Sabunta fakitin riga-kafi kyauta ClamAV 0.103.2 tare da kawar da lahani

An ƙirƙiri sakin fakitin rigakafin ƙwayoyin cuta kyauta ClamAV 0.103.2, wanda ke kawar da lahani da yawa:

  • CVE-2021-1386 - Haɓaka gata akan dandamalin Windows saboda rashin tsaro na UnRAR DLL (mai amfani na gida zai iya ɗaukar nauyin DLL ɗin su a ƙarƙashin sunan ɗakin karatu na UnRAR kuma ya cimma aiwatar da code tare da gatan tsarin).
  • CVE-2021-1252 - Madauki yana faruwa lokacin sarrafa fayilolin XLM Excel na musamman.
  • CVE-2021-1404 - Tsarin tsari lokacin sarrafa takaddun PDF na musamman.
  • CVE-2021-1405 - Hatsari saboda NULL mai nuna ɓatanci a cikin fargar imel.
  • Ƙwaƙwalwar ƙwaƙwalwa a cikin lambar tantance hoton PNG.

Daga cikin sauye-sauyen da ba su da alaƙa da tsaro, an soke saitunan SafeBrowsing, wanda aka rikiɗe zuwa wani stub wanda ba ya yin komai saboda Google yana canza yanayin samun damar shiga API ɗin SafeBrowsing. FreshClam mai amfani ya inganta sarrafa lambobin HTTP 304, 403 da 429, sannan kuma ya mayar da fayil ɗin mirrors.dat zuwa ga kundin bayanai.

source: budenet.ru

Add a comment