-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 21:13:32 +0200 Source: clamav Binary: clamav clamav-daemon clamav-daemon-dbgsym clamav-dbgsym clamav-freshclam clamav-freshclam-dbgsym clamav-milter clamav-milter-dbgsym clamdscan clamdscan-dbgsym libclamav-dev libclamav12 libclamav12-dbgsym Architecture: amd64 Version: 1.4.6+dfsg-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Sebastian Andrzej Siewior Description: clamav - anti-virus utility for Unix - command-line interface clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamdscan - anti-virus utility for Unix - scanner client libclamav-dev - anti-virus utility for Unix - development files libclamav12 - anti-virus utility for Unix - library Closes: 1043428 1092882 1103001 1120998 1123913 1141347 1143939 Changes: clamav (1.4.6+dfsg-1~deb13u1) trixie; urgency=medium . [ Sebastian Andrzej Siewior ] * Import 1.4.5 - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser) - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998) - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Update apparmor profile for clamd (Closes: #1092882, #1123913). * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347). * Add Romanian debconf templates translation (Closes: #1103001). * Mention in the README.Debian that clamAV AppArmor profiles do not allow OnAccess scanning ("Closes: #1043428). . [ Pino Toscano ] * Make sure to ignore the not installed files on all the architectures. * Limit systemd build dependencies as linux-any, as systemd is available only on Linux. * Simplify handling of Linux-only files by using dh-exec, rather than creating install and manpages files during build: - add the dh-exec build dependency - mark the Linux-only files in install and manpages files - simplify debian/rules accordingly * Wrap the whole override_dh_installsystemd to run on Linux, rather than only the first command in it. . [ Pétur Ingi Egilsson ] * clamav-daemon.postinst.in: honour "none" as a way to disable the LogFile directive. . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon Checksums-Sha1: 536c195c20e715c96974ce41dabd0cca5bc20f8d 390368 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb a505e1f8b38576d51a25a9ef721e78ccdbc1b877 229844 clamav-daemon_1.4.6+dfsg-1~deb13u1_amd64.deb 3461df4ff3ed8d6c8e0e901a84a2ae602d787204 38626236 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb db6ff8ae4f38238b6486447073b751a529792fdf 82560 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb d599ad452734c3b10df228946f0aadfc3272c8cc 172320 clamav-freshclam_1.4.6+dfsg-1~deb13u1_amd64.deb dbbfd5c35123fbeb3cbac54da49bd052058ab932 80200 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 4152d726bbe44d5a46de2d402626204d9ab33420 212944 clamav-milter_1.4.6+dfsg-1~deb13u1_amd64.deb 73ef1ac0a27b34f27755bdf8f038b2df6b94ead9 14733 clamav_1.4.6+dfsg-1~deb13u1_amd64-buildd.buildinfo 22bf2b8017947fa53a96d3c561a84aefd4e714fc 6267908 clamav_1.4.6+dfsg-1~deb13u1_amd64.deb b2e70ff0b9443ffe15432db976545a20580cecb1 94260 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 47f1e0e6b1458cb89ee9d5168e3d0a7d10690b9b 67060 clamdscan_1.4.6+dfsg-1~deb13u1_amd64.deb b85611e90020fd59a21481fcb8b3483f92509bb6 30832 libclamav-dev_1.4.6+dfsg-1~deb13u1_amd64.deb 3e0808cfdcaa71cbf8a90b96a424cbf477211f3b 40400932 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 3b9e7c76c79198586acebcd0ef9476077da6173f 6882440 libclamav12_1.4.6+dfsg-1~deb13u1_amd64.deb Checksums-Sha256: 14abe8be64a541197076c6bf8470b949cae03757cc06cf484f0a70d129583f4e 390368 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 1d21c30dda4f0bbb453d44860e7b6cfb41f06b73b19da231d4fb79a20124c4dd 229844 clamav-daemon_1.4.6+dfsg-1~deb13u1_amd64.deb 3aa38c8e5c7e26992e08c1850950f6922c5f25023f78727fd5de10edca987f9c 38626236 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 71bcc162b8598818b23abbf02c3d3cc30cc5c3c2fc9b3f3de9755095c74975de 82560 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 64f97b51e30884f04638a93b43917666c009643cad492eb9970b1a75d7dcda88 172320 clamav-freshclam_1.4.6+dfsg-1~deb13u1_amd64.deb 55275f53fc3451882a0130a4f1318ab7cd82933b6ee193ed010136a1bbec99aa 80200 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 033abe08b5819a2daa4f951253b2b25c7f4fd964afca1caa751ce578683ac362 212944 clamav-milter_1.4.6+dfsg-1~deb13u1_amd64.deb 6e5417740b8f508c71df4607119c727d6cc7663074a64828f90e1b0eed554d53 14733 clamav_1.4.6+dfsg-1~deb13u1_amd64-buildd.buildinfo cd23850f8893d881f540cc7cb741699fcd73338e5f7b9730c0fd587b63b428a8 6267908 clamav_1.4.6+dfsg-1~deb13u1_amd64.deb 62ac322d6385574f4452292199c63817744929a186711480618091a567271f9c 94260 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 32caf82e11b80da862dbebdda08b0004df495d57d7f563e2ac3e4e12138f25c4 67060 clamdscan_1.4.6+dfsg-1~deb13u1_amd64.deb 230579fd52bc354e2d057d4583a2507ea8fc1a20a43b57af2d8773e668b7950c 30832 libclamav-dev_1.4.6+dfsg-1~deb13u1_amd64.deb 2e2d4a6c18006b5aa45ae4422ad82ec85598c63a5bb89b69fc36834bf44a0212 40400932 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 0f3cccaf5d425f1e2ffc19469889d02e1a8fa0c79404d6bc7c5b9d4f78e98685 6882440 libclamav12_1.4.6+dfsg-1~deb13u1_amd64.deb Files: e84fe87195185d9198d6c543b90d4524 390368 debug optional clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb ef7ffdb82cd77d2a276179de188a8fe0 229844 utils optional clamav-daemon_1.4.6+dfsg-1~deb13u1_amd64.deb ac9fe68a1127651e2f11c33af90d33f6 38626236 debug optional clamav-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb d1745a79c4e673c79e5fd60d5b9483a2 82560 debug optional clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 7129fd33403e4c19c2e7e65c48fcb0b3 172320 utils optional clamav-freshclam_1.4.6+dfsg-1~deb13u1_amd64.deb 935b60b0d55c62ff4acee82fb7f38db4 80200 debug optional clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 25ed205422bb68a7f51aa11d01e47c53 212944 utils optional clamav-milter_1.4.6+dfsg-1~deb13u1_amd64.deb 08ab716bdcc2b86633340a5b8b8521c7 14733 utils optional clamav_1.4.6+dfsg-1~deb13u1_amd64-buildd.buildinfo 70e45a32a15d99182949049eb2b88e7d 6267908 utils optional clamav_1.4.6+dfsg-1~deb13u1_amd64.deb e5c9dd01579f777c421915c2efdb2674 94260 debug optional clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb c8030883ce25a7f537980c0299d615c9 67060 utils optional clamdscan_1.4.6+dfsg-1~deb13u1_amd64.deb 9653460e1242c148f974ce5c1b43e692 30832 libdevel optional libclamav-dev_1.4.6+dfsg-1~deb13u1_amd64.deb 7f41d56bce3fbf04195fdc492b3783ec 40400932 debug optional libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_amd64.deb 0eb1b1646e3d12c9070f15a3a92c940c 6882440 libs optional libclamav12_1.4.6+dfsg-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmrTVjoACgkQTwt/65ON 6zerFA/+IYarsLzWCh+mSUVf/42WBj1CR/e3zxYZSu6mXLHhlhy3Jn4TurDfQvzM AJQaMt6Si2secCcPRwq8BYlsZFDV/uqKsBBygnD2vwF8QpvrpWZkF4rUuuwp+w9l vEHXJz9DYoF6TAicdEM0hl/dHKxMaGTkusXSc9YbXGjDjOPYVBkbDxwLJvgjV8vN Y41qmhsG0hU2Og/ssBs3ujdhQ6eidDSaTUxBn/39Zb7yZUJ38JdmFdrQTzTMXCX9 KdnwPEcKDi03cnN+VRVGh7xG4/n2O625oqPCH+nY9mhiS8nLRHNQoXhAWcN0CX5Z o8CdiPe/eCPM5z33xuiiDrknGzcA1JMTh7BZIy4xVLk78TTZg0mqowSm8eyAGZUq BNRVj4za8nN1roXcFLOAJ1+qcpIOKGggW3IJIBs8V8YbAvNoePnUOPAdHOi89etc UGq7i3HDrox7ee/jPGMQAHunh9fhd2UFgS9ZJzJS5MZ6N0kZB1T8bo3Fl93j9p9F Gez+sMe8cg4NLXB/KBVcgjDqFp+bpAloDtPO3EU+9zGsZN5tQf2KpCPN4txwhoTd xZ2UJAy9fsNJrMfOO0oiNPmeoQf4bHh9HnaR3b9QMZKy7SKF4Qq+hphQ8lJNkdf0 tlKm9mPq7e5CMyG36a63SfYzRUTIIu6lmb2JzZO1jzAWTdgn+tY= =BgWX -----END PGP SIGNATURE-----