Re: ClamAV security update

From: Kurt Jaeger <pi_at_freebsd.org>
Date: Thu, 19 May 2022 07:38:55 UTC
Hi!

> I see Clamav 0.105.0, 0.104.3 and 0.103.6 were released on May 5th, the
> latter two closing "several CVE fixes".
> 
> However, the port was not updated and not even portaudit entries were added.
> 
> Was this overlooked?

There's a PR waiting:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263944

> Are the FreeBSD ports somehow not affected?

They are affected, but folks are busy with other things 8-(

-- 
pi@FreeBSD.org         +49 171 3101372                  Now what ?