diff -Nru clamav-1.4.5+dfsg/debian/changelog clamav-1.4.6+dfsg/debian/changelog
--- clamav-1.4.5+dfsg/debian/changelog	2026-07-11 15:42:12.000000000 +0200
+++ clamav-1.4.6+dfsg/debian/changelog	2026-08-17 16:22:11.000000000 +0200
@@ -1,3 +1,21 @@
+clamav (1.4.6+dfsg-1) unstable; urgency=high
+
+  * Import 1.4.6 (Closes: #1143939)
+    - CVE-2026-20345 ("Fixed an indexing error while converting GPT
+      partition names")
+    - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker")
+    - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser")
+    - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the
+      Mach-O parser")
+    - CVE-2026-20348 ("Fixed XAR parser size handling")
+    - Fixed thread-safety issues in the clamd STATS command that could
+      disclose process memory or crash the daemon
+  * Refresh 0004-unit_tests-Don-t-set-TMP.patch
+  * Update symbols and the CL_FLEVEL guard in d/rules for 1.4.6
+    (CL_FLEVEL 215 -> 216)
+
+ -- Edmund Lodewijks <edmund@proteamail.com>  Mon, 17 Aug 2026 16:22:11 +0200
+
 clamav (1.4.5+dfsg-3) unstable; urgency=medium
 
   * Allow the testsuite in parallel
diff -Nru clamav-1.4.5+dfsg/debian/libclamav12.symbols clamav-1.4.6+dfsg/debian/libclamav12.symbols
--- clamav-1.4.5+dfsg/debian/libclamav12.symbols	2026-07-11 15:27:37.000000000 +0200
+++ clamav-1.4.6+dfsg/debian/libclamav12.symbols	2026-08-17 16:22:11.000000000 +0200
@@ -3,10 +3,10 @@
  *@CLAMAV_0.104.0 1.2.1
  *@CLAMAV_1.0.0 1.2.1
  *@CLAMAV_1.1.0 1.2.1
- *@CLAMAV_PRIVATE 1.4.5
+ *@CLAMAV_PRIVATE 1.4.6
  *@CLAMAV_PUBLIC 1.2.1
- cl_retflevel@CLAMAV_PUBLIC 1.4.5
+ cl_retflevel@CLAMAV_PUBLIC 1.4.6
 libfreshclam.so.3 libclamav12 #MINVER#
 * Build-Depends-Package: libclamav-dev
- *@FRESHCLAM_PRIVATE 1.4.5
- *@FRESHCLAM_PUBLIC 1.4.5
+ *@FRESHCLAM_PRIVATE 1.4.6
+ *@FRESHCLAM_PUBLIC 1.4.6
diff -Nru clamav-1.4.5+dfsg/debian/patches/0004-unit_tests-Don-t-set-TMP.patch clamav-1.4.6+dfsg/debian/patches/0004-unit_tests-Don-t-set-TMP.patch
--- clamav-1.4.5+dfsg/debian/patches/0004-unit_tests-Don-t-set-TMP.patch	2026-07-11 15:27:38.000000000 +0200
+++ clamav-1.4.6+dfsg/debian/patches/0004-unit_tests-Don-t-set-TMP.patch	2026-08-17 16:04:22.000000000 +0200
@@ -16,11 +16,11 @@
  unit_tests/CMakeLists.txt | 1 -
  1 file changed, 1 deletion(-)
 
-diff --git a/unit_tests/CMakeLists.txt b/unit_tests/CMakeLists.txt
-index bf7e2ef..a4d2ea4 100644
---- a/unit_tests/CMakeLists.txt
-+++ b/unit_tests/CMakeLists.txt
-@@ -205,7 +205,6 @@ else()
+Index: clamav-1.4.6+dfsg/unit_tests/CMakeLists.txt
+===================================================================
+--- clamav-1.4.6+dfsg.orig/unit_tests/CMakeLists.txt
++++ clamav-1.4.6+dfsg/unit_tests/CMakeLists.txt
+@@ -208,7 +208,6 @@ else()
  
      set(SOURCE             ${CMAKE_SOURCE_DIR})
      set(BUILD              ${CMAKE_BINARY_DIR})
diff -Nru clamav-1.4.5+dfsg/debian/rules clamav-1.4.6+dfsg/debian/rules
--- clamav-1.4.5+dfsg/debian/rules	2026-07-11 15:41:16.000000000 +0200
+++ clamav-1.4.6+dfsg/debian/rules	2026-08-17 16:22:11.000000000 +0200
@@ -99,7 +99,7 @@
 	  fi;\
 	done; \
 	# Check for library features which may have been upgraded.
-	if ! grep -q "CL_FLEVEL 215" libclamav/others.h ; then \
+	if ! grep -q "CL_FLEVEL 216" libclamav/others.h ; then \
 		echo "cl_retflevel needs boosting in symbol file"; \
 		touch debian/exit; \
 	fi;
diff -Nru clamav-1.4.5+dfsg/debian/salsa-ci.yml clamav-1.4.6+dfsg/debian/salsa-ci.yml
--- clamav-1.4.5+dfsg/debian/salsa-ci.yml	2026-07-11 15:27:37.000000000 +0200
+++ clamav-1.4.6+dfsg/debian/salsa-ci.yml	2026-08-17 10:08:52.000000000 +0200
@@ -1,3 +1,7 @@
 ---
 include:
   - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/recipes/debian.yml
+
+variables:
+  # Some RUST lines are identified as "NONVERBOSE BUILD"
+  SALSA_CI_DISABLE_BLHC: 1