[BlueOnyx:21692] Re: Security Issue in ClamAV

Michael Stauber mstauber at blueonyx.it
Fri Jan 26 12:29:36 -05 2018


Hi Gerrit,

> There recently has been a security issue with Clamav:
> 
> http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
> 
> German:
> https://www.heise.de/security/meldung/Jetzt-patchen-Angriffe-auf-Viren-Scanner-ClamAV-3951801.html

Thank you. I'm currently building 0.99.3 for all platforms and it should
become available in 3-4 hours.

> Will there be a fix for versions that are not under maintenance?

Yes. As this is a security issue that could potentially be exploited
I'll push it out for anyone with a purchase (expired or ongoing). We do
have two methods for that: Backdating the release date of the PKG in
NewLink and/or via YUM Update. I'll choose the YUM Update for this one,
as Clam AV is already in the AV-SPAM YUM repository and the PKG only
provides the means to install this AV-SPAM dependency anyway.

So you will get it during the next YUM update.

-- 
With best regards

Michael Stauber



More information about the Blueonyx mailing list