Tokollo ea sephutheloana sa mahala sa antivirus ClamAV 0.103.3 e se e entsoe, e fanang ka maikutlo a liphetoho tse latelang:
- Faele ea mirrors.dat e fetoletsoe ho freshclam.dat hobane ClamAV e fetotsoe ho sebelisa marang-rang a ho fana ka litaba (CDN) sebakeng sa marang-rang a seipone mme faele ea dat ha e sa na leseli la seipone. Freshclam.dat e boloka UUID e sebelisoang ho ClamAV User-Agent. Tlhokahalo ea ho reha bocha e bakoa ke taba ea hore lingoliloeng tsa basebelisi ba bang li hlakotse liipone.dat haeba ho ka ba le ho hloleha ha FreshClam, empa hona joale faele ena e na le sekhetho, seo tahlehelo ea sona e sa amoheleheng.
- Mathata a ts'ebetso e tlase ea ho hlahloba lifaele ha khetho ea ENGINE_OPTIONS_FORCE_TO_DISK e sebetsa a rarollotsoe.
- Ho senyeha ho tsitsitseng ha ts'ebetso ea ClamDScan ha u sebelisa likhetho tsa "--fdpass --multiscan" hammoho le tlhophiso ea ExcludePath faeleng ea tlhophiso ea clamd.
- Lokisa bothata ka ho beha motso joalo ka mong'a faele ea mirrors.dat ho fapana le mosebelisi ea hlalositsoeng ho "DatabaseOwner setting" ha o sebelisa clamav joalo ka motso.
- E lumelletse litlhophiso tsa HTTPUserAgent hore li koaloe ha DatabaseMirror e sebelisa clamav.net ho qoba ho thibela ka phoso.
- Ho nolofalletsa ho lemoha liteko tsa ho sebelisa hampe CVE-2010-1205 vulnerability (Heuristics.PNG.CVE-2010-1205), joale u tlameha ho nolofalletsa paramethara ea ClamScan ka ho hlaka "-alert-broken-media" kapa "AlertBrokenMedia", kaha bofokoli ke khale bo lokisitsoe hohle.
- ClamSubmit e tsitsitseng e senyeha ka mor'a hore Cloudflare e fetole Cookie "__cfduid".
Source: opennet.ru