-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 21:13:32 +0200 Source: clamav Binary: clamav-base clamav-doc clamav-docs clamav-testfiles Architecture: all Version: 1.4.6+dfsg-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Sebastian Andrzej Siewior Description: clamav-base - anti-virus utility for Unix - base package clamav-doc - anti-virus utility for Unix - documentation clamav-docs - anti-virus utility for Unix - documentation clamav-testfiles - anti-virus utility for Unix - test files Closes: 1043428 1092882 1103001 1120998 1123913 1141347 1143939 Changes: clamav (1.4.6+dfsg-1~deb13u1) trixie; urgency=medium . [ Sebastian Andrzej Siewior ] * Import 1.4.5 - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser) - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998) - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Update apparmor profile for clamd (Closes: #1092882, #1123913). * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347). * Add Romanian debconf templates translation (Closes: #1103001). * Mention in the README.Debian that clamAV AppArmor profiles do not allow OnAccess scanning ("Closes: #1043428). . [ Pino Toscano ] * Make sure to ignore the not installed files on all the architectures. * Limit systemd build dependencies as linux-any, as systemd is available only on Linux. * Simplify handling of Linux-only files by using dh-exec, rather than creating install and manpages files during build: - add the dh-exec build dependency - mark the Linux-only files in install and manpages files - simplify debian/rules accordingly * Wrap the whole override_dh_installsystemd to run on Linux, rather than only the first command in it. . [ Pétur Ingi Egilsson ] * clamav-daemon.postinst.in: honour "none" as a way to disable the LogFile directive. . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon Checksums-Sha1: c2055a34b404ec92e458d78775d0ab2786bd0af2 103172 clamav-base_1.4.6+dfsg-1~deb13u1_all.deb 78c99bcbec8856d1f59b4c62595673ce33a5eb73 203764 clamav-doc_1.4.6+dfsg-1~deb13u1_all.deb 6d6316a631168f9a900cf55ff860540b2d0ec984 14204 clamav-docs_1.4.6+dfsg-1~deb13u1_all.deb 3601a4c5ce3660f9c7742ea842b45b00eed0f587 2838484 clamav-testfiles_1.4.6+dfsg-1~deb13u1_all.deb 2f5324f40dcf0208e61c21719c37939515e2f403 11792 clamav_1.4.6+dfsg-1~deb13u1_all-buildd.buildinfo Checksums-Sha256: 6343829f6311cc66ec613a72c160abce4c13261a8e77352e1489f733c0394b04 103172 clamav-base_1.4.6+dfsg-1~deb13u1_all.deb 8fe3988bf01a50e87f0b61b8b09418934023558700d7624d13dc5993d5ecf183 203764 clamav-doc_1.4.6+dfsg-1~deb13u1_all.deb f7e14b567b87b5d59430e91110e0d7848fac1bd257983069c5113f4daf5bb412 14204 clamav-docs_1.4.6+dfsg-1~deb13u1_all.deb 291ff1eca46ce306b7bed18826ee172428796ec4fc04758f37e4e69aed20722b 2838484 clamav-testfiles_1.4.6+dfsg-1~deb13u1_all.deb e21cdb25ad9ef940b4f214e52c8014f3c63c772ba08d1f9db754f05a7c79b5c8 11792 clamav_1.4.6+dfsg-1~deb13u1_all-buildd.buildinfo Files: a7f9b4323da644d740516c1162639bdd 103172 utils optional clamav-base_1.4.6+dfsg-1~deb13u1_all.deb 6d4ce511c3374180ab1290fc9c8b2f23 203764 doc optional clamav-doc_1.4.6+dfsg-1~deb13u1_all.deb b13764711872000e74a1c20cd5fe2495 14204 oldlibs optional clamav-docs_1.4.6+dfsg-1~deb13u1_all.deb 430d74eb290ff4ed9964801a7173e517 2838484 utils optional clamav-testfiles_1.4.6+dfsg-1~deb13u1_all.deb ca199a64b4474421728a0238a76c6dfc 11792 utils optional clamav_1.4.6+dfsg-1~deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmrTVS0ACgkQaBVi67oX tflUWBAAsYOI8ajLhWsF2y3FenD8eNGpjVBqejc6Cdq87e9evswD/Z/fablJE4CE NZKpyWtGYTVPSCj3D6JR9SiV1zaHpvYhnc/cTrpY8Z3MOgVqDDOB8iFh+P9ENevl ryxVea+BcFWATp01THLdfT09awimdm+PGVV8c2c3MFyi0clEDmto+lPimffY7fAp hX1B6RxGDNa/w3MrT1pvsMM+krf8phheeh1DZjQ/r/f/NKidPOhw4tthyFaalV9M k5FYc4ERexieXEbvZjHHhQHBCPI/dvNzpQR7/O5xjqWW12bin2qVvFdxqVwYEFHv KhaeHLvyPs501sEyVD2RmBqPO8k5iXBb1/BBLVCbjWARCm1SqVHg2yMDpfESHhgM LNG9m49hrNj2EXvZ/xDNaklbiC+rUBokeOWx9JXyd/36M8y2Wkb1OAw35Q4T/R4v e9Hns2zU+WRPc1LxrqydauZn+KWJ+ZmWTwKli5bYhV5hkaI6IuwQToZSpxH4iLWb 9ZUYF8mSWSKceY6+av/xJZaG2ikuCfA6RQgWnKwHtVqeNROud92MY6pKiBXSmb3y yUVzDt18dhG/76R4EcKVw3rcBCIZMJcLJaUIGD3eEEyt3sPHpd8edjGAz1IREFgy PSDpc+vl/SXx9gdh0Y3mDFkItXzznUPvGPBqB8O9N4uXMt8u2SY= =hujm -----END PGP SIGNATURE-----