-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 21:13:32 +0200 Source: clamav Binary: clamav clamav-daemon clamav-daemon-dbgsym clamav-dbgsym clamav-freshclam clamav-freshclam-dbgsym clamav-milter clamav-milter-dbgsym clamdscan clamdscan-dbgsym libclamav-dev libclamav12 libclamav12-dbgsym Architecture: i386 Version: 1.4.6+dfsg-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Sebastian Andrzej Siewior Description: clamav - anti-virus utility for Unix - command-line interface clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamdscan - anti-virus utility for Unix - scanner client libclamav-dev - anti-virus utility for Unix - development files libclamav12 - anti-virus utility for Unix - library Closes: 1043428 1092882 1103001 1120998 1123913 1141347 1143939 Changes: clamav (1.4.6+dfsg-1~deb13u1) trixie; urgency=medium . [ Sebastian Andrzej Siewior ] * Import 1.4.5 - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser) - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998) - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Update apparmor profile for clamd (Closes: #1092882, #1123913). * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347). * Add Romanian debconf templates translation (Closes: #1103001). * Mention in the README.Debian that clamAV AppArmor profiles do not allow OnAccess scanning ("Closes: #1043428). . [ Pino Toscano ] * Make sure to ignore the not installed files on all the architectures. * Limit systemd build dependencies as linux-any, as systemd is available only on Linux. * Simplify handling of Linux-only files by using dh-exec, rather than creating install and manpages files during build: - add the dh-exec build dependency - mark the Linux-only files in install and manpages files - simplify debian/rules accordingly * Wrap the whole override_dh_installsystemd to run on Linux, rather than only the first command in it. . [ Pétur Ingi Egilsson ] * clamav-daemon.postinst.in: honour "none" as a way to disable the LogFile directive. . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon Checksums-Sha1: 72d4b897edccba7c3d0bd5289849fa4fa61af5bf 347300 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb dafe32afdc59bea60867b5d65033bece11b0c1bd 228012 clamav-daemon_1.4.6+dfsg-1~deb13u1_i386.deb dcf393a74af544d5d5fbed0c51d31f101c48e86a 35235792 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 3fa91f690814d8432c702c87efd92edcdaa1c8a3 72356 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 8c15264563bf2666cfd0061e428145498d9747ce 174648 clamav-freshclam_1.4.6+dfsg-1~deb13u1_i386.deb 328b3409e35699a9262965cb737ba88485078615 71744 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 55fdf7c4dab3fb5492e8ee086dec18a9437e57a2 212704 clamav-milter_1.4.6+dfsg-1~deb13u1_i386.deb 3abd9c01422c00cba2b103b4ce1395ebc2b24bad 14601 clamav_1.4.6+dfsg-1~deb13u1_i386-buildd.buildinfo a6207f242c5514cd8efb8ff2cb8c4c5ff8848219 6543900 clamav_1.4.6+dfsg-1~deb13u1_i386.deb c0d207a518bf4cac0302c3778798677ee7ba5260 84524 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 29d4c37c0ef867668d0cf394c2cab722d1172cc5 67760 clamdscan_1.4.6+dfsg-1~deb13u1_i386.deb 4f85f6f0e01628df6af0d9c7d9beead490cdf8e9 30816 libclamav-dev_1.4.6+dfsg-1~deb13u1_i386.deb a9c924cfbe48449aab670a280d2b09fcb7d84478 36858160 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 66654d799e1cea305fed60934f3c0fedcbd9269a 7307212 libclamav12_1.4.6+dfsg-1~deb13u1_i386.deb Checksums-Sha256: 84c3293454c524bd3cf0f89c7fc5d5f4061e4edb84b68f495c8dc83bf6b62d70 347300 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 9a7c036b99c8ba050f0c0be82bf62c5c78c925a97f706501250b64e029c9cfb0 228012 clamav-daemon_1.4.6+dfsg-1~deb13u1_i386.deb 73129f2f15d7a1d9cd838167e09a11593cf911556edabb343b8487d2fd588b88 35235792 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 20d69da06051dd180ecc16a1bbe209fda8c29e3a97bb424da89b60dcc9573d2f 72356 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb d396828fe4ae120fc0fdb7a5f101995db035c45f8ab282cf54e5602f2ad1c787 174648 clamav-freshclam_1.4.6+dfsg-1~deb13u1_i386.deb 4af0cec05f7f20beb85e611fee5d9933847fb8a72d889e2db4c0dfea6907e6cf 71744 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb a500f93fd1e7b264ccad582caaabb761d9506ffd982c721df430fea0eabcf636 212704 clamav-milter_1.4.6+dfsg-1~deb13u1_i386.deb b8b2af140b2efc6f3879149346a6f533f27850318833d3f44222f47dd257efcd 14601 clamav_1.4.6+dfsg-1~deb13u1_i386-buildd.buildinfo ed257354d660ac7ae43fb42bfd53229e294a250e4f1f611703bef00d0330cb83 6543900 clamav_1.4.6+dfsg-1~deb13u1_i386.deb 56fb173e8f90c0fabcc0cc92225556712f4e173179d74706620fc7219404a179 84524 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb f2147417e5bd0cfc4d172a1ed4731532849ddbf82caf96dbf1aec0a6856abb21 67760 clamdscan_1.4.6+dfsg-1~deb13u1_i386.deb 2d74d15956a6d27bdfee643f20c753e8bd5941cf265cc8117ee47309f289e129 30816 libclamav-dev_1.4.6+dfsg-1~deb13u1_i386.deb f610e64daad0c0ec076672a7bd7a6b5ec0ab70d3b806946de21cfa6a9f810fc7 36858160 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 38c304687cd8e5badb0540c3c15fb704d6bfcfe7cf66f593eb39ef32a06ae3eb 7307212 libclamav12_1.4.6+dfsg-1~deb13u1_i386.deb Files: d10231e440e385d5f11d094a98352ffc 347300 debug optional clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 8b92c315d8d83f6ba425f83e1ee7ea28 228012 utils optional clamav-daemon_1.4.6+dfsg-1~deb13u1_i386.deb 09b1912f13d2acfc54aaae61a869f771 35235792 debug optional clamav-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 9d69823b780f145d8a186b5b8c301b3e 72356 debug optional clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 05aeeb2281d8279fac321c58cef6f8fc 174648 utils optional clamav-freshclam_1.4.6+dfsg-1~deb13u1_i386.deb c40b2eeb324a51ca5b1c21907bb92a6d 71744 debug optional clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 37e79cdc2d494cf2329f9789ee4bf440 212704 utils optional clamav-milter_1.4.6+dfsg-1~deb13u1_i386.deb 408e8ff409c2c3eef435b989ff7a74f5 14601 utils optional clamav_1.4.6+dfsg-1~deb13u1_i386-buildd.buildinfo 4953ba235db6c2f1e0ebdfbe1b156f95 6543900 utils optional clamav_1.4.6+dfsg-1~deb13u1_i386.deb ec4f197b50a7bc752252534bbb9974dc 84524 debug optional clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 3b06bf7ba86eae8fcf3d8a6ed2548d20 67760 utils optional clamdscan_1.4.6+dfsg-1~deb13u1_i386.deb e3a2182448e9b8b357408bcd309fff3a 30816 libdevel optional libclamav-dev_1.4.6+dfsg-1~deb13u1_i386.deb e6a1eca2eb849094a8a820bf47a0e3f8 36858160 debug optional libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_i386.deb 2f9a5e6673ad8bf6206c6040752d4aa3 7307212 libs optional libclamav12_1.4.6+dfsg-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmrTVoIACgkQPkCWRKsh 20feYA/+JToVgj73wnjnpRxrG3BmtwPdXqMkNCYmJ40E9iYni6SnMSEaRta+IiRH aT7XbTvNIXNnu9Bxal/whGaIREGnBcC+tcg7ZLZrkh3TS+f+Q2uugUO7Zvppka7C UFq3TqQzC1t24if/HqaeTT9wYsrqdxDYJIjr87BsKeNu/aqxfyYK/gJxmVfN2lEf USvMZcPpmOOsq9PKzC7J7tffC1TJBZzLBGTjkAfxE+TwlH86H0uCj1J0mh5ZFtjr IQweK6YAD0/3tAjesU5l/F9w9KSffUZvhxuXtCQo+qjdrLJLtc2lBnOsrtI5HINy I3Hmo/D4/twuDGjRpDunfSIGlnfGBm0aiUzFRMiqP4ymX5jbWQeXz1a6Ukk/5WFU ViXLoXsugYkiojKxUlZzk+r9BDUxHrsK3dO583vI3V9UXzWEz2E8xstUg0pc5T4h H+RcXASwNQY4NG/Wvp6tZWk7Ho/DDotFzy2oD48LdZA77/TqduOUdE1HaihNgXG9 IT4QHcOC+IYNYQfSHh3wII0FopAUS5V3lkA1lgtcBODlzAWJd8PgEHoIourHj0zL fuBHc4tIM0CW5loY8l/rqK1FAae1lTNOSBqOB4T7WqhI1LKiVpIra+I9nlaDIW/G +jiZJXupe0t5Q+jtjgkPHbkfVfvcVrlEe9OaaGv+g5yJY1neHmg= =WycU -----END PGP SIGNATURE-----