ClamAV CVE-2017-12374

[globoximator]

Hallo,

ist ClamAV von den CVEs beim PMG auch betroffen. Und wenn ja, wie update ich meinen PMG Community Version?

CVE-2017-12374
CVE-2017-12378
CVE-2017-12379

Gruss

Flo

 

[dietmar]

We use the standard debian packages for clamav, and I guess there will be an update/fix soon (use apt-get or the GUI to update your system).

 

[sherminator]

any news? I'm feeling increasingly uncomfortable with the current state.

Thanks and greets
Stephan

 

[wolfgang]

See
https://forum.proxmox.com/threads/important-clamav-security-updates-for-v-5-0.41053/

 

[sherminator]

See
https://forum.proxmox.com/threads/important-clamav-security-updates-for-v-5-0.41053/

thanks for your fast reply!
I forgot to mention: We are running PMG version 4.1-10. How can we get the security patches?

Thanks and greets
Stephan

 

[wolfgang]

For PMG 4 there will be a hotfix released soon.
You can Download it form the Homepage if available.

 

[martin]

For PMG 4 there will be a hotfix released soon.
You can Download it form the Homepage if available.

Now available:

https://www.proxmox.com/en/downloads/item/pmg-hotfix-4-1-11-2debdc2a-bin

 

[sherminator]

Hi,

...just installed 4.1-11. Everything looks fine!

Thanks a lot and greets
Stephan