Cisco yakaburitsa kuburitswa kutsva kwemahara antivirus suite, ClamAV 1.0.0. Bazi idzva rinozivikanwa neshanduko kune yechinyakare manhamba ekuburitswa "Major.Minor.Patch" (panzvimbo ye0.Version.Patch). Iko kushanduka kweshanduro kwakakosha kunokonzerwawo neshanduko dzakaitwa kuraibhurari yelibclamav iyo inotyora kuenderana padanho reABI nekuda kwekubviswa kweCLAMAV_PUBLIC namespace, kushandura mhando yenharo mu cl_strerror basa, uye kuiswa kwezviratidzo zveRust mutauro mu. nzvimbo yezita. Iyo purojekiti yakapfuura mumaoko eCisco muna 2013 mushure mekutenga Sourcefire, iyo kambani inogadzira ClamAV uye Snort. Iyo kodhi yeprojekiti yakagoverwa pasi peGPLv2 rezinesi.
Bazi re1.0.0 rinotsanangurwa seRutsigiro rweNguva Yakareba (LTS), iyo inotsigirwa kwemakore matatu. Kuburitswa kweClamAV 1.0.0 kuchatsiva iyo yapfuura LTS bazi reClamAV 0.103, iyo inogadziridza nekusagadzikana uye nyaya dzakakomba dzichaburitswa kusvika Gunyana 2023. Zvigadziriso zveanogara asiri e-LTS matavi anoburitswa kweinenge 4 mwedzi mushure mekuburitswa kwekutanga kwebazi rinotevera. Iko kugona kudhawunirodha dhatabhesi siginecha yeasiri-LTS matavi anopihwazve kweinenge imwe mwedzi 4 mushure mekuburitswa kwebazi rinotevera.
Kuvandudza kwakakosha muClamAV 1.0:
- Yakawedzerwa tsigiro yekubvisa kuverenga-chete OLE2-yakavakirwa XLS mafaera akavharirwa neiyo default password.
- Iyo kodhi yakanyorwa patsva kuti iite iyo-yese-match modhi, umo machisi ese ari mufaira akatemerwa, i.e. kuongorora kunoenderera mushure memutambo wekutanga. Iyo kodhi nyowani inozivikanwa seyakanyanya kuvimbika uye nyore kuchengetedza. Kuitwa kutsva uku kunobvisawo nhevedzano yezvikanganiso zvinoonekwa kana uchitarisa nemasaini mune ese-mechi modhi. Yakawedzerwa bvunzo yekutarisa iko kurongeka kwese-match maitiro.
- Callback call clcb_file_inspection() yawedzerwa kuAPI kuti ibatanidze vanobata vanoongorora zviri mukati memafaira, kusanganisira ayo akatorwa mudura.
- Iyo cl_cvdunpack() basa rawedzerwa kuAPI yekuburitsa siginecha zvinyorwa muCVD fomati.
- Zvinyorwa zvekuvaka docker mifananidzo ine ClamAV yakaendeswa kune yakaparadzana clamav-docker repository. Iyo docker mufananidzo unosanganisira emusoro mafaera eC library.
- Yakawedzerwa macheki kudzikamisa mwero wekudzokororwa kana uchibvisa zvinhu kubva kumagwaro ePDF.
- Muganho pahukuru hwendangariro yakagoverwa kana kugadzirisa kusavimbika kwekuisa data yakawedzerwa, uye yambiro yakapihwa kana muganhu uyu wapfuura.
- Iko kuungana kweyuniti bvunzo yeLibclamav-Rust raibhurari yakakwidziridzwa zvakanyanya. Mamodule akanyorwa muRust yeClamAV ave kuunganidzwa mune dhairekitori yakagovaniswa neClamAV.
- Zvirambidzo zvakadzoreredzwa kana uchitarisa kupindirana kwemarekodhi mumafaira eZIP, izvo zvakaita kuti zvibvire kubvisa yambiro dzenhema kana ichigadziriswa zvishoma, asi kwete zvakaipa, zvinyorwa zveJAR.
- Iyo kuvaka inotsanangura hushoma uye hwakanyanya hwakatsigirwa shanduro dzeLLVM. Kuedza kuvaka neshanduro yasakara kana kuti nyowani zvino konzera kukanganisa yambiro yekuti pane nyaya dzekuenderana.
- Inobvumira kuvaka neyayo RPATH runyorwa (iyo rondedzero yedhairekitori kubva kune akagovaniswa maraibhurari anoremerwa), achibvumira executable kutamirwa kune imwe nzvimbo mushure mekuvaka munzvimbo yekusimudzira.
Source: opennet.ru