ClamAV Product Security Update Advisory

Overview

 

We have released a security update to address a vulnerability in our ClamAV product. users of affected products are advised to update to the latest version.

 

Affected Products

 

ClamAV version 1.3.0

 

Resolved Vulnerabilities

 

A denial of service vulnerability due to the HTML file parser in ClamAV (CVE-2024-20380)

 

Vulnerability Patches

 

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

ClamAV version 1.3.1

 

Referenced Sites

 

[1] ClamAV 1.3.1, 1.2.3, 1.0.6 patch versions published

https://blog.clamav.net/2024/04/clamav-131-123-106-patch-versions.html