Debian alert DLA-4465-1 (clamav)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4465-1] clamav new upstream version
Date:
             
 
Tue, 03 Feb 2026 11:03:35 +0100
Message-ID:
             
 
<20260203100335.717735F00083@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4465-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
February 03, 2026                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : clamav
Version        : 1.4.3+dfsg-1~deb11u1

The 1.0 version of ClamAV, an anti-virus utility for Unix, had recently
been discontinued upstream, and was set to no longer accept signature
updates on November 28, 2026. This update brings ClamAV 1.4 to bullseye,
extending the upstream support.

This update also includes a new version of libclamunrar for compatibility
with rar files, and rebuilds of c-icap-modules, havp, cyrus-imapd and
pg-snakeoil for the new libclamav12 library.

For Debian 11 bullseye, this problem has been fixed in version
1.4.3+dfsg-1~deb11u1.

We recommend that you upgrade your clamav packages.

For the detailed security status of clamav please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/clamav

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=BJMe
-----END PGP SIGNATURE-----