Cisco ayaa soo saartay xirmo ka hortag ah oo bilaash ah ClamAV 0.102

Shirkadda Cisco soo bandhigay siidaynta cusub ee weyn ee suite antivirus bilaashka ah Clam AV 0.102.0. Aynu dib u xasuusano in mashruucu u gudbay gacanta Cisco 2013 ka dib dukaamaysiga Shirkadda Sourcefire, oo horumarisa ClamAV iyo Snort. Koodhka mashruuca qaybiyey shatiga ku haysta GPLv2.

Horumarinta muhiimka ah:

  • Shaqeynta hubinta daah-furnaanta ee faylalka furan (sawirka gelitaanka gelitaanka, hubinta wakhtiga furitaanka faylka) ayaa laga raray clamd loona guuray habraac clamonac gaar ah, oo loo hirgeliyay si la mid ah clamdscan iyo clamav-milter. Isbeddelkan ayaa suurtogal ka dhigay in la abaabulo hawlgalka clamd ee hoos yimaada isticmaalaha caadiga ah iyada oo aan loo baahnayn in la helo mudnaanta xididka. Intaa waxaa dheer, clamonac waxay ku dartay awoodda ay ku tirtirto, nuqul ka sameyso ama u beddesho faylalka dhibaatada leh, la sawiray oo la dhaqaajiyay faylasha, oo ay taageerto maareeyayaasha VirusEvent ee habka gelitaanka;
  • Barnaamijka freshclam si weyn ayaa dib loo habeeyay, isagoo ku daray taageerada HTTPS iyo awooda lagu la shaqeeyo muraayadaha ka baaraandegaya codsiyada dekedaha shabakadaha ee aan ahayn 80. Hawlaha xogta aasaasiga ah waxaa loo raray maktabad libfreshclam gooni ah;
  • Taageero dheeri ah oo lagu soo saarayo xogta kaydka ukunta (ESTsoft), taas oo aan u baahnayn rakibaadda maktabadda UnEgg ee iska leh;
  • Waxaa lagu daray awoodda lagu xaddidayo wakhtiga iskaanka, kaas oo loo dejiyay 120 ilbiriqsi si caadi ah. Xadka waxa lagu beddeli karaa dardaaranka MaxScanTime ee ku jira clamd.conf ama cabbirka "--max-scantime" ee utility clamscan;
  • Hagaajinta habaynta faylasha la fulin karo ee leh saxeexyada dhijitaalka ah Koodhka saxda ah. Lagu daray awoodda lagu abuurayo liisaska cadaanka iyo madowga ee shahaadooyinka. Qiimaynta qaabka PE oo la hagaajiyay;
  • Waxaa lagu daray awoodda lagu abuurayo saxeexyada bytecode si loo furfuro faylasha Mach-O iyo ELF ee la fulin karo;
  • Sameeyay dib-u-habaynta dhammaan saldhigga koodka iyadoo la adeegsanayo utility-qaab-qabiil;
  • Tijaabada tooska ah ee ClamAV ayaa lagu aasaasay adeegga Google OSS-Fuzz;
  • Shaqada ayaa la qabtay si loo baabi'iyo digniinaha isku-darka marka la dhisayo xulashooyinka "-Wall" iyo "-Wextra";
  • Utility clamsubmit iyo qaabka soo saarida metadata ilaa clamscan (--gen-json) ayaa loo raray madal Windows;
  • Dukumeentiyada waxaa loo raray qayb gaar ah oo ku saabsan goobta oo hadda waxaa laga heli karaa onlayn, marka lagu daro in lagu geynayo kaydka gudaha docs/html directory.

Source: opennet.ru

Add a comment