Pas gjasht\u00eb muajsh zhvillimi, kompania Cisco publikoi versionin e paket\u00ebs antivirus falas ClamAV 1.3.0. Projekti kaloi n\u00eb duar t\u00eb Cisco n\u00eb vitin 2013 pas blerjes s\u00eb kompanis\u00eb Sourcefire, e cila zhvillonte ClamAV dhe Snort. Kodi i projektit shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2. Deg\u00eb 1.3.0 \u00ebsht\u00eb klasifikuar si nj\u00eb deg\u00eb e zakonshme (jo LTS), p\u00ebr t\u00eb cilat publikohen p\u00ebrdit\u00ebsime t\u00eb pakt\u00ebn p\u00ebr 4 muaj pas l\u00ebshimit t\u00eb versionit t\u00eb par\u00eb t\u00eb deg\u00ebs s\u00eb ardhshme. Mund\u00ebsia p\u00ebr t\u00eb shkarkuar baz\u00ebn e shenjave p\u00ebr deg\u00ebt jo LTS gjithashtu sigurohet p\u00ebr t\u00eb pakt\u00ebn 4 muaj shtes\u00eb pas l\u00ebshimit t\u00eb deg\u00ebs s\u00eb ardhshme. <\/p>\n
P\u00ebrmir\u00ebsimet kryesore n\u00eb ClamAV 1.3: <\/p>\n
\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr nxjerrjen dhe verifikimin e aneks\u00ebve q\u00eb p\u00ebrdoren n\u00eb skedar\u00ebt Microsoft OneNote. Analiza e formatit OneNote \u00ebsht\u00eb e aktivizuar si pik\u00eb e paracaktuar, por mund t\u00eb \u00e7aktivizohet n\u00ebse d\u00ebshirohet me parametrin \"ScanOneNote no\" n\u00eb clamd.conf, duke e specifikuar opsionin e linj\u00ebs s\u00eb komand\u00ebs \"--scan-onenote=no\" gjat\u00eb nisjes s\u00eb utilitarit clamscan, ose duke shtuar flamurin CL_SCAN_PARSE_ONENOTE n\u00eb parametrin options.parse gjat\u00eb p\u00ebrdorimit t\u00eb libclamav.\n
Nisur nd\u00ebrtimi i ClamAV n\u00eb sistemin operativ t\u00eb ngjash\u00ebm me BeOS, Haiku.\n
N\u00eb clamd \u00ebsht\u00eb shtuar kontrolli i ekzistenc\u00ebs s\u00eb directoris\u00eb p\u00ebr skedar\u00ebt temporar\u00eb, si\u00e7 \u00ebsht\u00eb p\u00ebrcaktuar n\u00eb skedarin clamd.conf n\u00ebp\u00ebrmjet direktiv\u00ebs TemporaryDirectory. N\u00eb munges\u00eb t\u00eb k\u00ebsaj directorie, procesi tani p\u00ebrfundon me nj\u00eb mesazh gabimi.\n
Kur konfigurohet nd\u00ebrtimi i librarive statike n\u00eb CMake, \u00ebsht\u00eb siguruar instalimi i librarive statike libclamav_rust, libclammspack, libclamunrar_iface dhe libclamunrar, t\u00eb cilat p\u00ebrdoren n\u00eb libclamav.\n
Implementuar p\u00ebrcaktimi i llojit t\u00eb skedarit p\u00ebr skenar\u00ebt e kompjuar Python (.pyc). Lloji i skedarit transmetohet n\u00eb form\u00ebn e nj\u00eb parametri string CL_TYPE_PYTHON_COMPILED, i mb\u00ebshtetur n\u00eb funksionet clcb_pre_cache, clcb_pre_scan dhe clcb_file_inspection.\n
P\u00ebrmir\u00ebsuar mb\u00ebshtetja p\u00ebr dekriptimin e dokumenteve PDF me nj\u00eb fjal\u00ebkalim t\u00eb zbraz\u00ebt. <\/ul>\n
Nj\u00ebkoh\u00ebsisht jan\u00eb formuar p\u00ebrdit\u00ebsime p\u00ebr ClamAV 1.2.2 dhe 1.0.5, t\u00eb cilat kan\u00eb eliminuar dy vulnerabilitete q\u00eb preknin deg\u00ebt 0.104, 0.105, 1.0, 1.1 dhe 1.2: <\/p>\n
\n
CVE-2024-20328 \u2014 mund\u00ebsia e injektimit t\u00eb komandave gjat\u00eb verifikimit t\u00eb skedar\u00ebve n\u00eb clamd p\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb implementimin e drejtimeve \"VirusEvent\", e cila p\u00ebrdoret p\u00ebr t\u00eb nisur nj\u00eb komand\u00eb t\u00eb rast\u00ebsishme n\u00eb rast zbulimi t\u00eb nj\u00eb virusi. Detajet rreth shfryt\u00ebzimit t\u00eb k\u00ebsaj dob\u00ebsie ende nuk jan\u00eb zbuluar, dihet vet\u00ebm se problemi \u00ebsht\u00eb zgjidhur duke \u00e7aktivizuar mb\u00ebshtetje p\u00ebr parametrin e formatimit t\u00eb stringut '%f' n\u00eb VirusEvent, i cili z\u00ebvend\u00ebsohej me emrin e skedarit t\u00eb infektuar.\n
Duket se sulmi p\u00ebrfshin d\u00ebrgimin e nj\u00eb emri t\u00eb ve\u00e7ant\u00eb t\u00eb skedarit t\u00eb infektuar, q\u00eb p\u00ebrmban simbole speciale t\u00eb paekspozuara gjat\u00eb ekzekutimit t\u00eb komand\u00ebs s\u00eb specifikuar n\u00eb VirusEvent. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se nj\u00eb dob\u00ebsi e ngjashme \u00ebsht\u00eb zgjidhur edhe n\u00eb vitin 2004 me \u00e7aktivizimin e mb\u00ebshtetjes p\u00ebr z\u00ebvend\u00ebsimin '%f', e cila m\u00eb von\u00eb u rikthye n\u00eb daljen ClamAV 0.104 dhe \u00e7oi n\u00eb rigjall\u00ebrimin e dob\u00ebsis\u00eb s\u00eb vjet\u00ebr. N\u00eb dob\u00ebsin\u00eb e vjet\u00ebr, p\u00ebr t\u00eb ekzekutuar komand\u00ebn e tyre gjat\u00eb verifikimit t\u00eb viruseve, mjaftonte t\u00eb krijohej nj\u00eb skedar me emrin '; mkdir owned' dhe t\u00eb shkruhej n\u00eb t\u00eb nj\u00eb n\u00ebnshkrim testues t\u00eb virusit. <\/p>\n
CVE-2024-20290 \u2014 mbingarkes\u00eb buferi n\u00eb kodin e analiz\u00ebs s\u00eb skedar\u00ebve me p\u00ebrmbajtje n\u00eb formatin OLE2, e cila mund t\u00eb shfryt\u00ebzohet nga nj\u00eb sulmues i paautorizuar p\u00ebr t\u00eb shkaktuar nj\u00eb sh\u00ebrbim t\u00eb pap\u00ebrdorsh\u00ebm (ndalimin e procesit t\u00eb skanimit). Problemi shkaktohet nga nj\u00eb verifikim i pap\u00ebrshtatsh\u00ebm i fund t\u00eb linj\u00ebs gjat\u00eb skanimit t\u00eb p\u00ebrmbajtjes, duke \u00e7uar n\u00eb leximin nga nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb buferit. <\/ul>\n