UbuntuUpdates.org

Package "clamav"

Name: clamav

Description:

anti-virus utility for Unix - command-line interface
Latest version: 1.4.4+dfsg-0ubuntu0.22.04.1
Release: jammy (22.04)
Level: security
Repository: main
Homepage: https://www.clamav.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "clamav"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "clamav" in Jammy

Repository Area Version
base main 0.103.5+dfsg-1
base universe 0.103.5+dfsg-1
security universe 1.4.4+dfsg-0ubuntu0.22.04.1
updates universe 1.4.4+dfsg-0ubuntu0.22.04.1
updates main 1.4.4+dfsg-0ubuntu0.22.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.4.4+dfsg-0ubuntu0.22.04.1 2026-04-27 13:11:00 UTC

  clamav (1.4.4+dfsg-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Updated to version 1.4.4 to fix security issue.
    - debian/rules: bump CL_FLEVEL to 214, set DH_ALWAYS_EXCLUDE = *.orig.
    - debian/libclamav12.symbols: updated symbols to new version.
    - debian/control, debian/rules: build with rustc 1.91.
    - CVE-2026-20031

 -- Marc Deslauriers <email address hidden> Tue, 14 Apr 2026 06:02:01 -0400
Source diff to previous version
CVE-2026-20031 A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of servic

Version: 1.4.3+dfsg-0ubuntu0.22.04.1 2025-07-02 17:55:18 UTC

  clamav (1.4.3+dfsg-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Rebuild as security update for Ubuntu 22.04 LTS.
    - debian/control: remove BD on dpkg-dev and systemd-dev
    - CVE-2025-20234
    - CVE-2025-20260

 -- Marc Deslauriers <email address hidden> Wed, 25 Jun 2025 13:10:29 -0400
Source diff to previous version
CVE-2025-20234 A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS
CVE-2025-20260 A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a

Version: 0.103.12+dfsg-0ubuntu0.22.04.1 2024-09-16 15:07:07 UTC

  clamav (0.103.12+dfsg-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Updated to version 0.103.12 to fix db compatibility.
    - debian/rules: bump CL_FLEVEL to 133.
    - debian/libclamav9.symbols: updated CLAMAV_PRIVATE and cl_retflevel
      symbols to new version.
    - CVE-2024-20505
    - CVE-2024-20506

 -- Marc Deslauriers <email address hidden> Fri, 06 Sep 2024 14:47:51 -0400
Source diff to previous version
CVE-2024-20505 A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior ve
CVE-2024-20506 A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior

Version: 0.103.11+dfsg-0ubuntu0.22.04.1 2024-01-08 20:07:02 UTC

  clamav (0.103.11+dfsg-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Updated to version 0.103.11 to fix db compatibility. (LP: #2046581)
    - debian/rules: bump CL_FLEVEL to 132.
    - debian/libclamav9.symbols: updated CLAMAV_PRIVATE symbols to new
      version.

 -- Marc Deslauriers <email address hidden> Thu, 04 Jan 2024 07:41:37 -0500
Source diff to previous version

Version: 0.103.9+dfsg-0ubuntu0.22.04.1 2023-08-21 14:07:38 UTC

  clamav (0.103.9+dfsg-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Updated to version 0.103.9 to fix security issues. (LP: #2031565)
    - debian/libclamav9.symbols: updated CLAMAV_PRIVATE symbols to new
      version.
    - CVE-2023-20197

 -- Marc Deslauriers <email address hidden> Thu, 17 Aug 2023 12:10:13 -0400
2031565 Critical patch for ClamAV: 1.1.1 1.0.2 0.103.9


About   -   Send Feedback to @ubuntu_updates