Sophos SAV Dynamic Interface version 2.6.0 release notes ------------------------------------------------------ Contents -------- About these release notes Fixed issues Information from previous releases Known issues Technical support Legal notices About these release notes ------------------------- These are the release notes for the SAV Dynamic Interface package for Windows and UNIX computers. Fixed issues ------------ * Added a new configuration option for ICAP and SSSP allowing the True File Type reporting of the scanned file. * (Linux only) The dependency on shared library libssp has been removed. * (Linux only) There are two 32-bit packages, savdi-linux.intel.libc6.glibc.2.3.tar and savdi-linux.intel.libc6.glibc.2.2.tar, the latter provided for systems which cannot use the former. * (Linux only) There are two 64-bit packages, savdi-linux.amd64.glibc.2.3.tar and savdi-linux.amd64.glibc.2.3.ssp.tar. The latter build includes stack smashing protection. The former build is provided for systems which do not have the stack smashing support functions in glibc. * (Linux only) Fixed a bug. When SAV Dynamic Interface ran on a system on which Sophos Anti-Virus on-access scanning was active, SAVDI leaked a handle for each file it scanned, eventually reporting "too many open files" on attempts to scan a file. Information from previous releases ---------------------------------- Version 2.5.0 * (ICAP) Added a new mode for ICAP allowing the use of the ICAP statuses 204 and 200 to be used to indicate a clean and not clean results respectively. * (*nix only) Fixed a bug that caused child processes to crash on 32 bit Linux systems. * Fixed a bug that caused the sample application, icap.pl, to incorrectly handle file paths containing a '-'. Version 2.4.0 * The location of the language file is now configurable with a –m command line option. * (*nix only) Installing SAVDI to a custom location could fail on a 64 bit system. * New configuration option to output long detection name. * Added new SAVDI sample-apps: - savi.py – A simple Python module using SSSP - savitest.py – To illustrate the use of savi.py above - sssp.c – A simple SSSP client in C - SAVDIClient.java – a simple Java client using SSSP * Long HTTP header lines could cause an '500 Server Error’ to be returned. * (Windows only) SAVDI could prevent Windows SAV updating its drivers. * (*nix only) SAVDI could fail to install properly on non-English locales. * Running out of temporary disk space could result in SAVDI failing. * Solaris 11 (sparc) is supported. * An exception in the virus engine could cause SAVDI to fail. Version 2.3.0 * (*nix 64bit only) The install script would fail to find the SAV directories containing the engine and virusdata. The install script will in addition create a configuration file containg the discovered directories * (*nix 32 bit only) Files of a size greater than 2GB were rejected as non-existent. * (Windows only) The messages that are logged when an engine update has been detected have been made more explanatory and relevant. * (ICAP) The retain: ALL option did not work. * (ICAP) The virus data version has been added to the ISTag. The engine and virus data version details have been added to the response to the OPTIONS request. * (SSSP) Incorrect SSSP commands are rejected with a REJ response but are not logged. All REJ responses will now cause a log entry. * (SSSP) The engine and virus data version details have been added to the response to the QUERY ENGINE request. * When a new log file was started, the old log file was held open. * A SAVI option that should be set last was incorrectly being set too early. Version 2.2.0 * ICAP will tolerate a trailing '/' on the service name. * The reporting of virus data load errors has been improved * Log file handling has been changed so that if SAVDI is unable to write to the log file it will revert to a backup log. In daemon or service mode this will be the syslog or event log depending on the OS. If that fails, SAVDI will continue and not exit. * If SAVDI is unable to create a temporary file, it will attempt to create one in the systems standard temporary directory instead. If that fails, it will fail the scan request and SAVDI will continue and not exit. * (*nix only) Internal improvements to signal handling and logging that could result in a deadlock or hang. Version 2.1.1 (Windows only release) * (Windows only) SAVDI service was failing to exit appropriately to be restarted by the SCM. Version 2.1.0 * The second line of the ICAP header is ignored. Depending on the order of the ICAP headers, this may result in failure to complete the request. * %XX sequences in HTTP headers that are included in an ICAP request are incorrectly decoded. This results in failure of the request. * On Windows, SAVDI/SSSP and SAVDI/SOPHIE are not fully impersonating the client. This results in VMWare VMDK files that are mounted as volumes being inaccessible. Version 2.0 * An implementation of the ICAP standard has been added to SAVDI. Known issues ------------ * (Solaris) A missing configuration file will, correctly, prevent SAVDI from starting. On Solaris, this may cause SAVDI to crash instead of reporting the error and exiting cleanly. * File paths of a length greater than MAX_PATH characters will be rejected. * (Windows, *nix 32bit) SSSP/SCANDATA will reject data of more than 2GB. *nix 64bit is unaffected. * In the SOPHIE protocol, a maxscandata configuration value of 0 does not mean unlimited, but maximum size zero. Technical support ----------------- You can find technical support for Sophos products in any of these ways: * Visit the SophosTalk forum at http://community.sophos.com/ and search for other users who are experiencing the same problem. * Visit the Sophos support knowledgebase at http://www.sophos.com/support/ * Download the product documentation at http://www.sophos.com/support/docs/ * Open a ticket with our support team at https://secure2.sophos.com/support/contact-support/support-query.aspx Legal notices ------------- Copyright © 2017 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the licence terms or you otherwise have the prior permission in writing of the copyright owner. Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.