{"id":103954,"date":"2022-05-04T21:36:46","date_gmt":"2022-05-04T19:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-cisco-vypustila-svobodnyj-antivirusnyj-paket-clamav-0-105"},"modified":"2022-05-04T21:36:46","modified_gmt":"2022-05-04T19:36:46","slug":"kompaniya-cisco-vypustila-svobodnyj-antivirusnyj-paket-clamav-0-105","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/kompaniya-cisco-vypustila-svobodnyj-antivirusnyj-paket-clamav-0-105","title":{"rendered":"Cisco has released the free antivirus package ClamAV 0.105.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Cisco has introduced a significant new release of the free antivirus package ClamAV 0.105.0, as well as corrective releases ClamAV 0.104.3 and 0.103.6, which fix vulnerabilities and bugs. It is worth noting that the project came under Cisco's control in 2013 after the acquisition of Sourcefire, which developed ClamAV and Snort. The project code is distributed under the GPLv2 license. <\/p>\n
Key improvements in ClamAV 0.105: <\/p>\n
\n
The Rust language compiler has been included as a mandatory build dependency. At least version 1.56 of Rust is required for compilation. Necessary Rust libraries are included in the main ClamAV package.\n
The code for incremental database archive updates (CDIFF) has been rewritten in Rust. The new implementation has significantly accelerated the application of updates that remove a large number of signatures from the database. This is the first module rewritten in Rust.\n
Default limit values have been increased:\n
\n
MaxScanSize: 100M > 400M\n
MaxFileSize: 25M > 100M\n
StreamMaxLength: 25M > 100M\n
PCREMaxFileSize: 25M > 100M\n
MaxEmbeddedPE: 10M > 40M\n
MaxHTMLNormalize: 10M > 40M\n
MaxScriptNormalize: 5M > 20M\n
MaxHTMLNoTags: 2M > 8M\n
The maximum line size in the configuration files freshclam.conf and clamd.conf has been increased from 512 to 1024 characters (when specifying access tokens, the DatabaseMirror parameter could exceed 512 bytes). <\/ul>\n
To identify images used for phishing or the distribution of malware, support for a new type of logical signature has been implemented, which uses a fuzzy hashing method to detect similar objects with a certain probability. The command \"sigtool \u2014fuzzy-img\" can be used to generate a fuzzy hash for an image.\n
ClamScan and ClamDScan now include the ability to scan the memory of processes. This capability has been ported from the ClamWin package and is specific to the Windows platform. In ClamScan and ClamDScan on Windows, the options \"\u2014memory\", \"\u2014kill\", and \"\u2014unload\" have been added.\n
Runtime components for executing bytecode based on LLVM have been updated. A JIT-compilation mode has been proposed to increase scanning performance compared to the default bytecode interpreter. Support for older versions of LLVM has been discontinued; versions 8 to 12 of LLVM can now be used.\n
A GenerateMetadataJson setting has been added to Clamd, which is equivalent to the \"\u2014gen-json\" option in clamscan and results in writing scanning metadata to the metadata.json file in JSON format.\n
The ability to build using the external library TomsFastMath (libtfm) has been provided, included using the options \"-D ENABLE_EXTERNAL_TOMSFASTMATH=ON\", \"-D TomsFastMath_INCLUDE_DIR=\", and \"-D TomsFastMath_LIBRARY=\". The included copy of the TomsFastMath library has been updated to version 0.13.1.\n
The Freshclam utility has improved its behavior when handling the ReceiveTimeout timeout, which now only interrupts stalled downloads and does not terminate active slow downloads over poor connections.\n
Support for building ClamdTop using the ncursesw library when ncurses is unavailable has been added.\n
Fixed vulnerabilities:\n
\n
CVE-2022-20803 \u2014 double free of memory in the OLE2 file parser.\n
CVE-2022-20770 \u2014 infinite looping in the CHM file parser.\n
CVE-2022-20796 \u2014 crash due to dereferencing a null pointer in cache validation code.\n
CVE-2022-20771 \u2014 infinite looping in the TIFF file parser.\n
CVE-2022-20785 \u2014 memory leak in the HTML parser and Javascript normalizer.\n
CVE-2022-20792 \u2014 buffer overflow in the signature database loading module. <\/ul>\n<\/ul>\n