Hloov tshiab ntawm cov dawb antivirus pob ClamAV 0.101.4 nrog qhov tsis zoo tshem tawm

Tsim tso tawm dawb antivirus pob ClamAV 0.101.4, uas tshem tawm qhov tsis zoo (CVE-2019-12900) nyob rau hauv bzip2 archive decompressor kev siv, uas tuaj yeem ua rau overwriting qhov chaw nco sab nraum qhov kev faib tsis pub dhau thaum ua cov khoom xaiv ntau dhau.

Tus tshiab version kuj thaiv cov workaround rau tsim
uas tsis yog-recursive "zip foob", kev tiv thaiv tawm tsam uas tau thov hauv qhov teeb meem kawg. Kev tiv thaiv ntxiv ua ntej tau tsom mus rau kev txwv kev siv cov peev txheej, tab sis tsis suav nrog qhov muaj peev xwm ntawm kev tsim "zip foob pob" uas tswj xyuas lub sijhawm ntawm cov txheej txheem ua ntaub ntawv. Lub sijhawm los luam theej duab cov ntaub ntawv tam sim no tsuas yog ob feeb xwb. Txhawm rau hloov qhov teeb tsa, qhov "clamscan -max-scantime" kev xaiv thiab MaxScanTime cov lus qhia rau cov ntaub ntawv clamd configuration tau thov.

Tau qhov twg los: opennet.ru

Ntxiv ib saib