{"id":182829,"date":"2026-08-11T04:54:30","date_gmt":"2026-08-11T02:54:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6"},"modified":"2026-08-11T04:54:30","modified_gmt":"2026-08-11T02:54:31","slug":"clamav-1-5-4-i-1-4-6","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6","title":{"rendered":"ClamAV 1.5.4 ja 1.4.6","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23865\/original.jpg\">           <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/08\/b481964852b08c053e35852054a3949b.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23866\/original.jpg\">           <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/08\/7aa87c2eb8a1b4fbbbaa661b5c93c476.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                                              <noindex>          <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23865\/original.jpg\" class=\"active\"><\/a><\/noindex>                                                      <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23866\/original.jpg\"><\/a>                                             <a rel=\"nofollow\" id=\"memories_button\" href=\"#\" title=\"J\u00e4lgida\"><i class=\"icon-bell\"><\/i><\/a><br \/>1                            <\/p>\n<p>7. augustil avaldati tasuta antiviiruspaketi paranduste v\u00e4ljalasked <strong>ClamAV 1.5.4 ja 1.4.6<\/strong>. Uute versioonide peamine t\u00e4helepanu on keskendunud turvalisusele: versioonis 1.5 on suletud kaheksa CVE-d, millest kuus on parandatud ka toetatavas versioonis 1.4. Lisaks on lahendatud probleem clamd-is, mis v\u00f5is viia protsessi m\u00e4lu sisu avalikuks muutumiseni.<\/p>\n<p>V <strong>ClamAV 1.5.4<\/strong> parandatud j\u00e4rgmised haavatavused:<\/p>\n<ul>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20337\">CVE-2026-20337<\/a> \u2014 ZIP katalooge suuruse arvestamise viga v\u00f5is p\u00f5hjustada selle, et kohalike failide p\u00e4iste indekseerimise k\u00e4igus kirjutati m\u00e4lu kuhja, mis oli eraldatud. Haavatavad versioonid ClamAV 1.5.0\u20131.5.3.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20338\">CVE-2026-20338<\/a> \u2014 m\u00e4lu haldamise viga ZIP kataloogide rekordite \u00fchinemise ajal v\u00f5is p\u00f5hjustada vale m\u00e4lu vabastamise specialiseeritud arhivi t\u00f6\u00f6tlemisel. See puudutas ainult versiooni 1.5.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20345\">CVE-2026-20345<\/a> \u2014 indeksimisviga GPT jagunemiste nimede muutmisel v\u00f5imaldas lugeda v\u00f5i kirjutada andmeid jagunemise struktuuri piiridest, mis asus kuhjas. Probleem ilmnes alates ClamAV 0.98.2.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20339\">CVE-2026-20339<\/a> \u2014 t\u00e4isarvuline \u00fclevool PESpin-i dekompressoris v\u00f5is viia liiga v\u00e4ikese puhfrini, mille tulemusena kirjutati see \u00fcle PE-faili taastamise k\u00e4igus. Haavatavus eksisteeris alates ClamAV 0.90.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20346\">CVE-2026-20346<\/a> \u2014 PDF anal\u00fcsaatoris tekkiv t\u00e4isarvuline \u00fclevool v\u00f5is p\u00f5hjustada protsessi kokkuvarisemise vale kuusnurkse stringi lugemisel.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20347\">CVE-2026-20347<\/a> \u2014 t\u00e4isarvuline \u00fclevool ja m\u00e4\u00e4ratlemata k\u00e4itumine Mach-O anal\u00fcsaatoris v\u00f5isid p\u00f5hjustada skaneerimise kokkuvarisemise spetsiaalselt koostatud faili kontrollimisel.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20348\">CVE-2026-20348<\/a> \u2014 suuruse kontrollimise vead XAR anal\u00fcsaatoris v\u00f5imaldasid p\u00f5hjustada \u00fclem\u00e4\u00e4rast m\u00e4lu eraldamist v\u00f5i \u00fcletada skaneerimisepiire kahjustatud sisu tabeli dekompressimisel.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-8088\">CVE-2025-8088<\/a> \u2014 ClamAV-sse pakutav UnRAR teek on saanud upstream paranduse. Windowsis v\u00f5isid NTFS-i alternatiivsete voogude nimekaardid lubada andmete v\u00e4ljav\u00f5tmist ClamAV ajutise katalooge \u00fcletavalt.<\/li>\n<\/ul>\n<p> <noindex><\/p>\n<p>V <strong>ClamAV 1.4.6<\/strong> parandatud kuus loetletud haavatavust: <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20345\">CVE-2026-20345<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20339\">CVE-2026-20339<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20346\">CVE-2026-20346<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20347\">CVE-2026-20347<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20348\">CVE-2026-20348<\/a> ja <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-8088\">CVE-2025-8088<\/a>. Kaks ZIP t\u00f6\u00f6tlemise probleemi \u2014 <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20337\">CVE-2026-20337<\/a> ja <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20338\">CVE-2026-20338<\/a> \u2014 kuuluvad versioonide 1.5 koodi ja seega ei ole 1.4 jaoks aktuaalsed.<\/p>\n<p><\/noindex> <\/p>\n<p>Erakordselt lahendasid arendajad vana probleemiga, mis puudutab terviklikkust. <strong>clamd STATISTIKA<\/strong>. Kui skannimine ja statistiliste p\u00e4ringute t\u00e4itmine toimusid samaaegselt, v\u00f5is v\u00f5idus\u00f5it viia protsessi m\u00e4lust andmete lekkele v\u00f5i demonite kokkuvarisemisele. Viga esines ClamAV versioonist 0.95 alates. Samuti on parandatud osaliste kirjutiste k\u00e4sitlemist soketis suurte STATISTIKA vastuste saatmisel. Parandus on lisatud m\u00f5lemasse uude versiooni.<\/p>\n<p>FreeBSD-s t\u00f6\u00f6tab taas failide karantiini ja kustutamise turvaline t\u00f6\u00f6tlus. Versioonis 1.5.4 on t\u00e4iendavalt eemaldatud OpenSSL konteksti leke m\u00f5nedes konfiguratsioonides, eriti kui standardne pakkuja ei ole FIPS-iga keskkonnas saadaval. M\u00f5lemas haru on v\u00e4rskendatud Rust s\u00f5ltuvus crossbeam-epoch hoiatuse k\u00f5rvaldamiseks. <strong>RUSTSEC-2026-0204<\/strong>.<\/p>\n<p>ClamAV on platvormidevaheline avatud l\u00e4htekoodiga viiruset\u00f5rjepakett ja raamatukogude kogum pahavara tuvastamiseks, mida kasutatakse laialdaselt Linuxi ja meiliserverites. Projekt on litsentsitud <strong>GNU GPLv2<\/strong>.<\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18354803\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.5.4 \u0438 1.4.6. \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0434\u0435\u043b\u0435\u043d\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 1.5 \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0432\u043e\u0441\u0435\u043c\u044c CVE, \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 1.4. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 clamd, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u0412 ClamAV 1.5.4 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182829","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Emin Berklin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ClamAV 1.5.4 \u0438 1.4.6 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-11T02:54:31+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-11T02:54:31+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ClamAV 1.5.4 ja 1.4.6 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ClamAV 1.5.4 \u0438 1.4.6 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T02:54:31+00:00","article:modified_time":"2026-08-11T02:54:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182829","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182829"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182829\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}