Read this online at: https://blog.clamav.net/2024/05/clamav-140-release-candidate-now.html
The ClamAV 1.4.0 release candidate is now available. You may find the source code and installers for this release on the clamav.net/downloads<https://www.clamav.net/downloads> page or the ClamAV GitHub release page<https://github.com/Cisco-Talos/clamav/releases/tag/clamav-1.4.0-rc>. Tip: If you are downloading the source from the GitHub release page, the package labeled "clamav-1.4.0-rc.tar.gz" does not require an internet connection to build. All dependencies are included in this package. But if you download the ZIP or TAR.GZ generated by GitHub, located at the very bottom, then an internet connection will be required during the build to download additional Rust dependencies. For Docker users, there is no specific Docker tag for the release candidate, but you can use the clamav:unstable or clamav:unstable_base tags. The release candidate phase is expected to last two to three weeks before we publish the stable release or a second release candidate. Please take this time to evaluate ClamAV 1.4.0. Please help us validate this release by providing feedback via the ClamAV mailing list<https://lists.clamav.net/mailman/listinfo/clamav-users> or on our Discord<https://discord.gg/sGaxA5Q>. ClamAV 1.4.0 includes the following improvements and changes: Major changes * Added support for extracting ALZ archives. The new ClamAV file type for ALZ archives is CL_TYPE_ALZ. Added a DCONF<https://docs.clamav.net/manual/Signatures/DynamicConfig.html> option to enable or disable ALZ archive support. Tip: DCONF (Dynamic CONFiguration) is a feature that allows for some configuration changes to be made via ClamAV .cfg "signatures". * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1183> * Added support for extracting LHA/LZH archives. The new ClamAV file type for ALZ archives is CL_TYPE_LHA_LZH. Added a DCONF<https://docs.clamav.net/manual/Signatures/DynamicConfig.html> option to enable or disable LHA/LZH archive support. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1192> * Added the ability to disable image fuzzy hashing, if needed. For context, image fuzzy hashing is a detection mechanism useful for identifying malware by matching images included with the malware or phishing email/document. New ClamScan options: --scan-image[=yes(*)/no] --scan-image-fuzzy-hash[=yes(*)/no] New ClamD config options: ScanImage yes(*)/no ScanImageFuzzyHash yes(*)/no New libclamav scan options: options.parse &= ~CL_SCAN_PARSE_IMAGE; options.parse &= ~CL_SCAN_PARSE_IMAGE_FUZZY_HASH; Added a DCONF<https://docs.clamav.net/manual/Signatures/DynamicConfig.html> option to enable or disable image fuzzy hashing support. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1186> Other improvements * Added cross-compiling instructions for targeting ARM64/aarch64 processors for Windows<https://github.com/Cisco-Talos/clamav/blob/main/INSTALL-cross-windows-arm64.md> and Linux<https://github.com/Cisco-Talos/clamav/blob/main/INSTALL-cross-linux-arm64.md>. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1116> * Improved the Freshclam warning messages when being blocked or rate limited so as to include the Cloudflare Ray ID, which helps with issue triage. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1195> * Removed unnecessary memory allocation checks when the size to be allocated is fixed or comes from a trusted source. We also renamed internal memory allocation functions and macros, so it is more obvious what each function does. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1137> * Improved the Freshclam documentation to make it clear that the --datadir option must be an absolute path to a directory that already exists, is writable by Freshclam, and is readable by ClamScan and ClamD. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1199> * Added an optimization to avoid calculating the file hash if the clean file cache has been disabled. The file hash may still be calculated as needed to perform hash-based signature matching if any hash-based signatures exist that target a file of the same size, or if any hash-based signatures exist that target "any" file size. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1167> * Added an improvement to the SystemD service file for ClamOnAcc so that the service will shut down faster on some systems. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1164> Bug fixes * Silenced confusing warning message when scanning some HTML files. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1252> * Fixed minor compiler warnings. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1197> * Since the build system changed from Autotools to CMake, ClamAV no longer supports building with configurations where bzip2, libxml2, libz, libjson-c, or libpcre2 are not available. Libpcre is no longer supported in favor of libpcre2. In this release, we removed all the dead code associated with those unsupported build configurations. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1217> * Fixed assorted typos. Patch courtesy of RainRat. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1228> * Added missing documentation for the ClamScan --force-to-disk option. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1186> * Fixed an issue where ClamAV unit tests would prefer an older libclamunrar_iface library from the install path, if present, rather than the recently compiled library in the build path. * GitHub pull request<https://github.com/Cisco-Talos/clamav/pull/1258> Acknowledgments Special thanks to the following people for code contributions and bug reports: * RainRat Posted by Micah Snyder <https://www.blogger.com/profile/07798916006145826441> at <https://blog.clamav.net/2024/05/clamav-140-release-candidate-now.html> 1:45 PM<https://blog.clamav.net/2024/05/clamav-140-release-candidate-now.html> [https://img1.blogblog.com/img/icon18_email.gif] <https://www.blogger.com/email-post.g?blogID=2366689974368239573&postID=9066543856487125225> [https://img2.blogblog.com/img/icon18_edit_allbkg.gif] <https://www.blogger.com/post-edit.g?blogID=2366689974368239573&postID=9066543856487125225&from=pencil> Email This<https://www.blogger.com/share-post.g?blogID=2366689974368239573&postID=9066543856487125225&target=email> BlogThis!<https://www.blogger.com/share-post.g?blogID=2366689974368239573&postID=9066543856487125225&target=blog> Share to Twitter<https://www.blogger.com/share-post.g?blogID=2366689974368239573&postID=9066543856487125225&target=twitter> Share to Facebook<https://www.blogger.com/share-post.g?blogID=2366689974368239573&postID=9066543856487125225&target=facebook> Share to Pinterest<https://www.blogger.com/share-post.g?blogID=2366689974368239573&postID=9066543856487125225&target=pinterest> Labels: 1.4.0<https://blog.clamav.net/search/label/1.4.0>, clamav<https://blog.clamav.net/search/label/clamav>, release<https://blog.clamav.net/search/label/release>, Release Candidate<https://blog.clamav.net/search/label/Release%20Candidate> Micah Snyder (they/them) ClamAV Development Talos Cisco Systems, Inc. _______________________________________________ clamav-devel mailing list clamav-devel@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-devel Please submit your patches to our Github: https://github.com/Cisco-Talos/clamav-devel/pulls Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
