[clamav-users] Inquire about clamav latest stable version -

[G.W. Haywood]

Hi there,

On Wed, 27 Jul 2022, Yang, Jiayi via clamav-users wrote:

> We want to get the latest stable version of clamav and use it in our
> environment. From the release note
> (https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html),
> we see the v0.105.0 is released with 0.104.3 and 0.103.6(it seems
> the latest stable version has also upgraded to 0.105.1 now). ...

Please look again at the blog.  You will see that updates have been
published very recently.

> when we intall the package via yum, we still only get the version 103

You did not say which distribution you are using but they all have
their own policies on updates.  Some of them backport security patches
for you.  You must look to the distribution for more information about
it, the ClamAV development team can't help you very much with that.

> 1. ClamAv 0.105,0, 0.104.3, 0.103.6 got released on the same day. We
> don't see any major version change. Then why ClamAv released patch
> for 0.014 and 0.103 when 0.105 is release. Since its a minor version
> change, we think everyone should get the update?

Are you offering to pay for extra work to be done?

> 2. What are the differences between 0.105 and 0.103.6? We see the
> yum and rpm packages currently only support latest clamav version as
> 0.103.6 although these versions seem released in the meantime. Are
> there any new changes in 0.105 causing the delay in package
> distribution update?

Please read the blog and the release notes for information about the
enhancements.  You may also wish to follow developments on Github.

> 3. Do you have any suggestions that except downloading latest source
> package for clamav

What's wrong with the source package?  There's a school of thought
which holds that for security software, the only way to go is to do
exactly that.

> how can we make sure we get the latest version without delay?

You can subscribe to the announcement mailing list:

https://lists.clamav.net/mailman/listinfo/clamav-announce

and then watch your distribution's equivalent (if there is one).

> Yum and rpm don’t have the latest 105 version for now. While we’re
> wondering if you know any other package provider and its repo may
> always have the latest updates.

Yum and RPM are simply package installation tools.  They are used to
obtain packages from repositories.  The repositories are maintained by
people who are not part of the ClamAV development team and who usually
have a set of guidelines to which they work - often only when they can
find the time - and which differ from one repository to the next.  It's
up to you to choose a repository which has policies which suit you and
your intended use of the packages they provide.  The alternative to the
use of repositories is to build software from source.  It's up to you.

Version 0.103.x is now provided with Long Term Support.

What do you plan to do with ClamAV?

-- 

73,
Ged.