[Buildroot] [PATCH v2 for 2025.02.x 01/15] package/clamav: bump to v1.4.3
Titouan Christophe
titouan.christophe at mind.be
Wed Sep 2 13:16:26 UTC 2026
As indicated on ClamAV End of Life policy webpage [1], the 1.0 series is the
previous LTS (and therefore unmaintained). The ClamAV 1.4 series is the current
LTS version, maintained for 3 years.
However, there is a breaking build-system change in ClamAV 1.4.4 [2]:
"The minimum Rust version for ClamAV 1.4.4 is now 1.87.0."
Unfortunately, Buildroot LTS 2025.02.x is still on Rust v1.82, and therefore
building ClamAV>=1.4.4 fails because of missing features for Rust. Therefore,
update to the latest upstream LTS version that can be built with Buildroot LTS.
Release notes:
https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html
https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
https://blog.clamav.net/2025/01/clamav-142-and-108-security-patch.html
https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html
Note: release notes of clamav version 1.4.1, 1.4.2 and 1.4.3 are
marked upstream as security maintenance releases. This Buildroot
commit is not marked as security fix because those security patches
were already applied in clamav 1.0.7, 1.0.8, and 1.0.9, and we are
precisely update from 1.0.9.
[1] https://docs.clamav.net/faq/faq-eol.html
[2] https://github.com/Cisco-Talos/clamav/releases/tag/clamav-1.4.4
Signed-off-by: Titouan Christophe <titouan.christophe at mind.be>
---
package/clamav/clamav.hash | 5 +++--
package/clamav/clamav.mk | 2 +-
2 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/package/clamav/clamav.hash b/package/clamav/clamav.hash
index 5989682671..833c5fbf8b 100644
--- a/package/clamav/clamav.hash
+++ b/package/clamav/clamav.hash
@@ -1,5 +1,6 @@
-# Locally calculated
-sha256 5d3a20633bd589f612a71905a4fb50c1ee857cfbe6c72644368cac0030a1eeb4 clamav-1.0.9.tar.gz
+# Locally calculated after verifying signature from
+# https://www.clamav.net/downloads/production/clamav-1.4.3.tar.gz.sig
+sha256 d874cabf3d4765b35b518ef535658a1e6ec74802006a1d613f9f124aa1343210 clamav-1.4.3.tar.gz
sha256 0c4fd2fa9733fc9122503797648710851e4ee6d9e4969dd33fcbd8c63cd2f584 COPYING.txt
sha256 d72a145c90918184a05ef65a04c9e6f7466faa59bc1b82c8f6a8ddc7ddcb9bed COPYING/COPYING.bzip2
sha256 dfb818a0d41411c6fb1c193c68b73018ceadd1994bda41ad541cbff292894bc6 COPYING/COPYING.file
diff --git a/package/clamav/clamav.mk b/package/clamav/clamav.mk
index 0a88cc1b9f..93ddfaae5b 100644
--- a/package/clamav/clamav.mk
+++ b/package/clamav/clamav.mk
@@ -4,7 +4,7 @@
#
################################################################################
-CLAMAV_VERSION = 1.0.9
+CLAMAV_VERSION = 1.4.3
CLAMAV_SITE = https://www.clamav.net/downloads/production
CLAMAV_LICENSE = GPL-2.0
CLAMAV_LICENSE_FILES = \
--
2.55.0
More information about the buildroot
mailing list