Multiple vulnerabilities in ClamAV AntiVirus.

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Andy8515
Posts: 3
Joined: Mon Jan 29, 2018 8:24 pm

Multiple vulnerabilities in ClamAV AntiVirus.

Postby Andy8515 » Thu Feb 01, 2018 1:15 am

Many vulnerabilities was published for ClamAV Antivirus prior 0.99.3.
CVE-2017-12374
CVE-2017-12375
CVE-2017-12376
CVE-2017-12377
CVE-2017-12378
CVE-2017-12379
CVE-2017-12380
https://www.cybersecurity-help.cz/vdb/SB2018012905

Latest Zimbra 8.8.6 FOSS still uses vulnerable ClamAV 0.99.2.
So, when to wait for updates in Zimbra repostories or how to update ClamAV manualy?
Or, at last, how to completely disable ClamAV in Zimbra 8.8.6 FOSS?


User avatar
msquadrat
Advanced member
Advanced member
Posts: 183
Joined: Mon Oct 14, 2013 10:09 am

Re: Multiple vulnerabilities in ClamAV AntiVirus.

Postby msquadrat » Thu Feb 01, 2018 8:34 am

There was a recent post in these forums which might help you.
syntaxys
Posts: 25
Joined: Sat Sep 13, 2014 12:06 am

Re: Multiple vulnerabilities in ClamAV AntiVirus.

Postby syntaxys » Thu Feb 01, 2018 9:17 am

Andy8515 wrote:So, when to wait for updates in Zimbra repostories or how to update ClamAV manualy?
Or, at last, how to completely disable ClamAV in Zimbra 8.8.6 FOSS?


I wrote a Howto about this problem:
https://forums.zimbra.org/viewtopic.php?f=15&t=63519
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2782
Joined: Thu May 22, 2014 4:47 pm

Re: Multiple vulnerabilities in ClamAV AntiVirus.

Postby jorgedlcruz » Thu Feb 01, 2018 9:30 am

Please use the main thread for the ClamAV vulnerabilities as syntaxys said:

Best regards
Jorge de la Cruz https://jorgedelacruz.es
Systems Engineer at Veeam Software https://www.veeam.com/

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 16 guests