openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2254-1 Rating: moderate References: #872682 #908731 #914505 #915414 #957728 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for clamav brings the 0.99.0 stable release and fixes the following issues: - Update to version 0.99 (boo#957728) * Processing of yara rules(some limitations- see signatures.pdf). * Support in clamav logical signatures for many of the features added for YARA, such as Perl Compatible Regular Expressions, alternate strings, and YARA string attributes. See signatures.pdf for full details. * New and improved on-access scanning for linux. see the recent blog post and clamdoc.pdf for details on the new on-access capabilities. * A new clamav api callback function that is invoked when a virus is found. This is intended primarily for applications running in all-match mode. Any applications using all-match mode must use the new callback function to record and report detected viruses. * Configurable default password list to attempt zip file decryption. * Tiff file support. * Upgrade windows pthread library to 2.9.1. * A new signature target type for designating signatures to run against files with unknown file types. * Improved fidelity of the "data loss prevention" heuristic algorithm. Code supplied by Bill Parker. * Support for lzma decompression within adobe flash files. * Support for mso attachments within microsoft office 2003 xml files. * A new sigtool option(--ascii-normalize) allowing signature authors to more easily generate normalized versions of ascii files. * Windows installation directories changed from \program files\sourcefire\ ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64. - Make clamd and clamav-milter services depend on freshclam as they need it - Don't need sendmail for building clamav-milter anymore, sendmail-devel is enough (boo#915414). - Boo#914505: config file merging and temp file creation got moved to %pre by mistake. Put them back to %post. - Restore the updateclamconf script (boo#908731). (https://bugzilla.clamav.net/show_bug.cgi?id=11193). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-897=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-897=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): clamav-0.99-2.19.1 clamav-debuginfo-0.99-2.19.1 clamav-debugsource-0.99-2.19.1 - openSUSE 13.1 (i586 x86_64): clamav-0.99-36.1 clamav-debuginfo-0.99-36.1 clamav-debugsource-0.99-36.1 References: https://bugzilla.suse.com/872682 https://bugzilla.suse.com/908731 https://bugzilla.suse.com/914505 https://bugzilla.suse.com/915414 https://bugzilla.suse.com/957728