[Pkg-clamav-devel] Backport ClamAV FIPS Fix to Ubuntu 22.04 Distribution

[Sebastian Andrzej Siewior]

On 2025-04-01 09:01:53 [-0700], Jake Lepere wrote:
> Hello,
Hi,

> As described in [1], there's an issue currently with running ClamAV in a
> FIPS-enabled environment. Fortunately, a fix for this was just merged and
> will be included in v1.5.0, which is currently in beta [2]. However, this
> issue impacts Ubuntu 22.04, and from what I can tell reviewing [3] (and
> from [4]), this fix normally wouldn't be backported there.
> 
> Can you help provide information on whether or not this fix will be
> backported to the Ubuntu 22.04 distribution? If there's any merit to it,
> backporting this would be very helpful for anyone experiencing this issue
> on Ubuntu 22.04. Alternatives to get around this issue would be installing
> from source or upgrading Ubuntu to a version that would include v1.5.0,
> both of which aren't necessarily trivial.

1.4.x is LTS. This is what I aim for Debian. The previous LTS is 1.0.x
currently in Bookworm. That change looks big and not like something that
can be easily backported (but then I had just a quick look and size was
huge).
That said, I am not Ubuntu. You need to go to
	https://bugs.launchpad.net/ubuntu/+source/clamav

and ask these questions. All uploads I do to Debian unstable will be
picked up by Ubuntu (without me doing anything) for the next Ubuntu
release.

> Thanks in advance.
> 
> - Jake

Sebastian