Re: wheezy-security (LTS) libclamav7's version is newer than jessie's

[Moritz Mühlenhoff <jmm@inutil.org>]

On Fri, May 04, 2018 at 09:20:54AM +0200, Raphael Hertzog wrote:
> Hello Marc,
> 
> On Thu, 03 May 2018, Marc SCHAEFER wrote:
> > Probably that a downgrade of the clamav suite would solve the problem; however
> > there is something wrong in the coherency between wheezy LTS and jessie, don't
> > you think?
> 
> A newer version is already targeted to jessie (0.100.0+dfsg-0+deb8u1) but
> it's sitting in jessie-proposed-updates and will only be in the main
> repository after the next (final?) point release.
> 
> In the mean time you can add jessie-proposed-updates to your sources.list.
> 
> Maybe this should have been uploaded to jessie-updates instead...

All clamav updates are going via foo-updates (as clamav also needs
non-security-related engine updates to keep up with published rule sets),
so all LTS updates need to wait until the respective SUAs are published
to prevent the kind of problem reported by Marc.

Cheers,
        Moritz