Cisco ya fitar da wani babban sabon sakin babban kayan riga-kafi na bude-bude, ClamAV 1.0.0. Sabon reshe sananne ne don sauyawa zuwa lambar sakin "Major.Minor.Patch" na gargajiya (maimakon 0.Version.Patch). Wannan gagarumin canjin sigar kuma ya haɗa da canje-canje zuwa ɗakin karatu na libclamav wanda ke karya daidaituwar ABI ta hanyar cire CLAMAV_PUBLIC sunaye, canza nau'in hujja na aikin cl_strerror, tare da haɗa alamomin Tsatsa a cikin sarari suna. Cisco ya sami aikin a cikin 2013 bayan samun Sourcefire, mai haɓaka ClamAV da Snort. Ana rarraba lambar aikin a ƙarƙashin lasisin GPLv2.
An rarraba reshen 1.0.0 a matsayin reshen tallafi na dogon lokaci (LTS), tare da tallafin da aka bayar na shekaru uku. Sakin ClamAV 1.0.0 zai maye gurbin reshe na LTS na baya, ClamAV 0.103, wanda za a saki sabuntawar gyara lahani da al'amura masu mahimmanci har zuwa Satumba 2023. Sabuntawa don rassan na yau da kullun, ba a rarraba su azaman LTS ba, ana buga su aƙalla watanni huɗu bayan sakin farko na reshe na gaba. Zazzage bayanan sa hannu don rassan da ba na LTS ba kuma ana ba da su aƙalla wasu watanni huɗu bayan fitowar reshe na gaba.
Babban haɓakawa a cikin ClamAV 1.0:
- Ƙarin tallafi don ɓata fayilolin XLS na tushen OLE2 kawai rufaffen rufaffiyar tare da tsoho kalmar sirri.
- An sake rubuta lambar don aiwatar da duk yanayin daidaitawa, wanda ke gano duk matches a cikin fayil, ma'ana ana ci gaba da bincike bayan wasan farko. Ana ɗaukar sabon lambar mafi aminci da sauƙin kiyayewa. Sabuwar aiwatarwa kuma tana magance ɓangarorin ra'ayi da yawa waɗanda suka fito yayin tabbatar da tushen sa hannu a duk yanayin wasa. An ƙara gwaje-gwaje don tabbatar da daidaitattun halayen wasan.
- An ƙara sake kiran clcb_file_inspection() zuwa API don haɗa masu kula da ke duba abubuwan da ke cikin fayiloli, gami da waɗanda aka ciro daga ma'ajiyar bayanai.
- An ƙara aikin cl_cvdunpack() zuwa API don buɗe kayan tarihin sa hannu a tsarin CVD.
- Rubutun don gina hotunan Docker tare da ClamAV an motsa su zuwa wurin ajiya daban, clamav-docker. Ana haɗa masu kai ga ɗakin karatu na C a cikin hoton Docker.
- Ƙara cak don iyakance matakin maimaitawa lokacin fitar da abubuwa daga takaddun PDF.
- Iyakar girman žwažwalwar ajiya da aka kebe lokacin sarrafa bayanan shigar da ba amintacce ba ya karu, kuma an nuna gargadi lokacin da wannan iyaka ya wuce.
- Gwajin naúrar ginin ɗakin karatu na libclamav-Rust an inganta sosai. Rust modules na ClamAV yanzu an gina su a cikin shugabanci iri ɗaya da ClamAV.
- Mun sami annashuwa da ƙuntatawa lokacin bincika shigarwar masu mamayewa a cikin fayilolin ZIP, kawar da ƙiyayyar ƙarya lokacin da aka gyara ɗan ƙaramin aiki, amma mara laifi, wuraren ajiyar JAR.
- A yanzu an ayyana mafi ƙanƙanta da matsakaicin nau'ikan nau'ikan LLVM a yayin ginin. Ƙoƙarin ginawa tare da sigar da ta tsufa ko kuma sabo yanzu zai haifar da gargaɗin kuskure game da batutuwan daidaitawa.
- Ba da izinin ginawa tare da RPATH naka (jerin kundayen adireshi waɗanda aka ɗora da ɗakunan karatu na raba) yana ba da damar matsar da masu zartarwa zuwa wani wuri daban bayan ginawa a cikin yanayin haɓakawa.
source: budenet.ru
