Attributed metadata history
Up to 100 retained publisher events per page for a2a286442da268208aadffa5ad9fc01a9c61408f0c75a9c636e5112b28913a42. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_38fc32838f99f6297c
observed · 2026-10-12 08:49:03 UTC
Today, we are releasing the following critical patch versions for ClamAV: 1.1.1 1.0.2 0.103.9 ClamAV 0.105 and 0.104 have reached end-of-life according to the ClamAV’s End of Life (EOL) policy and will not be patched.The release files are available for download on ClamAV.net, on the Github Release page, and through Docker Hub.Note: We observed an issue building ClamAV on Windows using the recently released libjson-c version 0.17. If you are building ClamAV for Windows, you should use libjson-c version 0.16 or prior. 1.1.1 ClamAV 1.1.1 is a critical patch release with the following fixes: CVE-2023-20197 Fixed a possible denial of service vulnerability in the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through 1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8 through 0.103.0. Thank you to Steve Smith for reporting this issue. Fixed a build issue when using the Rust nightly toolchain, which was affecting the oss-fuzz build environment used for regression tests.GitHub pull request: https://github.com/Cisco-Talos/clamav/pull/997 Fixed a build issue on Windows when using Rust version 1.70 or newer
Fingerprint: 7bf682794ed29b89b2e460dc1c0b10af1d5de3f4db13968f58d1136169377036
intelligence_src_38fc32838f99f6297c
observed · 2026-10-12 08:49:03 UTC
available
Fingerprint: 83d3a1434f663ecad3039f78055a1e829c2f94ad3cb8d7994a2093239a836b4a