-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 21:13:32 +0200 Source: clamav Binary: clamav clamav-daemon clamav-daemon-dbgsym clamav-dbgsym clamav-freshclam clamav-freshclam-dbgsym clamav-milter clamav-milter-dbgsym clamdscan clamdscan-dbgsym libclamav-dev libclamav12 libclamav12-dbgsym Architecture: riscv64 Version: 1.4.6+dfsg-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-01) Changed-By: Sebastian Andrzej Siewior Description: clamav - anti-virus utility for Unix - command-line interface clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamdscan - anti-virus utility for Unix - scanner client libclamav-dev - anti-virus utility for Unix - development files libclamav12 - anti-virus utility for Unix - library Closes: 1043428 1092882 1103001 1120998 1123913 1141347 1143939 Changes: clamav (1.4.6+dfsg-1~deb13u1) trixie; urgency=medium . [ Sebastian Andrzej Siewior ] * Import 1.4.5 - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser) - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998) - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Update apparmor profile for clamd (Closes: #1092882, #1123913). * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347). * Add Romanian debconf templates translation (Closes: #1103001). * Mention in the README.Debian that clamAV AppArmor profiles do not allow OnAccess scanning ("Closes: #1043428). . [ Pino Toscano ] * Make sure to ignore the not installed files on all the architectures. * Limit systemd build dependencies as linux-any, as systemd is available only on Linux. * Simplify handling of Linux-only files by using dh-exec, rather than creating install and manpages files during build: - add the dh-exec build dependency - mark the Linux-only files in install and manpages files - simplify debian/rules accordingly * Wrap the whole override_dh_installsystemd to run on Linux, rather than only the first command in it. . [ Pétur Ingi Egilsson ] * clamav-daemon.postinst.in: honour "none" as a way to disable the LogFile directive. . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon Checksums-Sha1: 01676859d71cf940d8ed44ec99583a0dce45c0bc 372124 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 3a02b405ee72e26262f77089efdebbcfe15dfa1e 225508 clamav-daemon_1.4.6+dfsg-1~deb13u1_riscv64.deb acb608ccc08211172a5abbc68f3ab90558d0ff08 34059828 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb ca8e91ef1be27b5939ebe4270dcd83db0504a08f 81428 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 3fd0911be8426cf28efc2a5bec0ec5ffe3feac92 172772 clamav-freshclam_1.4.6+dfsg-1~deb13u1_riscv64.deb cb66d54467826716cd8eae75d61cf6e70f434ec3 77492 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 0dfaf571af2044ea428dce87c5be7d2039f5694b 211856 clamav-milter_1.4.6+dfsg-1~deb13u1_riscv64.deb 1a7eb75cb6273bbb2aaf690c843b528ecf2f1b2c 14747 clamav_1.4.6+dfsg-1~deb13u1_riscv64-buildd.buildinfo 67575d32d6d3079f1c45f6e445d66ced3592be80 3541060 clamav_1.4.6+dfsg-1~deb13u1_riscv64.deb 22069ef5cc7a7ba3d4941209464cc1c8f91ae275 90444 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 79276768515bf98f39ba9ededc8d0db12685cf3b 66304 clamdscan_1.4.6+dfsg-1~deb13u1_riscv64.deb a95dbec3c7f6c67ad34bc829aa09f3b97664d6a7 30828 libclamav-dev_1.4.6+dfsg-1~deb13u1_riscv64.deb e4b6f491729d888ca86635551aa9f08e3a8e0fcb 35733788 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 72c3cf85c3c9fa99ff94c27e5ae68d1ee7ddec29 4170376 libclamav12_1.4.6+dfsg-1~deb13u1_riscv64.deb Checksums-Sha256: 96173207dd26cb6e867be635080e45641037cf656f080eb59e58b562551d7063 372124 clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 764eb27c3d950610c5d1f7ac834ba243f8fd03982f69aecfa7510e357eda39b9 225508 clamav-daemon_1.4.6+dfsg-1~deb13u1_riscv64.deb fb899cf4210c67000e22fad1845ccebd216e2d2e0d12f074a59d45098ef078af 34059828 clamav-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb d796ec19812542b3c45d545b8098ef74e8e7adf100a62c9ee29968075875cc45 81428 clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 1ad0984a7e9b42c7a23420929bd9420c95f4e8b50e5a27f3399344ac83ab1e00 172772 clamav-freshclam_1.4.6+dfsg-1~deb13u1_riscv64.deb d1ef49a5b62b463988355aeb2b7c664f1e96b9395596e1e7be6fc0c6398a6f16 77492 clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 482df3ee02676660769408671349d7bc439146ee283eef932c0a1454965d2b27 211856 clamav-milter_1.4.6+dfsg-1~deb13u1_riscv64.deb f12ff174a11be0b71d4ef2d3936714991c0d2d80ee9954692f5ba2beb83e9a8b 14747 clamav_1.4.6+dfsg-1~deb13u1_riscv64-buildd.buildinfo 5d8144239c379f8f01e79dd6aa530c1ca19625475b9e7a78defc48bbc87b6c9e 3541060 clamav_1.4.6+dfsg-1~deb13u1_riscv64.deb 2d8533661857c2124c2a463f4cbdabb5ccd9d4ab5af536e0e10559d4541bb708 90444 clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 507704a5d6ba7b3e683ccafb9a106f947735418902a6a04380b8ca6aad2a1ea9 66304 clamdscan_1.4.6+dfsg-1~deb13u1_riscv64.deb c77271d5cd829f6bae4bbdfd9d0f27131f50349032f35a769597ee2b76880808 30828 libclamav-dev_1.4.6+dfsg-1~deb13u1_riscv64.deb 02f949dc8c9812ed25a13f6ec5283a7d07324fe281ae92ac6b3c3fce24b64edc 35733788 libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 81d9442f960092d8d1438495dd19b2182c10bd92a7d33e161ffd98823b6c2bad 4170376 libclamav12_1.4.6+dfsg-1~deb13u1_riscv64.deb Files: 7134df4afeeee645fab3f18822b582ec 372124 debug optional clamav-daemon-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb bdcd5f3e8b34744a83c5a3aec09cbba1 225508 utils optional clamav-daemon_1.4.6+dfsg-1~deb13u1_riscv64.deb 690a421c9d93f37e606ba800dd7114f3 34059828 debug optional clamav-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 8f26a4341a5e4701ee976fe275cbd4d0 81428 debug optional clamav-freshclam-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 4ec8562c913f48e2a92aaeae3597fdc1 172772 utils optional clamav-freshclam_1.4.6+dfsg-1~deb13u1_riscv64.deb 27794d6b6b429af6b2968bcac1a376d2 77492 debug optional clamav-milter-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb b890e87504793130e31b2a5dd8a04db9 211856 utils optional clamav-milter_1.4.6+dfsg-1~deb13u1_riscv64.deb dc9b7f8e4f52bb78255e01e41dd66a3e 14747 utils optional clamav_1.4.6+dfsg-1~deb13u1_riscv64-buildd.buildinfo f6c770c6e209206b1d910f1795a2bd2f 3541060 utils optional clamav_1.4.6+dfsg-1~deb13u1_riscv64.deb d059d2acead2f1f485c342ebc686fd04 90444 debug optional clamdscan-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb deea894b7f0199ee81ab135ca04b57b7 66304 utils optional clamdscan_1.4.6+dfsg-1~deb13u1_riscv64.deb 8b94e0d5d771bfa14f1f14a78598286b 30828 libdevel optional libclamav-dev_1.4.6+dfsg-1~deb13u1_riscv64.deb d93a51510e338df280e2cbd8407bb89e 35733788 debug optional libclamav12-dbgsym_1.4.6+dfsg-1~deb13u1_riscv64.deb 7f449af65c253388099fc35ffd01fe34 4170376 libs optional libclamav12_1.4.6+dfsg-1~deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmrTapMACgkQIhSPlPtg qxnpGg//a5a8hzgFJ3WL/nwPQiRO+Rq4Q5j60cOxAqzCIh02gN/ccK+ecpOt3CtA ChcAGkLHI5cE/pqpuHfiNr0nXXJtgMbkJNsbtYxyu8crl5ZL1MgM4sRJkuYGWTRD DVHNq6VS8rrIzqMCQ3Hs3ph/B57FEYm85WpieoDe3QBBv8ZjuVDPVhjzSgDJP4bA 7kQknPyDXEFsx6s48cBT7VaTogN2HEyIU9GDunylAcvDkNRdKfbKNvN1CEhsun/e 5xCpHFPnQVegyBvWxJt17cs5wosSRGCQ1a1WqCMP4aQ9XiWogJ7lZPY6Gryfdqq0 CvyDjszy+wjwY4pamzNpv55GKBsOsqPYkb0qU7++5QK0tUjo0wl563mVZMbrwkR7 HribqBaAJ/yLfoh6sSsodqVRG3u3WL5Gbsvx6wEM1vlRAG3cleXyHOzaceC9r/rD W8W/I5civtWOs9TnMBbcKZexP5We9kfJ+bgOlvApcAhqfaPb4G5+g1brhMD4VMo7 qJdVna+VGh+FJhl/OISFrPvb9XaYfwAYqLXbvE3Nrx8FJmio+6HhpWNVOGHp1Dmo Vwkt80rLsPTaIGsgdTUEyeR8PL8WIR11V6+iiDY6BYOt4zEs2Nk2XQaDW0h+iSmJ Z9QMjzBPhCb5Zl8Bx4u2rjiN/KJXqwO/u1iTlqi6Z4nWeANPUTc= =5BwG -----END PGP SIGNATURE-----