Hi, The security tracker doesn't track etch volatile at the moment. I've installed the clamav packages from etch volatile (0.90.2-1~volatile1) and debsecan reports there are updates available, but that version already has fixes for those bugs. Could etch volatile be added to the tracker? Thanks, Jeroen Dekkers