@@ -1,5 +1,6 @@
-# Locally calculated
-sha256 5d3a20633bd589f612a71905a4fb50c1ee857cfbe6c72644368cac0030a1eeb4 clamav-1.0.9.tar.gz
+# Locally calculated after verifying signature from
+# https://www.clamav.net/downloads/production/clamav-1.4.3.tar.gz.sig
+sha256 d874cabf3d4765b35b518ef535658a1e6ec74802006a1d613f9f124aa1343210 clamav-1.4.3.tar.gz
sha256 0c4fd2fa9733fc9122503797648710851e4ee6d9e4969dd33fcbd8c63cd2f584 COPYING.txt
sha256 d72a145c90918184a05ef65a04c9e6f7466faa59bc1b82c8f6a8ddc7ddcb9bed COPYING/COPYING.bzip2
sha256 dfb818a0d41411c6fb1c193c68b73018ceadd1994bda41ad541cbff292894bc6 COPYING/COPYING.file
@@ -4,7 +4,7 @@
#
################################################################################
-CLAMAV_VERSION = 1.0.9
+CLAMAV_VERSION = 1.4.3
CLAMAV_SITE = https://www.clamav.net/downloads/production
CLAMAV_LICENSE = GPL-2.0
CLAMAV_LICENSE_FILES = \
As indicated on ClamAV End of Life policy webpage [1], the 1.0 series is the previous LTS (and therefore unmaintained). The ClamAV 1.4 series is the current LTS version, maintained for 3 years. However, there is a breaking build-system change in ClamAV 1.4.4 [2]: "The minimum Rust version for ClamAV 1.4.4 is now 1.87.0." Unfortunately, Buildroot LTS 2025.02.x is still on Rust v1.82, and therefore building ClamAV>=1.4.4 fails because of missing features for Rust. Therefore, update to the latest upstream LTS version that can be built with Buildroot LTS. Release notes: https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html https://blog.clamav.net/2025/01/clamav-142-and-108-security-patch.html https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html Note: release notes of clamav version 1.4.1, 1.4.2 and 1.4.3 are marked upstream as security maintenance releases. This Buildroot commit is not marked as security fix because those security patches were already applied in clamav 1.0.7, 1.0.8, and 1.0.9, and we are precisely update from 1.0.9. [1] https://docs.clamav.net/faq/faq-eol.html [2] https://github.com/Cisco-Talos/clamav/releases/tag/clamav-1.4.4 Signed-off-by: Titouan Christophe <titouan.christophe@mind.be> --- package/clamav/clamav.hash | 5 +++-- package/clamav/clamav.mk | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-)