[Pkg-clamav-devel] Backport ClamAV FIPS Fix to Ubuntu 22.04 Distribution

[Jake Lepere]

Thanks for the insight, Sebastion. I've shot my question to Ubuntu here
<https://answers.launchpad.net/ubuntu/+source/clamav/+question/821384>.
Sorry for the noise. This ecosystem is unfamiliar to me.

On Tue, Apr 1, 2025 at 12:58 PM Sebastian Andrzej Siewior <
sebastian at breakpoint.cc> wrote:

> On 2025-04-01 09:01:53 [-0700], Jake Lepere wrote:
> > Hello,
> Hi,
>
> > As described in [1], there's an issue currently with running ClamAV in a
> > FIPS-enabled environment. Fortunately, a fix for this was just merged and
> > will be included in v1.5.0, which is currently in beta [2]. However, this
> > issue impacts Ubuntu 22.04, and from what I can tell reviewing [3] (and
> > from [4]), this fix normally wouldn't be backported there.
> >
> > Can you help provide information on whether or not this fix will be
> > backported to the Ubuntu 22.04 distribution? If there's any merit to it,
> > backporting this would be very helpful for anyone experiencing this issue
> > on Ubuntu 22.04. Alternatives to get around this issue would be
> installing
> > from source or upgrading Ubuntu to a version that would include v1.5.0,
> > both of which aren't necessarily trivial.
>
> 1.4.x is LTS. This is what I aim for Debian. The previous LTS is 1.0.x
> currently in Bookworm. That change looks big and not like something that
> can be easily backported (but then I had just a quick look and size was
> huge).
> That said, I am not Ubuntu. You need to go to
>         https://bugs.launchpad.net/ubuntu/+source/clamav
>
> and ask these questions. All uploads I do to Debian unstable will be
> picked up by Ubuntu (without me doing anything) for the next Ubuntu
> release.
>
> > Thanks in advance.
> >
> > - Jake
>
> Sebastian
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-clamav-devel/attachments/20250401/2d5a853b/attachment.htm>