-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 21:13:32 +0200 Source: clamav Binary: clamav clamav-daemon clamav-daemon-dbgsym clamav-dbgsym clamav-freshclam clamav-freshclam-dbgsym clamav-milter clamav-milter-dbgsym clamdscan clamdscan-dbgsym libclamav-dev libclamav12 libclamav12-dbgsym Architecture: arm64 Version: 1.4.6+dfsg-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: arm64 Build Daemon (arm-conova-03) Changed-By: Sebastian Andrzej Siewior Description: clamav - anti-virus utility for Unix - command-line interface clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamdscan - anti-virus utility for Unix - scanner client libclamav-dev - anti-virus utility for Unix - development files libclamav12 - anti-virus utility for Unix - library Closes: 1043428 1092882 1103001 1120998 1123913 1141347 1143939 Changes: clamav (1.4.6+dfsg-1~deb13u1) trixie; urgency=medium . [ Sebastian Andrzej Siewior ] * Import 1.4.5 - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser) - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998) - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Update apparmor profile for clamd (Closes: #1092882, #1123913). * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347). * Add Romanian debconf templates translation (Closes: #1103001). * Mention in the README.Debian that clamAV AppArmor profiles do not allow OnAccess scanning ("Closes: #1043428). . [ Pino Toscano ] * Make sure to ignore the not installed files on all the architectures. * Limit systemd build dependencies as linux-any, as systemd is available only on Linux. * Simplify handling of Linux-only files by using dh-exec, rather than creating install and manpages files during build: - add the dh-exec build dependency - mark the Linux-only files in install and manpages files - simplify debian/rules accordingly * Wrap the whole override_dh_installsystemd to run on Linux, rather than only the first command in it. . [ Pétur Ingi Egilsson ] * clamav-daemon.postinst.in: honour "none" as a way to disable the LogFile directive. . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon Checksums-Sha1: 56b9b1b87b6126da7d7c64ec246cba41f609842a 383672 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 9273cf7469888c953c32c00328efcdb7b86e8177 221480 clamav-daemon_1.4.6+dfsg-1~deb13u1_arm64.deb b87dae77f123269ee9c04701060aef83ab55532f 34744864 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 5cfde050a8a704dc068b9c2ee75fe9dd96959481 82916 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb fefa1a47c3003375fa0ebf98129b4525314e688f 170872 clamav-freshclam_1.4.6+dfsg-1~deb13u1_arm64.deb 6d2ed3a9e4bc2e603bc5c367c5f3013c8855ee32 79056 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb ada0e883832255a25cbece55e186574fefedac2a 211268 clamav-milter_1.4.6+dfsg-1~deb13u1_arm64.deb bd6156d279f123930f5ceda6f3aad86c792f88f0 14698 clamav_1.4.6+dfsg-1~deb13u1_arm64-buildd.buildinfo 4cc54ca315d494f8c0e4c04e6e804af52ad0338e 2956188 clamav_1.4.6+dfsg-1~deb13u1_arm64.deb e81df8baee8ab71d8e1f5e86096637a7e52e1f8c 93216 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 0c85b820f7f90c184fc00b7f843f03f27f948768 65164 clamdscan_1.4.6+dfsg-1~deb13u1_arm64.deb 55a15e9c01cd61566ebfd77bd92f2c64ed3c7533 30824 libclamav-dev_1.4.6+dfsg-1~deb13u1_arm64.deb 458a17f3cd7d6ef811151f76b30019b64c86dce8 36442244 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb c6e2e5cc2c464d805158b15bd184383198abadc3 4999632 libclamav12_1.4.6+dfsg-1~deb13u1_arm64.deb Checksums-Sha256: a2e3e88b42fa9c8cc4b1cd73421f4a1e71592109d0aa88f05551bf0f54bf39ec 383672 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 1cc0e24f0883006adc54514a3b65e5efa9a7800e40062c36bcff44ea73eb8f43 221480 clamav-daemon_1.4.6+dfsg-1~deb13u1_arm64.deb 2e851865bfe039013f1d065f75b17c652b1b67b091da7deae7ecc52e6cbd91e8 34744864 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb f8b1a903f4f0558d5d9c52034d2031553f986d0a32f646132c22f978b768981d 82916 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 0382eb9be199f22cdcbbbd18a404c0a6e9c59fba77483e6bbb2218c06b098f63 170872 clamav-freshclam_1.4.6+dfsg-1~deb13u1_arm64.deb 72c31eeebed79ba3e58443ab6065e445795d8ebe2d8287780537abaf401421d0 79056 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb d5f9a0a9752e42931cb0e6d4f68f08a6aaa6476aec5c0955920b7100652cd8c5 211268 clamav-milter_1.4.6+dfsg-1~deb13u1_arm64.deb 97e713b34b92c9d45a6af09c9c985b3345254de882f5aa18fb0cabfd129631b6 14698 clamav_1.4.6+dfsg-1~deb13u1_arm64-buildd.buildinfo b184556802581c72779a07e23d39db21504e6289c7b2d1f8d6743f1c7388c5bf 2956188 clamav_1.4.6+dfsg-1~deb13u1_arm64.deb 0a7e3561c5c49d6c79d7f64d81b29e26ce2794670807afb255110f7bd3eafa3b 93216 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 6f85a30193f39c4f29a0322fd8df23c61e25316e21026a2e23070cd641e23d35 65164 clamdscan_1.4.6+dfsg-1~deb13u1_arm64.deb 3a0ebc44508ba7a8b2d1ab0c0027e79728b6f919fb94c486b437fa44727d4fc0 30824 libclamav-dev_1.4.6+dfsg-1~deb13u1_arm64.deb ca397546e9587464b1660be3bea9dc2a068aa02cecea72cc0e712fee3595dcff 36442244 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 27a81a3f39881af668fdb66ce4483641e058fa319823863552758dacae005133 4999632 libclamav12_1.4.6+dfsg-1~deb13u1_arm64.deb Files: 026d1d2051427bb03e464d6af19df4b6 383672 debug optional clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb ef019b068aa94625f73237af07f7d6e1 221480 utils optional clamav-daemon_1.4.6+dfsg-1~deb13u1_arm64.deb 4b97e92cef0c267fc5f3baf10b5f36c5 34744864 debug optional clamav-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 4c6dcd17d3b20d9588b06c032ab1c4b9 82916 debug optional clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 7b3bc0c291232c1987e25c80ae700ad3 170872 utils optional clamav-freshclam_1.4.6+dfsg-1~deb13u1_arm64.deb 5d4441aefe6ff7ddd918da59b7a9ea84 79056 debug optional clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb c70e4e2f85a97be15cca60d7c5d153a2 211268 utils optional clamav-milter_1.4.6+dfsg-1~deb13u1_arm64.deb 66cac3c4eb71fa15b430111b3859a352 14698 utils optional clamav_1.4.6+dfsg-1~deb13u1_arm64-buildd.buildinfo 6c51e4d6247be961cde5de6a6d4afeee 2956188 utils optional clamav_1.4.6+dfsg-1~deb13u1_arm64.deb fcf823daa54745d68ebea97e22eb9cdb 93216 debug optional clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb 0a062774b8d142f3edfafaad7a113817 65164 utils optional clamdscan_1.4.6+dfsg-1~deb13u1_arm64.deb 44529d872d0f2683d3979ef3945b06dc 30824 libdevel optional libclamav-dev_1.4.6+dfsg-1~deb13u1_arm64.deb cdde5ef9a57ae925980b78ce68d29d9e 36442244 debug optional libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_arm64.deb b71d2809d96ce1dfb803b8cb24c0b71a 4999632 libs optional libclamav12_1.4.6+dfsg-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmrTVlUACgkQXVp1sEH/ 1mKN/Q//WOkiXP1jbGoIXGyrNO4TDEpe6/B5ws3Ciffm+BnkVl/tkUt5JqxLv3rn qHAnSyuuh10DuNUbJyN4CKPzmOD195aT8aGXeG2k9PoKM68uqDNbMS/2tKgbxoaN haj+KlZYzw+11GB/AE3vYRoZFhe4lAUW2ZF7YFfj2cbKnK4P0DNYKdi2N72qOrrz /RgULKQL+XirdHgwSWjaK7DAY1UPQK4qmn9/rnJUK5VoWyLGdURCtBOCFR5rYRgh 13FP2TV5brOB2Do/WEzQ0DynQcToEFOFrzF6zmXcsk3JS5hSZPxtJTHZJw/xLKky aCCont5qqZMV5eRibWaMweQYga+6/cLivyrIv1IVPnRLgIMdz35PqvsbxYuWz0D/ HAzyvWZH44YyQN0y44I5Of0g4QswHUzDQHyyRykobA56SBJyKG0347+rrzlE389B cryxgh1to11gMHysGwk1u2J54tvYWpkR5b809myttRH/ytXqdKJfKhQyH4vrRrSf vFNKLZGjtQSvrkyOlHJlFo3g+GnVf5FuN7swD/dk2LmXIc3h6rdS/rryUGrzLo+f J0FYCgEM9fIF4o89fUegiTZqamCnVrkRVZlan/uqFlHvcVy6E/F7xrObYo2MvVoH BwA2BdIaXq96NyHTFxh+LfXnNWnPlDzpw8musLs1ZHlX7+oghjY= =eKMZ -----END PGP SIGNATURE-----