{"id":182829,"date":"2026-08-11T04:54:30","date_gmt":"2026-08-11T02:54:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6"},"modified":"2026-08-11T04:54:30","modified_gmt":"2026-08-11T02:54:31","slug":"clamav-1-5-4-i-1-4-6","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/clamav-1-5-4-i-1-4-6","title":{"rendered":"ClamAV 1.5.4 ja 1.4.6","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23865\/original.jpg\">           <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/08\/b481964852b08c053e35852054a3949b.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23866\/original.jpg\">           <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/08\/7aa87c2eb8a1b4fbbbaa661b5c93c476.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                                              <noindex>          <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23865\/original.jpg\" class=\"active\"><\/a><\/noindex>                                                      <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23866\/original.jpg\"><\/a>                                             <a rel=\"nofollow\" id=\"memories_button\" href=\"#\" title=\"J\u00e4lgida\"><i class=\"icon-bell\"><\/i><\/a><br \/>1                            <\/p>\n<p>7. augustil avaldati tasuta viiruset\u00f5rje paketi parandused <strong>ClamAV 1.5.4 ja 1.4.6<\/strong>. Uute versioonide peamine fookus on turvalisusel: aktuaalses 1.5 versioonis on suletud kaheksa CVE-d, millest kuus on samuti parandatud toetatud 1.4 versioonis. Lisaks on lahendatud probleem clamd'is, mis v\u00f5is viia protsessi m\u00e4lusisalduse avalikustamiseni.<\/p>\n<p>Uues <strong>ClamAV 1.5.4<\/strong> parandatud j\u00e4rgmised haavatavused:<\/p>\n<ul>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20337\">CVE-2026-20337<\/a> \u2014 ZIP katalooge suuruse arvestamise viga v\u00f5is p\u00f5hjustada m\u00e4lu \u00fclet\u00e4itumise, kui indekseerida kohalike failide p\u00e4iseid. Haavatavad versioonid ClamAV 1.5.0\u20131.5.3.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20338\">CVE-2026-20338<\/a> \u2014 m\u00e4luhaldusprobleem ZIP katalooge \u00fchendades v\u00f5is viia vale m\u00e4lu vabastamiseni, kui t\u00f6\u00f6delda spetsiaalselt loodud arhiveeritud faili. See puudutas ainult 1.5 versiooni.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20345\">CVE-2026-20345<\/a> \u2014 indekseerimisviga GPT jaotuste nimede konverteerimisel lubas lugeda v\u00f5i kirjutada andmeid v\u00e4ljaspool jaotuse struktuuri, mis asus virnas. Probleem oli olemas alates ClamAV 0.98.2-st.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20339\">CVE-2026-20339<\/a> \u2014 t\u00e4isarvude \u00fclet\u00e4itumine PESpin'i dekompressor p\u00f5hjustas liiga v\u00e4ikese puhvri eraldamise ja sellele j\u00e4rgnenud kirjutamise puhvri piiridest v\u00e4lja, kui taastati PE-fail. Haavatavus oli olemas alates ClamAV 0.90-st.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20346\">CVE-2026-20346<\/a> \u2014 t\u00e4isarvude \u00fclet\u00e4itumine PDF-analyzer'is v\u00f5is p\u00f5hjustada protsessi kokkujooksmise, kui loeti vale kuhexakoodiga stringi.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20347\">CVE-2026-20347<\/a> \u2014 t\u00e4isarvude \u00fclet\u00e4itumine ja ettearvamatu k\u00e4itumine Mach-O anal\u00fcsaatoris v\u00f5isid p\u00f5hjustada skanneri kokkuvarisemise, kui kontrolliti spetsiaalselt loodud faili.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20348\">CVE-2026-20348<\/a> \u2014 suuruste kontrollimise vead XAR anal\u00fcsaatoris v\u00f5isid p\u00f5hjustada \u00fclem\u00e4\u00e4rast m\u00e4lu eraldamist v\u00f5i \u00fcletada seadistatud skaneerimise piiranguid, kui t\u00f6\u00f6tati katkise sisu tabeliga.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-8088\">CVE-2025-8088<\/a> \u2014 ClamAV-le kaasasolevasse UnRAR teeki on kantud allika parandused. Windowsis v\u00f5isid NTFS alternatiivsete voogude nimedes olevad tee eraldajad lubada andmete ekstraktsiooni ClamAV ajutisest kataloogist v\u00e4ljapoole.<\/li>\n<\/ul>\n<p> <noindex><\/p>\n<p>Uues <strong>ClamAV 1.4.6<\/strong> parandatud kuus loetletud haavatavust: <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20345\">CVE-2026-20345<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20339\">CVE-2026-20339<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20346\">CVE-2026-20346<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20347\">CVE-2026-20347<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20348\">CVE-2026-20348<\/a> ja <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-8088\">CVE-2025-8088<\/a>. Kaks ZIP t\u00f6\u00f6tleja probleemi - <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20337\">CVE-2026-20337<\/a> ja <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20338\">CVE-2026-20338<\/a> \u2014 kuuluvad 1.5 versiooni koodi ja seet\u00f5ttu ei ole need 1.4 jaoks olulised.<\/p>\n<p><\/noindex> <\/p>\n<p>Eraldi on arendajad lahendanud pikaajalise probleemide voogude turvalisuse osas. <strong>clamd STATISTIKA<\/strong>. Samal ajal, kui k\u00e4ivitati skaneerimine ja statistika p\u00e4ringud, v\u00f5is t\u00f5rge p\u00f5hjustada andmete lekkimist protsessi m\u00e4lust v\u00f5i demon n\u00f5rgenemist. Viga esines ClamAV-s alates versioonist 0.95. Samuti on parandatud osalise kirjutamise t\u00f6\u00f6tlemist soketis suurte STATS vastuste saatmisel. Parandus on kaasatud m\u00f5lemasse uude versiooni.<\/p>\n<p>FreeBSD-le on taas v\u00f5imalik ohutult teostada karantiini liikumise ja failide kustutamise operatsioone. Versioonis 1.5.4 on samuti k\u00f5rvaldatud OpenSSL konteksti leke, mis esines vananenud hashimisfunktsioonide kasutamisel teatud konfiguratsioonides, sealhulgas standardse teenusepakkuja puudumisel FIPSi keskkonnas. M\u00f5lemas haru on v\u00e4rskendatud Rust s\u00f5ltuvust crossbeam-epoch, et k\u00f5rvaldada hoiatus. <strong>RUSTSEC-2026-0204<\/strong>.<\/p>\n<p>ClamAV on platvormide\u00fclene tasuta viiruset\u00f5rjeprogramm ja raamatukogude kogum kahjuliku tarkvara avastamiseks, mida kasutatakse laialdaselt Linuxi ja postiserverites. Projekt levib litsentsi alusel <strong>GNU GPLv2<\/strong>.<\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18354803\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.5.4 \u0438 1.4.6. \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0434\u0435\u043b\u0435\u043d\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 1.5 \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0432\u043e\u0441\u0435\u043c\u044c CVE, \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 1.4. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 clamd, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u0412 ClamAV 1.5.4 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182829","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Emin Berklin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/clamav-1-5-4-i-1-4-6\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ClamAV 1.5.4 \u0438 1.4.6 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/clamav-1-5-4-i-1-4-6\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-11T02:54:31+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-11T02:54:31+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ClamAV 1.5.4 ja 1.4.6 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/clamav-1-5-4-i-1-4-6","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ClamAV 1.5.4 \u0438 1.4.6 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/clamav-1-5-4-i-1-4-6","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T02:54:31+00:00","article:modified_time":"2026-08-11T02:54:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182829","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-11 06:43:48","updated":"2026-08-11 06:43:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182829","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182829"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182829\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}