I-ClamAV 0.102.3 ifika nesisombululo kwiimpazamo ezimbini zokukhusela

Kwiintsuku ezithile ezidlulileyo ICisco yaziswa la Inguqulelo entsha yokulungisa yasimahla yeClamAV 0.10 iphakheji yeantivirus2.3 ukusombulula izinto ezibuthathaka ezimbini ezinokubangela ukwaliwa kwenkonzo, ukongeza ekusombululeni ukuvuza kwenkumbulo kunye nezinye iimpazamo ezincinci.

Kulabo abangazi ClamAV Kuya kufuneka uyazi ukuba yile i-antivirus yomthombo ovulekileyo kunye neplatform (Ineenguqulelo zeWindows, GNU / Linux, BSD, Solaris, Mac OS X kunye nezinye iinkqubo ezinje nge-Unix).

ClamAV inikeza inani lezixhobo ze-antivirus ezenzelwe ngokukodwa ukuskena i-imeyile. Uyilo lweClamAV luyatshiseka kwaye luyabulela enkosi kwinkqubo enemisonto emininzi. Ineliso elomeleleyo elidityaniswe nelayini yomyalelo kunye nezixhobo zokuhlaziya idatha ngokuzenzekelayo.

Eyona njongo iphambili yeClamAV yile ukufezekiswa kweseti yezixhobo ezithi chonga kwaye uvimbele i-imeyile malware. Elinye lawona manqaku asisiseko kolu hlobo lwesoftware kukukhawuleza Indawo kunye nokubandakanywa kwisixhobo seentsholongwane ezintsha ezifunyenweyo neziskenweyo. Oku kufezekiswa ngenxa yokusebenzisana kwamawaka abasebenzisi abasebenzisa iClamAv kunye neendawo ezinjengeVirustotal.com ezibonelela ngeentsholongwane eziskenweyo.

Elinye icandelo eliphambili leClamAV yinkxaso yabaphuhlisi enayo kwihlabathi liphela; Uthungelwano lonjiniyela lwehlabathi lwenza ukuba usabele ngokukhawuleza kubo nabuphi na ubungqina bentsholongwane entsha.

IClamAV 0.102.3

Ngokumiliselwa kwale nguqulo intsha, njengoko kuchaziwe ekuqaleni, iza ikakhulu lungisa iibhugi ezimbini ezidwelisiweyo:

• I-CVE-2020-3327: Ukulungiswa komngcipheko kwimodyuli yokuhambisa ifayile ye-ARJ kwi-ClamAV 0.102.2 enokubangela ukwaliwa kwemeko yenkonzo. Ukujonga ngokungachanekanga imida yeziphumo ezingasayiniwanga kwiziphumo ezingaphandle kwemida yokufunda ezibangela ukuxhonywa. Umbulelo okhethekileyo ku-Daehui Chang kunye no-Fady Othman ngokunceda ekuchongeni ubungozi be-ARJ.
• I-CVE-2020-3341-Ukulungisa ukuba semngciphekweni kwimodyuli yePDD yemodyuli kwiClamAV 0.101 - 0.102.2 enokubangela ukwaliwa kwemeko yenkonzo. Ukujonga ngokungachanekanga ubungakanani besikhuseli esisetyenziselwa ukuqalisa iinkqubo zokuchwetheza nge-AES kwiziphumo zokufundwa kwemida, kunokubangela ukuphazamiseka. I-OSS-Fuzz ifumene obu bungozi.

Inxalenye izilungiso ezincinci zebug okhankanywe kwisibhengezo sale nguqulelo intsha yeClamAV 0.102.3 kukulungiswa kwempazamo "Ukuzama ukwahlula ii-byte" xa uhlalutya amanye amaxwebhu e-PDF kunye Kwenziwe ulungiso kwimizuzu embalwa yokuvuza kwenkumbulo.

Okokugqibela, olunye utshintsho kule nguqulo intsha yayile hlaziya ukusuka kwiLibclamunrar ukuya kwi-UnRAR 5.9.2. Ukuba ufuna ukwazi ngakumbi malunga nale nguqulo intsha yokulungisa le phakheji, ungajonga iinkcukacha kwi isibhengezo kwikhonkco elilandelayo. 

Uyifaka njani i-ClamAV ku-Ubuntu kunye neziphumo?

Kulabo banomdla wokukwazi ukufaka le antivirus kwinkqubo yabo, banokuyenza ngendlela elula kwaye I-ClamAV ifumaneka ngaphakathi koovimba beenkqubo ezininzi zokuhanjiswa kweLinux.

Kwimeko ye-Ubuntu kunye neziphumo zayo, ungayifaka kwi-terminal okanye kwiziko lesoftware.

Ukuba ukhetha ukufaka iZiko leSoftware, kuya kufuneka ukhangele i- "ClamAV" kwaye kuya kufuneka ubone i-antivirus kunye nenketho yokuyifaka.

Ngoku, kwabo bakhetha ukhetho ukufaka Ukusuka kwisiphelo sendlela kufuneka bavule enye kuphela kwinkqubo yabo (ungayenza ngondlela-mfutshane Ctrl + Alt + T) kwaye kuyo kufuneka bachwetheze lo myalelo ulandelayo:

sudo apt-get install clamav

Kwaye ukulungele ngayo, baya kuba sele benayo le antivirus efakwe kwinkqubo yabo

Njengazo zonke i-antivirus, i-ClamAV ikwanayo ne-database yayo ethi ikhuphele kwaye ithathe ukuthelekisa kwifayile "yeenkcazo". Le fayile iluluhlu olwazisa iskena malunga nezinto ezithandabuzekayo.

Amaxesha ngamaxesha kubalulekile ukuba uyihlaziye le fayile, ukwenza oku kwisiphelo sendlela, sebenzisa nje:

sudo freshclam