I-Cisco ikhuphe iphakheji ye-antivirus yasimahla iClamAV 1.0.0

I-Cisco iveze ukukhutshwa okukhulu kwe-antivirus yasimahla, iClamAV 1.0.0. Isebe elitsha liphawuleka ngokutshintshela kwinani eliqhelekileyo lokukhutshwa kwe-"Major.Minor.Patch" (endaweni ye-0.Version.Patch). Utshintsho olubalulekileyo lwenguqulelo lukwabangelwa lutshintsho olwenziwe kwilayibrari ye-libclamav eyophula ukuhambelana kwinqanaba le-ABI ngenxa yokususwa kwesithuba segama se-CLAMAV_PUBLIC, ukutshintsha uhlobo lweengxabano kumsebenzi we-cl_strerror, kunye nokufakwa kweempawu zolwimi lweRust kwi. indawo yamagama. Iprojekthi idlule ezandleni zeCisco kwi-2013 emva kokuthenga i-Sourcefire, inkampani ephuhlisa iClamAV kunye ne-Snort. Ikhowudi yeprojekthi isasazwa phantsi kwelayisensi ye-GPLv2.

Isebe le-1.0.0 lihlelwa njengeNkxaso yexesha elide (LTS), exhaswa iminyaka emithathu. Ukukhutshwa kwe-ClamAV 1.0.0 kuya kuthatha indawo yesebe le-LTS langaphambili le-ClamAV 0.103, apho uhlaziyo olunobuthathaka kunye nemiba ebalulekileyo iya kukhutshwa kude kube ngoSeptemba 2023. Uhlaziyo lwamasebe angengawo e-LTS lupapashwa ubuncinane iinyanga ezi-4 emva kokukhutshwa kokuqala kwesebe elilandelayo. Ukukwazi ukukhuphela i-database yesiginitsha kumasebe angengawo e-LTS kukwabonelelwa ubuncinane ezinye iinyanga ezi-4 emva kokukhululwa kwesebe elilandelayo.

Uphuculo oluphambili kwiClamAV 1.0:

  • Inkxaso eyongeziweyo yokususa uguqulelo oluntsonkothileyo lwefayile ye-XLS esekwe kwi-OLE2 kuphela efihliweyo nge-password engagqibekanga.
  • Ikhowudi ibhalwe ngokutsha ukuphumeza imowudi yomdlalo wonke, apho yonke imilinganiselo kwifayile inqunywe, okt. ukuskena kuyaqhubeka emva komdlalo wokuqala. Ikhowudi entsha iqatshelwe ukuba inokwethenjelwa kwaye kulula ukuyigcina. Ukuphunyezwa okutsha kwakhona kuphelisa uluhlu lweentsilelo zeengcamango ezivela xa kuhlolwa ngokusayinwa kwimodi yomdlalo wonke. Iimvavanyo ezongeziweyo ukujonga ukuchaneka kokuziphatha komdlalo wonke.
  • I-callback call clcb_file_inspection () yongezwe kwi-API ukudibanisa abaphathi abahlola imixholo yeefayile, kubandakanywa nezo zikhutshwe kwii-archives.
  • Umsebenzi we-cl_cvdunpack () wongezwe kwi-API yokukhuphela utyikityo lweendawo zokugcina kwifomati yeCVD.
  • Izikripthi zokwakha imifanekiso yedokhi eneClamAV zisiwe kwindawo eyahlukileyo yokugcina i-clamav-docker. Umfanekiso wedokhi uquka iifayile zeheader zelayibrari C.
  • Iitshekhi zongezwa ukunciphisa inqanaba lokuphindaphinda xa ukhupha izinto kumaxwebhu ePDF.
  • Umda kubungakanani bememori eyabelwe xa kusetyenzwa idatha yegalelo elingathembekanga lonyusiwe, kwaye isilumkiso sikhutshwe xa lo mda ugqithisiwe.
  • Indibano yovavanyo lweyunithi yelayibrari ye-libclamav-Rust ikhawuleziswe kakhulu. Iimodyuli ezibhalwe kwiRust yeClamAV ngoku ziqokelelwa kuluhlu olukwabelwana ngalo kunye neClamAV.
  • Izithintelo ziye zahlaziywa xa kujongwa ukugqithelana kweerekhodi kwiifayile ze-ZIP, ezenze ukuba kube lula ukususa izilumkiso zobuxoki xa zilungiswa kancinane, kodwa zingenalunya, oovimba beJAR.
  • Ulwakhiwo luxela ubuncinci kunye nobuninzi beenguqulelo ezixhaswayo ze-LLVM. Ukuzama ukwakha ngoguqulelo oludala kakhulu okanye olutsha kakhulu ngoku kuya kukhokelela kwisilumkiso sempazamo sokuba kukho imiba yokuhambelana.
  • Ivumela isakhiwo esinoluhlu lwayo lwe-RPATH (uluhlu lwezalathisi apho amathala eencwadi ekwabelwana ngawo alayishwayo), ivumela ukuphunyezwa ukuba kuhanjiswe kwindawo eyahlukileyo emva kokwakhiwa kwimeko-bume yophuhliso.

umthombo: opennet.ru

Yongeza izimvo