Thank you for your contribution to Debian. Mapping trixie to stable. Mapping stable to proposed-updates.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 21:13:32 +0200 Source: clamav Architecture: source Version: 1.4.6+dfsg-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: ClamAV Team <[email protected]> Changed-By: Sebastian Andrzej Siewior <[email protected]> Closes: 1043428 1092882 1103001 1120998 1123913 1141347 1143939 Changes: clamav (1.4.6+dfsg-1~deb13u1) trixie; urgency=medium . [ Sebastian Andrzej Siewior ] * Import 1.4.5 - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser) - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998) - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Update apparmor profile for clamd (Closes: #1092882, #1123913). * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347). * Add Romanian debconf templates translation (Closes: #1103001). * Mention in the README.Debian that clamAV AppArmor profiles do not allow OnAccess scanning ("Closes: #1043428). . [ Pino Toscano ] * Make sure to ignore the not installed files on all the architectures. * Limit systemd build dependencies as linux-any, as systemd is available only on Linux. * Simplify handling of Linux-only files by using dh-exec, rather than creating install and manpages files during build: - add the dh-exec build dependency - mark the Linux-only files in install and manpages files - simplify debian/rules accordingly * Wrap the whole override_dh_installsystemd to run on Linux, rather than only the first command in it. . [ Pétur Ingi Egilsson ] * clamav-daemon.postinst.in: honour "none" as a way to disable the LogFile directive. . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon Checksums-Sha1: cab9a2d68ee3cbc18ade037981c941a9032cf70d 3023 clamav_1.4.6+dfsg-1~deb13u1.dsc d076f78137f51afc0dbb7b67ec476c3c62487089 27698332 clamav_1.4.6+dfsg.orig.tar.xz 1a4432935b80c9c0ef46f0bc33d90c378cba9e8b 519104 clamav_1.4.6+dfsg-1~deb13u1.debian.tar.xz Checksums-Sha256: 2ded467a2b40e1077d1fa0d7eafe673195db487d00aa230dd51825ca89855bec 3023 clamav_1.4.6+dfsg-1~deb13u1.dsc 09823124e9bae5d602699c2a2fe5d4876298283cf3e7f8982973571843572468 27698332 clamav_1.4.6+dfsg.orig.tar.xz 53056aa745141d97192fdfe7b20ebbba318117850b3cab43b81a766ba9ff39a5 519104 clamav_1.4.6+dfsg-1~deb13u1.debian.tar.xz Files: 511c576d3776aff040ef69cd0e1bdc3e 3023 utils optional clamav_1.4.6+dfsg-1~deb13u1.dsc 1342952a4063eee18d239cd7761ef0ff 27698332 utils optional clamav_1.4.6+dfsg.orig.tar.xz 2833c186fa3b02773c3a16d4d24d439e 519104 utils optional clamav_1.4.6+dfsg-1~deb13u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmqcdYYACgkQBWQfF1cS +luhGAv+P+70X+/7JvTXk0NLBQ8zIcac3QVbOYqH2fmoBot/UDmacA/FOakGct7h XG38JFowevTq9d7c3zoZBbR0VpEdeGm0G9zXdZKR+y4BxLg56EXwEqMKI3Dh5nQJ hv+7n+hq5ozQzZzkM0bIr6P5jPkBtTwA7D5IJziYMkysPbYt6I/B7qKBJ4ofcPAb RDQw+9HDiAH6Bc0LcX51k+eZakdrXRPVhhaFycvSr+YEyTeiBqhMwpsODC9x/eT3 87eWcOr5oajmjraW14mSK5rOYiBuIqpMF2jsqxeOQjlMPsYsHFqMCBiU1Korit2I MkFbPX0oIPmOxaooyArxqPDaoLhrQIBMdZR2U3Hlz0wQQJKGdBUBLzc4XnKEmyK1 4JlbK7as/r31+vQ5g7xqqex1wmSIOLk66i+ZzaZifhAR2uCEU2V/qkGK28S5vIS1 nb8lRYLMoHpzo5HEk0OH5qv5L9gNLQcGM78qjNLAw0YizVJZoRKJTr4pGTfEajNQ q5d4Qzid =TRXP -----END PGP SIGNATURE-----
pgp8QKl34ZPuG.pgp
Description: PGP signature
_______________________________________________ Pkg-clamav-devel mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-clamav-devel
