish to build some other program that uses the libclamav static library.

Patch courtesy of driverxdw.

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1100>
* Added file type recognition for compiled Python (`.pyc`) files.

The file type appears as a string parameter for these callback functions:

- `clcb_pre_cache`

- `clcb_pre_scan`

- `clcb_file_inspection`

When scanning a `.pyc` file, the `type` parameter will now show

"CL_TYPE_PYTHON_COMPILED" instead of "CL_TYPE_BINARY_DATA".

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1111>
* Assorted minor improvements and typo fixes.

Bug fixes

* Fixed a warning when scanning some HTML files.

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1084>
* Fixed an issue decrypting some PDF's with an empty password.

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1079>
* ClamOnAcc: Fixed an infinite loop when a watched directory does not exist.

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1047>
* Fixed a possible crash when processing VBA files on HP-UX/IA 64bit. Patch courtesy of Albert Chin-A-Young.

* GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/526>

Acknowledgments

Special thanks to the following people for code contributions and bug reports:

* Albert Chin-A-Young
* Andrew Kiggins
* driverxdw
* Luca D'Amico
* RainRat



Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
Re: [clamav-users] ClamAV 1.3.0 release candidate published [ In reply to ]
On 15 December 2023 16:49:49 "Micah Snyder \(micasnyd\) via clamav-users"
<clamav-users@lists.clamav.net> wrote
> Fixed an issue decrypting some PDF's with an empty password.
Hi Micah,

Just tested and it's decoding URLs now :)

I also wanted to say a huge Thank You for all the programming bug fixes/new
features and support work you've done for ClamAV this year.

Have a Happy Holiday ClamAV team <insert Christmas picture>

Cheers,

Steve
sanesecurity.com
Re: [clamav-users] ClamAV 1.3.0 release candidate published [ In reply to ]
Citeren "Micah Snyder (micasnyd) via clamav-users"
<clamav-users@lists.clamav.net>:

> Tip: If you are downloading the source from the GitHub release page,
> the package labeled "clamav-1.3.0-rc.tar.gz" does not require an
> internet connection to build. All dependencies are included in this
> package. But if you download the ZIP or TAR.GZ generated by GitHub,
> located at the very bottom, then an internet connection will be
> required during the build to download additional Rust dependencies.

Unfortunately, the above doesn´t seem to work, the package fails to
build without an internet connection:

[ 25s] Updating git repository
`https://github.com/Cisco-Talos/onenote.rs.git`
[ 25s] warning: spurious network error (3 tries remaining): failed
to resolve address for github.com: Temporary failure in name
resolution; class=Net (12)
[ 25s] warning: spurious network error (2 tries remaining): failed
to resolve address for github.com: Temporary failure in name
resolution; class=Net (12)
[ 25s] warning: spurious network error (1 tries remaining): failed
to resolve address for github.com: Temporary failure in name
resolution; class=Net (12)
[ 25s] error: failed to get `onenote_parser` as a dependency of
package `clamav_rust v0.0.1
(/home/abuild/rpmbuild/BUILD/clamav-1.3.0-rc/libclamav_rust)`
[ 25s]
[ 25s] Caused by:
[ 25s] failed to load source for dependency `onenote_parser`
[ 25s]
[ 25s] Caused by:
[ 25s] Unable to update
https://github.com/Cisco-Talos/onenote.rs.git?branch=CLAM-2329-new-from-slice#8b450447
[ 25s]
[ 25s] Caused by:
[ 25s] failed to fetch into:
/home/abuild/.cargo/git/db/onenote.rs-7f6e21546e7651c1
[ 25s]
[ 25s] Caused by:
[ 25s] network failure seems to have happened
[ 25s] if a proxy or similar is necessary `net.git-fetch-with-cli`
may help here
[ 25s]
https://doc.rust-lang.org/cargo/reference/config.html#netgit-fetch-with-cli
[ 25s]
[ 25s] Caused by:
[ 25s] failed to resolve address for github.com: Temporary failure
in name resolution; class=Net (12)

I use the following source package:

https://github.com/Cisco-Talos/clamav/releases/download/clamav-1.3.0-rc/clamav-1.3.0-rc.tar.gz



_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: [clamav-users] ClamAV 1.3.0 release candidate published [ In reply to ]
Am 15.12.23 um 22:19 schrieb Arjen de Korte via clamav-users:
> Unfortunately, the above doesn´t seem to work, the package fails to build without an internet connection:>
> [   25s]     Updating git repository `https://github.com/Cisco-Talos/onenote.rs.git`

Hello,

confirmed: build without internet access is impossible now.
I hope, this will get fixed :-)

Andreas
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: [clamav-users] ClamAV 1.3.0 release candidate published [ In reply to ]
Thanks Andreas and Arjen. I will investigate asap.

Regards,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of A. Schulze via clamav-users <clamav-users@lists.clamav.net>
Sent: Monday, December 18, 2023 9:57 AM
To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
Cc: A. Schulze <sca@andreasschulze.de>
Subject: Re: [clamav-users] ClamAV 1.3.0 release candidate published



Am 15.12.23 um 22:19 schrieb Arjen de Korte via clamav-users:
> Unfortunately, the above doesn?t seem to work, the package fails to build without an internet connection:>
> [ 25s] Updating git repository `https://github.com/Cisco-Talos/onenote.rs.git`

Hello,

confirmed: build without internet access is impossible now.
I hope, this will get fixed :-)

Andreas
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: [clamav-users] ClamAV 1.3.0 release candidate published [ In reply to ]
Thanks for the kind words, Steve. I'm glad to hear we're making a difference.

Happy holidays!
-Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Steve Basford via clamav-users <clamav-users@lists.clamav.net>
Sent: Friday, December 15, 2023 2:25 PM
To: ClamAV users ML <clamav-users@lists.clamav.net>
Cc: Steve Basford <steveb_clamav@sanesecurity.com>
Subject: Re: [clamav-users] ClamAV 1.3.0 release candidate published


On 15 December 2023 16:49:49 "Micah Snyder \(micasnyd\) via clamav-users" <clamav-users@lists.clamav.net> wrote

* Fixed an issue decrypting some PDF's with an empty password.

Hi Micah,

Just tested and it's decoding URLs now :)

I also wanted to say a huge Thank You for all the programming bug fixes/new features and support work you've done for ClamAV this year.

Have a Happy Holiday ClamAV team <insert Christmas picture>

Cheers,

Steve
sanesecurity.com<http://sanesecurity.com>
Re: [clamav-users] ClamAV 1.3.0 release candidate published [ In reply to ]
Citeren Arjen de Korte via clamav-users <clamav-users@lists.clamav.net>:

> Citeren "Micah Snyder (micasnyd) via clamav-users"
> <clamav-users@lists.clamav.net>:
>
>> Tip: If you are downloading the source from the GitHub release
>> page, the package labeled "clamav-1.3.0-rc.tar.gz" does not require
>> an internet connection to build. All dependencies are included in
>> this package. But if you download the ZIP or TAR.GZ generated by
>> GitHub, located at the very bottom, then an internet connection
>> will be required during the build to download additional Rust
>> dependencies.
>
> Unfortunately, the above doesn´t seem to work, the package fails to
> build without an internet connection:

[...]

> I use the following source package:
>
> https://github.com/Cisco-Talos/clamav/releases/download/clamav-1.3.0-rc/clamav-1.3.0-rc.tar.gz

These build problems are no longer an issue with clamav-1.3.0-rc2.
Been running this for 5 days on openSUSE Tumbleweed. Looks good to me.

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat