From 17f86a4697e37af00f1d0f404995348ff0fbd6ee Mon Sep 17 00:00:00 2001
From: Micah Snyder <micasnyd@cisco.com>
Date: Wed, 24 Apr 2024 19:44:10 -0400
Subject: [PATCH] News: Release notes for 1.4.0

---
 NEWS.md | 83 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 83 insertions(+)

diff --git a/NEWS.md b/NEWS.md
index 9784d61ef9..a70abf48b9 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -9,13 +9,96 @@ ClamAV 1.4.0 includes the following improvements and changes:
 
 ### Major changes
 
+- Added support for extracting ALZ archives.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1183)
+
+- Added support for extracting LHA / LZH archives.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1192)
+
+- Added the ability to disable image fuzzy hashing, if needed. For context,
+  image fuzzy hashing is a detection mechanism useful for identifying malware
+  by matching images included with the malware or phishing email / document.
+
+  New clamscan options:
+  ```
+    --scan-image[=yes(*)/no]
+    --scan-image-fuzzy-hash[=yes(*)/no]
+  ```
+
+  New clamd config options:
+  ```
+    ScanImage yes(*)/no
+    ScanImageFuzzyHash yes(*)/no
+  ```
+
+  New libclamav scan options:
+  ```c
+    options.parse &= ~CL_SCAN_PARSE_IMAGE;
+    options.parse &= ~CL_SCAN_PARSE_IMAGE_FUZZY_HASH;
+  ```
+
+  Added a dynamic configuration (DCONF) option to disable image fuzzy hashing:
+  `OTHER_CONF_IMAGE_FUZZY_HASH`. DCONF allows scanning features to be disabled
+  using a configuration "signature".
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1186)
+
 ### Other improvements
 
+- Added cross-compiling instructions for targeting ARM64 / aarch64 processors
+  for both
+  [Windows](https://github.com/Cisco-Talos/clamav/blob/main/INSTALL-cross-windows-arm64.md)
+  and
+  [Linux](https://github.com/Cisco-Talos/clamav/blob/main/INSTALL-cross-linux-arm64.md).
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1116)
+
+- Improved the `freshclam` warning messages when being blocked or rate limited
+  so as to include the Cloudflare Ray ID which helps with issue triage.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1195)
+
+- Removed unnecessary memory allocation checks when the size to be allocated
+  is fixed or comes from a trusted source.
+  Also renamed internal memory allocation functions and macros so it is more
+  obvious what each function does.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1137)
+
+- Improved the Freshclam documentation to make it clear that the `--datadir`
+  option must be an absolute path to a directory that already exists, is
+  writable by Freshclam, and is readable by ClamScan and ClamD.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1199)
+
+- Added an optimization to avoid calculating the file hash if the clean file
+  cache has been disabled. The file hash may still be calculated as needed to
+  perform hash-based signature matching if any hash-based signatures exist that
+  target a file of the same size, or if any hash-based signatures exist that
+  target "any" file size.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1167)
+
 ### Bug fixes
 
+- Silenced confusing warning message when scanning some HTML files.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1252)
+
+- Fixed minor compiler warnings.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1197)
+
+- Since the build system change from Autotools to CMake, ClamAV no longer
+  supports building with configurations where bzip2, libxml2, libz, libjson-c,
+  or libpcre2 are not available. In addition, libpcre is no longer supported,
+  in favor of libpcre2.
+  In this release we removed all of the dead code associated with those
+  unsupported build configurations.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1217)
+
+- Fixed assorted typos. Patch courtesy of RainRat.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1228)
+
+- Added missing documentation for clamscan `--force-to-disk` option.
+  - [GitHub pull request](https://github.com/Cisco-Talos/clamav/pull/1186)
+
 ### Acknowledgments
 
 Special thanks to the following people for code contributions and bug reports:
+- RainRat
 
 ## 1.3.1