[From nobody Fri Jul 3 22:51:10 2026 Received: (at 1141347-close) by bugs.debian.org; 3 Jul 2026 21:49:31 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 150; neutral, 265; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:40374) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfllL-002JmK-1F for 1141347-close@bugs.debian.org; Fri, 03 Jul 2026 21:49:31 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfllJ-001f1h-1c for 1141347-close@bugs.debian.org; Fri, 03 Jul 2026 21:49:29 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=OkTu0T3GVgfCHRVCwpoH+VYVRA4NxwKoHoQFdSPPOqY=; b=EDX/eUNxswjoV2uoCBooejq/1/ WEwl7prQ8nEdiqRC9T52i48MDr3jQ1nvKMY31j1DGvi/QmVVZVyKOYErg3kGppDNsjcoImXYfoMry HHJW05DOidecaqY1HumLN15rmi0oo5z7bn1zhJCZgNRL/qVVLnvfvdCX06ed+bE2tPUyAMAx2XVAn +pTJV7bTwwBJnGa7BmpG8L43e4Y+LHGD+0MTv5Ehh4eAT/YElPsLYtIHcU4nYtknYcr/evk+Bw4EU 0q2zxjkPqKDGgMuQs7pD86DFZRcw9Lh2LGMuN7KIDd8iKfiQtMh+m0bQwdszrkKmJdTj/GwRHyUmT l8ftyC3g==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wfllI-00000006Vn0-1G61; Fri, 03 Jul 2026 21:49:28 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> To: 1141347-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: clamav Debian: DAK Debian-Changes: clamav_1.4.5+dfsg-1_source.changes Debian-Source: clamav Debian-Version: 1.4.5+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141347: fixed in clamav 1.4.5+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1504904356354105078==" Message-Id: <E1wfllI-00000006Vn0-1G61@fasolo.debian.org> Date: Fri, 03 Jul 2026 21:49:28 +0000 --===============1504904356354105078== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: clamav Source-Version: 1.4.5+dfsg-1 Done: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> We believe that the bug you reported is fixed in the latest version of clamav, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141347@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sebastian Andrzej Siewior <sebastian@breakpoint.cc> (supplier of updated clam= av package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Jul 2026 23:16:21 +0200 Source: clamav Architecture: source Version: 1.4.5+dfsg-1 Distribution: unstable Urgency: medium Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Closes: 1141303 1141347 Changes: clamav (1.4.5+dfsg-1) unstable; urgency=3Dmedium . * Import 1.4.5 (Closes: #1141303) - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path") - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size calculations") - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit bypass") - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow") - CVE-2026-20243 ("Fixed ALZ parser size handling bugs") - CVE-2026-20215 ("Fixed a 7z parser substream count overflow") - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks") * Use -DCMAKE_BUILD_TYPE=3DRelWithDebInfo by default (Closes: #1141347). Checksums-Sha1: 6454e256ac5d4a36ccc43aaaec539f8c3181a2a6 3042 clamav_1.4.5+dfsg-1.dsc f35240155c184e0a514d6ae24e4d669cb60c9894 27685412 clamav_1.4.5+dfsg.orig.tar= .xz d6bda30f4f78b769e6f65400ef5e528736d58ffa 521132 clamav_1.4.5+dfsg-1.debian.t= ar.xz Checksums-Sha256: cdb2309b27f674f6b9dea54e820f9232ba7318e1d00a5221e3f7e8030d3ce7ed 3042 clamav= _1.4.5+dfsg-1.dsc 61eaa197005878dcdbe4a368c7c7255cd104228f79669f0a998717ab9a0dbf9c 27685412 cl= amav_1.4.5+dfsg.orig.tar.xz af5cd67159ab4512361ff02b3b714b5e98d1db252030d870415a1527ffb65071 521132 clam= av_1.4.5+dfsg-1.debian.tar.xz Files: 0e311caa2a1f31e33ab27b701ebd3eb6 3042 utils optional clamav_1.4.5+dfsg-1.dsc ddae5dfa89a3f90e03f8fa3f92a09517 27685412 utils optional clamav_1.4.5+dfsg.o= rig.tar.xz c2cd2cf4f4838a202d3f8eae7f7401d9 521132 utils optional clamav_1.4.5+dfsg-1.d= ebian.tar.xz -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmpIKHgACgkQBWQfF1cS +lvUgAv+N7NIwqc1NAqHet/3rIrJ2yJQKoe0pwDSFVvPt6urBVpqjMRsoNwXDdG6 ZDeCvFDcSXJNKjkN4WI9Om25z+aXRBeezPM+HCwStzVkdlJtz9PAOYzwYiMEISvd v1XgD+Es548croORclUd/LAQJrCUzGOFx6LfqPSEOz5DIqv5KtYiOhMGz1bpzsRA ItsRoRa2ocAtxQOT7qZe1Kc1C1mO5jG+y1l6D/Ft6f//cQzDPonF+juPxBms4oOM 7mmgscT/Jgn/E2V0R3Z9R/FUVuWX0nNpUig4e581D/+SwrffS91Eijgl11p/zjRO fGXUXQ5AlylK+T7rPcDqhWY7AE0ywCB0NMiTOsZWB8TS4E7XpEc+fpAilOcaWP0v qZHoafbqK3eKuTs2tQH7lVGbMCKh4Kv/xxEPcnOrY3q8Iz4hv7JbbDQY6Qq6QyBP EdS4+Sl2/WDcNjobyo9+Gtmh8ElopEM9cdGRZHmySSiowP0j4PDEPimxa11STx8+ A3kMr5KT =3D8jUW -----END PGP SIGNATURE----- --===============1504904356354105078== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakguaAAKCRCb9qggYcy5 IfClAP9I39+8lQoetOLgGhW6V1wDZSZqObbRufJxTn2SPJm4LgD/Szfvua2t9SwU Ua0OIRqjc+HB7kAiskGNb7QjpooYgAA= =wZjB -----END PGP SIGNATURE----- --===============1504904356354105078==-- ]