Multiple vulnerabilities in ClamAV AntiVirus.

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Locked
Andy8515
Posts: 8
Joined: Mon Jan 29, 2018 8:24 pm

Multiple vulnerabilities in ClamAV AntiVirus.

Post by Andy8515 »

Many vulnerabilities was published for ClamAV Antivirus prior 0.99.3.
CVE-2017-12374
CVE-2017-12375
CVE-2017-12376
CVE-2017-12377
CVE-2017-12378
CVE-2017-12379
CVE-2017-12380
https://www.cybersecurity-help.cz/vdb/SB2018012905

Latest Zimbra 8.8.6 FOSS still uses vulnerable ClamAV 0.99.2.
So, when to wait for updates in Zimbra repostories or how to update ClamAV manualy?
Or, at last, how to completely disable ClamAV in Zimbra 8.8.6 FOSS?
User avatar
msquadrat
Advanced member
Advanced member
Posts: 183
Joined: Mon Oct 14, 2013 10:09 am

Re: Multiple vulnerabilities in ClamAV AntiVirus.

Post by msquadrat »

There was a recent post in these forums which might help you.
syntaxys
Posts: 26
Joined: Sat Sep 13, 2014 12:06 am

Re: Multiple vulnerabilities in ClamAV AntiVirus.

Post by syntaxys »

Andy8515 wrote:So, when to wait for updates in Zimbra repostories or how to update ClamAV manualy?
Or, at last, how to completely disable ClamAV in Zimbra 8.8.6 FOSS?
I wrote a Howto about this problem:
viewtopic.php?f=15&t=63519
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2782
Joined: Thu May 22, 2014 4:47 pm

Re: Multiple vulnerabilities in ClamAV AntiVirus.

Post by jorgedlcruz »

Please use the main thread for the ClamAV vulnerabilities as syntaxys said: Best regards
Jorge de la Cruz https://jorgedelacruz.es
Systems Engineer at Veeam Software https://www.veeam.com/
Locked