================================================================== F-PROT ANTIVIRUS 6.0.1 for Solaris SPARC RELEASE NOTES ================================================================== This document describes the changes in the software since F-Prot Antivirus 4.5.4. MAJOR ENHANCEMENTS ------------------ 6.0.1: - Now released for Solaris (sparc 32 bit, intel 32 and 64 bit) and Linux 64 bit in addition to the Linux 32 bit version. - Scan engine upgraded from 4.4.1 to 4.4.2 which improves detection considerably. - An updated version of Anomy is now incorporated to resolve certain mail scanner issues. - Example code for fpscand usage moved to make it clear that it is just example code rahter than a supported part of the product. 6.0.0: Pretty much everything has changed from version 4.6.x If you're running f-prot version 4.x.y then READ THE README. All of it. Seriously. It's not long and it will save you a ton of trouble if you are upgrading from a previous version or using 3rd party software with f-prot. 4.6.7: Version 4.6.7 only contains bugfixes. Please see the CHANGES document in the package for more information. 4.6.6: Version 4.6.6 only contains bugfixes. Please see the CHANGES document in the package for more information. 4.6.5: Fixed an endless loop encountered in a corrupted WMF sample. 4.6.4: Version 4.6.4 scans Windows Metafile images (WMF) to detect exploits that use the CVE-2005-4560 vulnerability in WMF. The Mail Scanner has been extended to do content-type fingerprinting which allows it to block attachments with false extension based on their 'real' extensions, e.g., .wmf files claiming to be .jpg or .png files. Please see http://www.f-prot.com/support/unix/unix_faq/25.html http://www.f-prot.com/support/unix/unix_faq/43.html for more information on this feature. Please see the CHANGES document in the package for more information. 4.6.3: Optimisation in version 4.6.3 should improve scanning speed by approximately 15-40% over previous releases. Version 1.2.2 will now try to scan zip files which falsely claim to use 64-bit compression methods. 64 bit compression is not supported, but the scanner will now try to scan those files using 32 bit methods. Please see the CHANGES document in the package for more information. 4.6.2: In addition to bugfixes then all components in version 4.6.2 are now dynamically linked. Please see the CHANGES document in the package for more information. 4.6.1: Version 4.6.1 only contains bugfixes. Please see the CHANGES document in the package for more information. 4.6.0: Version 4.6.0 contains significant changes to the F-Prot Antivirus Mail Scanner. Two changes are most noteworthy: The Mail Scanner deletes (drops) e-mails that contain mass-mailer worms and removes executable attachments from e-mails even if they are not detected as infected. Both behaviours are configurable. Dropping mass-mailer e-mails spares end-users the trouble of deleting those messages manually and saves time otherwise spent on deleting empty mass-mailed messages. Since these messages are automatically sent by infected computers then they are of no value to the recipient. Normal e-mail usage does not require receiving executable attachments and executable attachment received via e-mail are by now almost always worms and viruses. In fact some e-mail clients by default do not allow the user to open such attachment. The default list of types of attachments restricted by the F-Prot Antivirus Mail Scanner is in part based on a list of "Attachment File Types Restricted by Outlook 2003", available at the time of this writing at http://office.microsoft.com/en-us/assistance/HA011402971033.aspx The automatic quarantining of all e-mail messages with executable attachments, even when not identified as malicious, prevents the vast majority of new and unknown threats from entering your system via e-mail before the antivirus software has been updated. We recommend that you only turns feature off if you truly require the ability to receive such attachments on a regular basis. F-Prot Antivirus is now configure using a central configuration file, /etc/f-prot.conf. For more information please read the comments in the file that explain each option. The install program has been extended to automatically configure mail servers to use F-Prot Antivirus. The F-Prot Antivirus Daemon Scanner now supports persistent connections. MINOR ENHANCEMENTS AND BUGFIXES ------------------------------- Please see the CHANGES document in the package for more information. 2006-12-01