Zimbra Collaboration: CVE-2022-20770: The ClamAV package has been upgraded to version 0.105.1-2 to fix multiple vulnerabilities.

On april 20, 2022, the following vulnerability in the clamav scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: a vulnerability in chm file parser of clam antivirus (clamav) versions 0.104.0 through 0.104.2 and lts version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. for a description of this vulnerability, see the clamav blog. this advisory will be updated as additional information becomes available.