Kusintha kwa phukusi laulere la antivayirasi ClamAV 0.101.4 yokhala ndi zovuta kuchotsedwa

Anapangidwa kutulutsidwa kwa phukusi laulere la antivayirasi ClamAV 0.101.4, lomwe limachotsa chiwopsezo (CVE-2019-12900) mu kukhazikitsidwa kwa bzip2 archive decompressor, zomwe zingayambitse kubweza malo okumbukira kunja kwa buffer yomwe idaperekedwa pokonza osankhidwa ambiri.

Mtundu watsopano umalepheretsanso ntchito yopangira
osabwerezabwereza"zip bomba", chitetezo chomwe chinaperekedwa nkhani yapitayi. Chitetezo chomwe chidawonjezedwa m'mbuyomu chinali chokhudza kuchepetsa kugwiritsa ntchito zinthu, koma sanaganizire za kuthekera kopanga "mabomba a zip" omwe amawononga nthawi yokonza mafayilo. Nthawi yojambulira fayilo tsopano yangokhala mphindi ziwiri. Kuti musinthe malire, njira ya "clamscan -max-scantime" ndi malangizo a MaxScanTime a fayilo yosinthira ya clamd aperekedwa.

Source: opennet.ru

Kuwonjezera ndemanga