Bug#1002298: bullseye-pu: package clamav/0.103.4+dfsg-0+deb11u1
On Sun, 2022-01-16 at 19:09 +0000, Adam D. Barratt wrote:
> On Fri, 2022-01-14 at 21:51 +0100, Sebastian Andrzej Siewior wrote:
> > > Speaking of latest patch version: Upstream released today .5.
> > > Would
> > > you
> > > prefer to wait with this until I upload .5 to unstable and
> > > stable/oldstable for this (and avoiding a second announcement)?
> >
> > I assume a direct update to .5 is preferred so I attached it here.
> > Regarding the wording: in [0] upstream says that they are going to
> > block 0.102 and earlier from database updates so we should be good.
> > That means they did not mention to block previous 0.103 releases so
> > there is probably no need to add stronger wording as I suggested.
> > The NEWS file mentions a CVE which looks harmless in typical mail
> > server setup since it requires an additional option for scanning.
> >
> > I have it in unstable since the 12th and deployed the Buster
> > version
> > on a server and had the regular testing for Bullseye.
>
> Sorry, things have been a little hectic recently.
>
> Updating to .5 seems to make sense for everyone; thanks.
>
For the record, .5 was released via {buster,bullseye}-updates last
night; see SUA211-1 /
https://lists.debian.org/debian-stable-announce/2022/01/msg00001.html
Regards,
Adam
Reply to: