Kugadziridzwa kweyemahara antivirus package ClamAV 0.102.2 ine kusasimba kwakabviswa

Yakagadzirwa kuburitswa kwemahara antivirus package Clam AV 0.102.2, iyo inogadzirisa CVE-2020-3123 kusagadzikana mukushandiswa kweiyo DLP (data-kurasika-kudzivirira) nzira ine chinangwa chekuvharira kudonha kwenhamba dzekadhi rechikwereti. Nekuda kwechikanganiso mucheki yemiganhu, zvinokwanisika kugadzira mamiriro ekuverenga data kubva kune imwe nzvimbo iri kunze kweiyo yakagoverwa buffer, iyo inogona kushandiswa kuita kurwisa kweDoS uye kutanga kuparara kwebasa. Pamusoro pezvo, gadziriso yekusagadzikana kweCVE-0.102-2019, iyo yakashaikwa mubazi 1785, yakawedzerwa, iyo inobvumira kuti data inyorwe kunzvimbo yeFS kunze kwedhairekitori rinoshandiswa kuburitsa kana kutarisisa zvakagadzirirwa RAR zvinyorwa.

Kuburitswa kutsva kunogadzirisawo akati wandei asiri ekuchengetedza nyaya, kugadzirisa kuparara nekurodha vhezheni itsva yedhatabhesi mufreshclam, inogadzirisa ndangariro inodonha muemail parser, inovandudza mashandiro ekuongorora mafaera ePDF paWindows platform, inosimbisa kuongorora kweARJ. chengetedza, uye inonatsiridza mabatirwo emafaira ePDF asiri iwo, yakawedzera rutsigiro rwe autoconf 2.69 uye otomatiki 1.15.

Source: opennet.ru

Voeg