news
ClamAV 1.5 Antivirus Brings FIPS-Mode Signature Verification Support
Quoting: ClamAV 1.5 Antivirus Brings FIPS-Mode Signature Verification Support —
Over a year after the previous 1.4 release, ClamAV, a mainstay in the open-source antivirus world developed by Cisco Talos, a part of Cisco Systems Inc., has released its latest version, 1.5.
One of the headline features in this update is the new FIPS-compatible method for verifying the authenticity of CVD signature databases and CDIFF patch files. This system now utilizes external “.cvd.sign” files for the daily, main, and bytecode databases, which are downloaded automatically by Freshclam or CVDUpdate.
When these signature files aren’t available, ClamAV will fall back to its legacy MD5-based RSA verification method.
Another Update From Linuxiac (BB):
-
ClamAV 1.5.1 Patch Update Addresses PE File and ZIP Archive Issues
The ClamAV team has pushed out version 1.5.1, a quick patch following last week’s 1.5.0 release for this open-source antivirus software developed by Cisco Talos, a part of Cisco Systems Inc., with a main focus on fixing several performance issues and addressing bugs that slipped through in the previous version.
One of the biggest fixes in 1.5.1 tackles a major slowdown when scanning certain PE files. Users who noticed sluggish performance in Windows executable scans should see a clear improvement now.
The release also fixes a problem where ZIP archives could trigger “Heuristics.Limits.Exceeded.MaxFiles” alerts when using the --alert-exceeds-max option in ClamScan or the AlertExceedsMax setting in ClamD. This issue caused unnecessary scan interruptions for users working with large or nested ZIP files.