I-Cisco ikhiphe iphakethe le-antivirus lamahhala i-ClamAV 0.102

Cisco kwethulwe ukukhishwa okusha okukhulu kwe-antivirus suite yamahhala I-ClamAV 0.102.0. Masikhumbule ukuthi iphrojekthi yadlulela ezandleni zeCisco ngo-2013 ngemuva kwalokho ukuyothenga Inkampani ye-Sourcefire, ethuthukisa i-ClamAV ne-Snort. Ikhodi yephrojekthi isatshalaliswa ngu ilayisensi ngaphansi kwe-GPLv2.

Ukuthuthukiswa Okubalulekile:

• Ukusebenza kokuhlola okusobala kwamafayela avuliwe (ukuskena ekufinyeleleni, ukuhlola ngesikhathi sokuvulwa kwefayela) kususiwe ku-clamd kwayiswa kunqubo ehlukile ye-clamonacc, esetshenziswe ngendlela efanayo ne-clamdscan ne-clamav-milter. Lolu shintsho lwenza kwaba nokwenzeka ukuhlela ukusebenza kwe-clamd ngaphansi komsebenzisi ovamile ngaphandle kwesidingo sokuthola amalungelo ezimpande. Ngaphezu kwalokho, i-clamonacc yengeze ikhono lokususa, ukukopisha noma ukufaka esikhundleni samafayela anenkinga, amafayela askeniwe adaliwe nahanjiswayo, futhi yanikeza ukusekelwa kwabaphathi be-VirusEvent kumodi yokufinyelela;
• Uhlelo lwe-freshclam seluklanywe kabusha ngokuphawulekayo, lwengeza ukwesekwa kwe-HTTPS kanye nekhono lokusebenza nezibuko ezicubungula izicelo ezimbobeni zenethiwekhi ngaphandle kwezingu-80. Imisebenzi yedatha eyisisekelo ihanjiswe kumtapo wolwazi we-libfreshclam ohlukile;
• Ukwesekwa okwengeziwe kokukhipha idatha kuzingobo zomlando zamaqanda (ESTsoft), okungadingi ukufakwa komtapo wolwazi we-UnEgg;
• Kwengezwe amandla okukhawulela isikhathi sokuskena, esisethelwa kumasekhondi angu-120 ngokuzenzakalelayo. Umkhawulo ungashintshwa ngesiqondiso se-MaxScanTime ku-clamd.conf noma ipharamitha ye-“--max-scantime” kusisetshenziswa se-clamsca;
• Ukucutshungulwa okuthuthukisiwe kwamafayela asebenzisekayo anamasiginesha edijithali Ikhodi yokuqinisekisa. Kwengezwe ikhono lokudala izinhlu ezimhlophe nezimnyama zezitifiketi. Ukuhlukaniswa okuthuthukisiwe kwefomethi ye-PE;
• Kwengezwe ikhono lokudala amasiginesha e-bytecode okukhipha i-Mach-O kanye namafayela asebenzisekayo e-ELF;
• Kwenziwa ukufometha kabusha yonke isisekelo sekhodi kusetshenziswa insiza ye-clang-format;
• Ukuhlola okuzenzakalelayo kwe-ClamAV sekusungulwe kusevisi ye-Google OSS-Fuzz;
• Umsebenzi wenziwe ukuze kuqedwe izexwayiso zabahlanganisi lapho kwakhiwa ngezinketho ze-“-Wall” kanye “no-Wextra”;
• Isisetshenziswa se-clamsubmit kanye nemodi yokukhipha imethadatha ku-clamscan (--gen-json) kufakwe ingosi yeplathifomu ye-Windows;
• Amadokhumenti ayiswe esigabeni esikhethekile isayithi futhi manje isiyatholakala ku-inthanethi, ngaphezu kokulethwa ngaphakathi kwengobo yomlando kumkhombandlela we-docs/html.

Source: opennet.ru