question about clamav .98.7

[Venomous21]

Hello,

Currently, cpanel includes clamav .98.6. Clamav .98.7 was released a week or so ago and includes fixes for high/critical rated vulnerabilities when scanning certain crafted files, which could cause arbitrary code execution as root. In what cpanel build do you expect this will be updated to the latest version? I have halted clamav scans until this is updated.

Thank you.

 

[cPanelMichael]

Hello,

Anytime a new version is released (whether it's PHP, ClamAV, or any bundled software) we pay attention and take the steps to implement it when possible/necessary. It's not always included right away because we have to put it through several tests to ensure it functions as expected. There's currently no specific time frame for the inclusion of ClamAV 0.98.7, but you can monitor our change logs at:

cPanel - Change Logs

Thank you.