Wednesday, January 24, 2024

ClamAV 1.3.0 Second Release Candidate now available!

We are excited to announce the ClamAV 1.3.0 release candidate.

You can find the source code and installers for this release on the clamav.net/downloads page or the ClamAV GitHub release page.

Tip: If you are downloading the source from the GitHub release page, the package labeled "clamav-1.3.0-rc2.tar.gz" does not require an internet connection to build. All dependencies are included in this package. But if you download the ZIP or TAR.GZ generated by GitHub, located at the very bottom, then an internet connection will be required during the build to download additional Rust dependencies.

For Docker users, there is no specific Docker tag for the release candidate, but you can use these tags:

  • clamav/clamav:unstable
  • clamav/clamav:unstable_base 
  • clamav/clamav-debian:unstable
  • clamav/clamav-debian:unstable_base 

This release candidate phase is expected to last two weeks before we publish the stable release. Please take this time to evaluate ClamAV 1.3.0.  

Please help us validate this release by providing feedback via the ClamAV mailing list or our Discord.

Changes since the first release candidate include:

  • ClamOnAcc: Fixed an infinite loop when a file has been deleted before a scan.
    Patch courtesy of gsuehiro.
  • ClamConf: Fixed an issue printing `MaxScanSize` introduced with the change to allow a `MaxScanSize` greater than 4 GB.
    Fix courtesy of teoberi.
  • Fixed an issue building a ClamAV RPM in some configurations.
    The issue was caused by faulty CMake logic that intended to create an empty database directory during the installation.

You can find the full list of changes and improvements in the blog post for the first release candidate.