Kompania Cisco prezantoi nj\u00eb version t\u00eb ri t\u00eb r\u00ebnd\u00ebsish\u00ebm t\u00eb paket\u00ebs s\u00eb antivirusit t\u00eb lir\u00eb ClamAV 0.105.0, si dhe publikoi versione korrigjuese ClamAV 0.104.3 dhe 0.103.6 q\u00eb rregullojn\u00eb dob\u00ebsit\u00eb dhe gabimet. Kujtojm\u00eb se projekti kaloi n\u00eb duar t\u00eb Cisco n\u00eb vitin 2013 pas blerjes s\u00eb kompanis\u00eb Sourcefire, e cila zhvillonte ClamAV dhe Snort. Kodi i projektit shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2. <\/p>\n
P\u00ebrmir\u00ebsimet kryesore n\u00eb ClamAV 0.105: <\/p>\n
\n
Compiler p\u00ebr gjuh\u00ebn Rust \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb var\u00ebsit\u00eb e detyrueshme p\u00ebr nd\u00ebrtim. Versioni minimal i nevojsh\u00ebm i Rust-it \u00ebsht\u00eb 1.56. Bibliotekat e nevojshme n\u00eb gjuh\u00ebn Rust jan\u00eb p\u00ebrfshira n\u00eb paket\u00ebn kryesore ClamAV.\n
Kodi p\u00ebr azhurnimin inkremental t\u00eb arkiv\u00ebs s\u00eb DB (CDIFF) \u00ebsht\u00eb rishkruar n\u00eb gjuh\u00ebn Rust. Realizimi i ri ka lejuar p\u00ebrshpejtimin e r\u00ebnd\u00ebsish\u00ebm t\u00eb aplikimit t\u00eb azhurnimeve q\u00eb heqin nj\u00eb num\u00ebr t\u00eb madh n\u00ebnshkrimesh nga baza. Ky \u00ebsht\u00eb moduli i par\u00eb, i rishkruar n\u00eb Rust.\n
Vlerat e kufijve t\u00eb vendosura automatikisht jan\u00eb rritur:\n
\n
MaxScanSize: 100M > 400M\n
MaxFileSize: 25M > 100M\n
StreamMaxLength: 25M > 100M\n
PCREMaxFileSize: 25M > 100M\n
MaxEmbeddedPE: 10M > 40M\n
MaxHTMLNormalize: 10M > 40M\n
MaxScriptNormalize: 5M > 20M\n
MaxHTMLNoTags: 2M > 8M\n
Madh\u00ebsia maksimale e rreshtit n\u00eb skedar\u00ebt konfiguruese freshclam.conf dhe clamd.conf \u00ebsht\u00eb rritur nga 512 n\u00eb 1024 karaktere (kur japin tokenat e aksesit, parametri DatabaseMirror mund t\u00eb kaloj\u00eb 512 byte). <\/ul>\n
P\u00ebr t\u00eb identifikuar imazhet q\u00eb p\u00ebrdoren p\u00ebr phishing ose shp\u00ebrndarjen e malware, \u00ebsht\u00eb realizuar mb\u00ebshtetje p\u00ebr nj\u00eb lloj t\u00eb ri t\u00eb n\u00ebnshkrimeve logjike, t\u00eb cilat p\u00ebrdorin metod\u00ebn e hashing-ut fuzzy (fuzzy hashing), e cila lejon identifikimin e objekteve t\u00eb ngjashme me nj\u00eb nivel t\u00eb caktuar t\u00eb probabilitetit. P\u00ebr t\u00eb gjeneruar nj\u00eb hash fuzzy p\u00ebr imazhin mund t\u00eb p\u00ebrdorni komand\u00ebn \"sigtool \u2014fuzzy-img\".\n
N\u00eb ClamScan dhe ClamDScan \u00ebsht\u00eb e integruar mund\u00ebsia e skanimit t\u00eb memories s\u00eb proceseve. Kjo mund\u00ebsi \u00ebsht\u00eb transferuar nga paketa ClamWin dhe \u00ebsht\u00eb specifike p\u00ebr platform\u00ebn Windows. N\u00eb ClamScan dhe ClamDScan n\u00eb platform\u00ebn Windows \u00ebsht\u00eb shtuar opsionet \"\u2014memory\", \"\u2014kill\" dhe \"\u2014unload\".\n
Komponent\u00ebt e ekzekutimit p\u00ebr bytecode, t\u00eb bazuar n\u00eb LLVM, jan\u00eb p\u00ebrdit\u00ebsuar. P\u00ebr t\u00eb rritur performanc\u00ebn e skanimit n\u00eb krahasim me interpretuesin e propozuar si standard, \u00ebsht\u00eb propozuar nj\u00eb mod i JIT-kompilimit. Mb\u00ebshtetja p\u00ebr versionet e vjetra t\u00eb LLVM \u00ebsht\u00eb nd\u00ebrprer\u00eb, tani mund t\u00eb p\u00ebrdoren versionet LLVM nga 8 deri n\u00eb 12.\n
N\u00eb Clamd \u00ebsht\u00eb shtuar konfigurimi GenerateMetadataJson, ekuivalente me opsionin \"\u2014gen-json\" n\u00eb clamscan dhe q\u00eb \u00e7on n\u00eb regjistrimin n\u00eb skedarin metadata.json t\u00eb metadatat mbi procesin e skanimit n\u00eb formatin JSON.\n
\u00cbsht\u00eb ofruar mund\u00ebsia e nd\u00ebrtimit duke p\u00ebrdorur bibliotek\u00ebn e jashtme TomsFastMath (libtfm), e cila p\u00ebrfshihet p\u00ebrmes opsioneve \"-D ENABLE_EXTERNAL_TOMSFASTMATH=ON\", \"-D TomsFastMath_INCLUDE_DIR=\" dhe \"-D TomsFastMath_LIBRARY=\". Kopja e bibliotek\u00ebs TomsFastMath e p\u00ebrfshir\u00eb n\u00eb dor\u00ebzim \u00ebsht\u00eb azhurnuar n\u00eb versionin 0.13.1.\n
N\u00eb utilitarin Freshclam \u00ebsht\u00eb p\u00ebrmir\u00ebsuar sjellja gjat\u00eb p\u00ebrpunimit t\u00eb koh\u00ebs s\u00eb pritjes ReceiveTimeout, e cila tani nd\u00ebrpritet vet\u00ebm p\u00ebr shkarkimet e bllokuara dhe nuk nd\u00ebrpret shkarkimet aktive t\u00eb ngadalta me kalimin e t\u00eb dh\u00ebnave p\u00ebrmes kanaleve t\u00eb dob\u00ebta t\u00eb komunikimit.\n
Shtuar mb\u00ebshtetje p\u00ebr nd\u00ebrtimin e ClamdTop duke p\u00ebrdorur bibliotek\u00ebn ncursesw n\u00eb rast se ncurses mungon.\n
Jan\u00eb eliminuar vulnerabilitetet:\n
\n
CVE-2022-20803 \u2014 \u00e7lirimi i dyfisht\u00eb i memories n\u00eb parserin e skedar\u00ebve OLE2.\n
CVE-2022-20770 \u2014 bllokim i pafund n\u00eb parserin e skedar\u00ebve CHM.\n