Sabunta fakitin riga-kafi kyauta ClamAV 0.101.3

Kamfanin Cisco gabatar gyara sakin fakitin rigakafin ƙwayoyin cuta kyauta ClamAV 0.101.3, wanda ke kawar da lahani wanda ke ba ku damar fara ƙin sabis ta hanyar canja wurin ajiyar ajiyar zip na musamman da aka kera azaman abin haɗe-haɗe.

matsala zaɓi ne bam ɗin zip ba mai maimaitawa, wanda za a kwashe shi yana buƙatar lokaci mai yawa da albarkatu. Ma'anar hanyar ita ce sanya bayanai a cikin ma'ajin da ke ba ku damar cimma matsakaicin matsakaicin matsawa don tsarin zip - kusan sau miliyan 28. Misali, fayil ɗin zip ɗin da aka shirya na musamman mai girman 10 MB zai kai ga buɗe kusan TB 281 na bayanai, da 46 MB - 4.5 PB.

Bugu da kari, sabon sakin ya sabunta ginanniyar ɗakin karatu na libmspack, wanda a ciki shafe buffer ambaliya (CVE-2019-1010305), yana haifar da zubewar bayanai lokacin buɗe fayil ɗin chm na musamman.

A lokaci guda, an gabatar da sigar beta na sabon reshe ClamAV 0.102, wanda a cikinsa aka canza aikin aikin bincikar fayilolin da aka buɗe (hannun shiga, duba a lokacin buɗe fayil) daga clamd zuwa tsarin clamonac na daban. , aiwatar da kwatance tare da clamdscan da clamav-milter. Wannan canjin ya ba da damar tsara aikin clamd a ƙarƙashin mai amfani na yau da kullun ba tare da buƙatar samun tushen gata ba.
Sabon reshe ya kuma ƙara tallafi ga ma'ajiyar kwai (ESTsoft) kuma ya sake fasalin shirin freshclam sosai, wanda ya ƙara goyan bayan HTTPS da ikon yin aiki tare da madubai waɗanda ke aiwatar da buƙatun akan tashoshin sadarwa ban da 80.

source: budenet.ru

Add a comment