-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Oct 2026 11:54:37 +0200 Source: clamav Binary: clamav clamav-base clamav-daemon clamav-daemon-dbgsym clamav-dbgsym clamav-doc clamav-docs clamav-freshclam clamav-freshclam-dbgsym clamav-milter clamav-milter-dbgsym clamav-testfiles clamdscan clamdscan-dbgsym libclamav-dev libclamav12 libclamav12-dbgsym Architecture: source all amd64 Version: 1.4.6+dfsg-0+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: clamav - anti-virus utility for Unix - command-line interface clamav-base - anti-virus utility for Unix - base package clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-doc - anti-virus utility for Unix - documentation clamav-docs - anti-virus utility for Unix - documentation clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamav-testfiles - anti-virus utility for Unix - test files clamdscan - anti-virus utility for Unix - scanner client libclamav-dev - anti-virus utility for Unix - development files libclamav12 - anti-virus utility for Unix - library Closes: 1043428 1092882 1103001 1120998 1123913 1141347 Changes: clamav (1.4.6+dfsg-0+deb12u1) bookworm-security; urgency=medium . * Import 1.4.4 - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser) - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998) * Import 1.4.5 - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Import 1.4.6 - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon * Backport changes from trixie by Sebastian (thanks!): * Update apparmor profile for clamd (Closes: #1092882, #1123913). * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347). * Add Romanian debconf templates translation (Closes: #1103001). * Mention in the README.Debian that clamAV AppArmor profiles do not allow OnAccess scanning ("Closes: #1043428). * clamav-daemon.postinst.in: honour "none" as a way to disable the LogFile directive. (credit to Pétur Ingi Egilsson) Checksums-Sha1: 3077decfeb31e30b96573832bf52eaea145b3c65 3100 clamav_1.4.6+dfsg-0+deb12u1.dsc d076f78137f51afc0dbb7b67ec476c3c62487089 27698332 clamav_1.4.6+dfsg.orig.tar.xz 4496eaab7746655c5a37bdaea3127b05cec3f723 512344 clamav_1.4.6+dfsg-0+deb12u1.debian.tar.xz a57b2a60589820d85f01e3b988fb3b2b5093e999 102432 clamav-base_1.4.6+dfsg-0+deb12u1_all.deb 821a1996131d530786878bdaa90144773637dcc2 386440 clamav-daemon-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 9b45d3fd331eddf9a43c93404a1a82bc0f0de9ff 225724 clamav-daemon_1.4.6+dfsg-0+deb12u1_amd64.deb 4f313d45768e453dcbd4da1c35d9f9ddd137717c 38619488 clamav-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb b21e10883668c73808cfe59f4dc0a6c7fa59c42f 200404 clamav-doc_1.4.6+dfsg-0+deb12u1_all.deb 73cf82cd1ef31a3b78a774c758cb26b7929cd0f2 13688 clamav-docs_1.4.6+dfsg-0+deb12u1_all.deb 1cbcda817c662e22b723730261f2671c63d21860 82636 clamav-freshclam-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb c8cc2b8409f1b884f42558a060d28d39095d40dc 169892 clamav-freshclam_1.4.6+dfsg-0+deb12u1_amd64.deb ce878ec81627dc2b2af831c3f8d3960041778f6c 79512 clamav-milter-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 32d3a696e69016b107144e0ded5389806e3fa8b9 209672 clamav-milter_1.4.6+dfsg-0+deb12u1_amd64.deb 9d019853edbde0294a627fdf11be8ac4d3a82fc2 2837964 clamav-testfiles_1.4.6+dfsg-0+deb12u1_all.deb 14f7f2dcf59853fa4a30500f245ba5ea59760e65 15120 clamav_1.4.6+dfsg-0+deb12u1_amd64.buildinfo 83aa2537fae9cddb45c8bf4de2759cd977bb55e0 6268600 clamav_1.4.6+dfsg-0+deb12u1_amd64.deb 25522b0777967f2c82913821021025080caf594f 93344 clamdscan-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 9722bd2d65cdc6e4dd58275ccb7fd908d29893d2 66188 clamdscan_1.4.6+dfsg-0+deb12u1_amd64.deb c46aecfd8eb9124909aad9316aa06d402fd2daca 30324 libclamav-dev_1.4.6+dfsg-0+deb12u1_amd64.deb 875c92ad3f8d459d70ccccb7a353dc12f9e035fe 40370808 libclamav12-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb bbaab68323b2ae37dc70fe218ca804c710756f47 6879920 libclamav12_1.4.6+dfsg-0+deb12u1_amd64.deb Checksums-Sha256: 1c8c38c948b52831122931d82833b955267e872c13432b125fdadfee681641fa 3100 clamav_1.4.6+dfsg-0+deb12u1.dsc 09823124e9bae5d602699c2a2fe5d4876298283cf3e7f8982973571843572468 27698332 clamav_1.4.6+dfsg.orig.tar.xz 3c24c6b3b3bbc405466acc43c97be73bc3259494a079b155af126cc790fc1305 512344 clamav_1.4.6+dfsg-0+deb12u1.debian.tar.xz 4eedd7ebd770a69ebff4c6bf033d9cf46b5b81c1cc0c2594fa6e856913e47815 102432 clamav-base_1.4.6+dfsg-0+deb12u1_all.deb c21d93e4f78ef61901048d0141c3ce03918853f24b725a90cc017a67d7cdb4e5 386440 clamav-daemon-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 23dfa3000a5987347a5011c6874bbe5cabae254fb7c9228eb28b680cbbe79ab5 225724 clamav-daemon_1.4.6+dfsg-0+deb12u1_amd64.deb 7a59d37372bd9520e9d0805d68636a75b15a3c285a31be38c3f63fba63cbd9d2 38619488 clamav-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb ea4d05d28b9031259d200a2e5c4979469828896cdbc0016b9c956c3f4a627358 200404 clamav-doc_1.4.6+dfsg-0+deb12u1_all.deb b7c191f0afb17f03e39f27eb00a4e25c8a97e4f96922b671d3dfabb2886457a9 13688 clamav-docs_1.4.6+dfsg-0+deb12u1_all.deb 9798977e0d03830408c6f7b1fc631aa3211d382dc474756106961c9b161b618e 82636 clamav-freshclam-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb f31fa7d57ed3c23c7c2d86295f58268d9a4df8566466178dfa3640fc16b3b808 169892 clamav-freshclam_1.4.6+dfsg-0+deb12u1_amd64.deb e81b763e7ea7766c350acfe30b55d4135828fbefee09a8d9f948b1600bd7199f 79512 clamav-milter-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 8b63cedf1494a89a089d73e6a23f29eb445253567397c41b4a83909a21b116be 209672 clamav-milter_1.4.6+dfsg-0+deb12u1_amd64.deb bcc17140a86f7b5e4b1b62d1a1979896f0358468e973b9df73baa00ca06ed315 2837964 clamav-testfiles_1.4.6+dfsg-0+deb12u1_all.deb d7698dfd7543bd98da5438ced97dfb96e3196e8705723abbcc5859f1d3f47aff 15120 clamav_1.4.6+dfsg-0+deb12u1_amd64.buildinfo 4991ede8159aee7947b66b0ba300c8198f6069e6609fbd7c5c220afb19a39974 6268600 clamav_1.4.6+dfsg-0+deb12u1_amd64.deb 0b910bbc1066e55e2ccbc9f997fb110e1651023b5a323d4e20bb162ec1179dd4 93344 clamdscan-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb ace55974e48407c371cddf0ce98b8b9bbb3a67377c0bfd202bc82653cac7068a 66188 clamdscan_1.4.6+dfsg-0+deb12u1_amd64.deb c3cd56008f3051d66139bb01c651b52fd31b9ae6be4bb10090842a5789cdb826 30324 libclamav-dev_1.4.6+dfsg-0+deb12u1_amd64.deb ab1c9b84abc42e82c833c8a98727a25bc3cb9a79bfbaf8cf83f2668d8c91506c 40370808 libclamav12-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 12d81be6d23dc46037be0f61a86913f44c72108a4ee80a5538c7090c08d8a09e 6879920 libclamav12_1.4.6+dfsg-0+deb12u1_amd64.deb Files: 87465a3a9cd62d851cfce082d7f24f21 3100 utils optional clamav_1.4.6+dfsg-0+deb12u1.dsc 1342952a4063eee18d239cd7761ef0ff 27698332 utils optional clamav_1.4.6+dfsg.orig.tar.xz e1d5eeaa4776e7ff5a92e3617091037c 512344 utils optional clamav_1.4.6+dfsg-0+deb12u1.debian.tar.xz 685e175572321df1da770af5ec7c890a 102432 utils optional clamav-base_1.4.6+dfsg-0+deb12u1_all.deb 35800c52d84bb2da761555dca5599f6d 386440 debug optional clamav-daemon-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 0f341ec0586ad315ed828d3a914a31c9 225724 utils optional clamav-daemon_1.4.6+dfsg-0+deb12u1_amd64.deb 5a719c193ddb13c8dee16e6192892a2f 38619488 debug optional clamav-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb d9d90494bdf36b6b2e91a45bbfc6fd0b 200404 doc optional clamav-doc_1.4.6+dfsg-0+deb12u1_all.deb fb24ec32c4e47e687d270c04af3cd55d 13688 oldlibs optional clamav-docs_1.4.6+dfsg-0+deb12u1_all.deb d156b4479ac30d3bc2bd925d045be039 82636 debug optional clamav-freshclam-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 06666fa13b9301b12007a6378b903ca3 169892 utils optional clamav-freshclam_1.4.6+dfsg-0+deb12u1_amd64.deb b131c6d3efbdb6843d2e7266de1f4f29 79512 debug optional clamav-milter-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 8b2cce1ebf50f26e67d3ddca32dddb9c 209672 utils optional clamav-milter_1.4.6+dfsg-0+deb12u1_amd64.deb c324734207b635e6bd1bc779fc4dbdf9 2837964 utils optional clamav-testfiles_1.4.6+dfsg-0+deb12u1_all.deb 508dcf18dab5b4980ba07aef124e43dd 15120 utils optional clamav_1.4.6+dfsg-0+deb12u1_amd64.buildinfo 72e073783f0d3cf346b1380348c934e3 6268600 utils optional clamav_1.4.6+dfsg-0+deb12u1_amd64.deb 2e1d643b50b40dcc0419713ea6f1ffef 93344 debug optional clamdscan-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb dfe20f1b95248c632d4da831ab0407c5 66188 utils optional clamdscan_1.4.6+dfsg-0+deb12u1_amd64.deb b59e346a9db3e8bcc3b52cf9c32e6188 30324 libdevel optional libclamav-dev_1.4.6+dfsg-0+deb12u1_amd64.deb 609fb7057e3f35f7c160db98756c5d97 40370808 debug optional libclamav12-dbgsym_1.4.6+dfsg-0+deb12u1_amd64.deb 34c673fddeb97d189c1077bc2fd913ea 6879920 libs optional libclamav12_1.4.6+dfsg-0+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmraV0MACgkQnUbEiOQ2 gwKEmQ//Zf324XEog80h3cIridS6LqgUAc1BDPaxXeEaglhQ6HcXxtVwJUkc/JZG 3Wr8Nv9c7eA/UOAjI2Aa1eS+tOROSyMq8sEr5bHecqZhoH6HLPb02oRLQXGXRRrv xVuZLrnmTc0FUg88n23dLCRBcc8fWPe03zwtdK0wSFImqnVAuzt/AqYEOXtZpyj6 rH8B9cCHzA1UEgkTZD6aqTgglX3+0z33nE6lPvUPpxFGH8fHYhd+C1Sv3V+tgWeE E4pcfNRV5ri6+knD1/zJbEWDntR8sYFP1WFBt6SfCIozRz8gTG4z+4riYNjmC2WL FBRpPUE8cTvrVRjGazkBTgCztjdb4O3aOULcMiWzBxiFC+Ovot8PVeREPiBWSBvY 4tUiGx4gyiDquoZ63Z5cjYDCnTPZyJFdayAAG8Qdn+C+7Fv01H/LU+kBjjFISSoY +k19FHs3NAruXwcigFY9QoaS3w6oAV0XRdWvQsez0bXByD1KgxuyCcy9qVjetcBo ow68D6B0WEv3rXU6lLut8JaF4M0KykyfohCnAsBGUda/muUKPhj2VcCB4T09i/5o mVmRb4PQ0Uo3nYCsSjo9c9vAnMPYgOSC6113yFIwODf4SO6Cz9LpFHbuo8n0CHLK x6GM2HpxnDqwRNpyH9R1NUoVWDDhBX80qJBTdI1abYk39uAuRhs= =w6mF -----END PGP SIGNATURE-----
