[From nobody Sun Aug 23 18:09:08 2026 Received: (at 1143939-close) by bugs.debian.org; 23 Aug 2026 17:06:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 78; hammy, 150; neutral, 171; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:36490) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wyBe4-00Fu9P-1X for 1143939-close@bugs.debian.org; Sun, 23 Aug 2026 17:06:08 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wyBe4-0002GB-0R for 1143939-close@bugs.debian.org; Sun, 23 Aug 2026 17:06:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=DZ3BGl7Dx+QOjKLG5QPW2TtZdn/uJKpjpA6x+SZ95Dk=; b=MholfI7itEgEgSXCa00y8Ex4dz 9ZszbNCubvmHUIvRQgGmRPKDAW8j864Ux9damjYYFccRpvaIN+XTN340qtVOxuZb92OQ5tfbLycFO VfuDscyHKE1jxltvzrlkrsiVgoYqeyG9A8/eqrysrOWLyiy4S7UXdwNY1+EoI/6tlewR4v+4GwXIJ /4VTykpJdg8/DPAw2ydcCQL82tVE9/MBNaJpia4lJFoT0k73881/F0j/iPUr+g3A5KhZ51TbAwGzj GDnSS2G9tqGRJgn4jsKgSipnR9anVjX85VuU2yIeKrIOI8G4B8ookJf6GEoKL2Bm6ySoi6R7fGg+G 6xHjVLQw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wyBe3-000000067NO-1FEr; Sun, 23 Aug 2026 17:06:07 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> To: 1143939-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: clamav Debian: DAK Debian-Changes: clamav_1.4.6+dfsg-1_source.changes Debian-Source: clamav Debian-Version: 1.4.6+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1143939: fixed in clamav 1.4.6+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6036393175202262996==" Message-Id: <E1wyBe3-000000067NO-1FEr@fasolo.debian.org> Date: Sun, 23 Aug 2026 17:06:07 +0000 --===============6036393175202262996== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: clamav Source-Version: 1.4.6+dfsg-1 Done: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> We believe that the bug you reported is fixed in the latest version of clamav, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1143939@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sebastian Andrzej Siewior <sebastian@breakpoint.cc> (supplier of updated clam= av package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Aug 2026 18:32:02 +0200 Source: clamav Architecture: source Version: 1.4.6+dfsg-1 Distribution: unstable Urgency: medium Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Closes: 1143939 Changes: clamav (1.4.6+dfsg-1) unstable; urgency=3Dmedium . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon Checksums-Sha1: d062bc1b22bdac859f68e7a5d2629d7437edf0b0 3042 clamav_1.4.6+dfsg-1.dsc d076f78137f51afc0dbb7b67ec476c3c62487089 27698332 clamav_1.4.6+dfsg.orig.tar= .xz cd2cf544237f6fcb02455625ff003f43e5419c24 522048 clamav_1.4.6+dfsg-1.debian.t= ar.xz Checksums-Sha256: e105a6e31c4df5a4e3e2af330e2f5bcf2678582f9423b2bba2af8d94deeef315 3042 clamav= _1.4.6+dfsg-1.dsc 09823124e9bae5d602699c2a2fe5d4876298283cf3e7f8982973571843572468 27698332 cl= amav_1.4.6+dfsg.orig.tar.xz 11e6f5229f254e8799df4c320fa94c0b20370688231050d960eb6cb71a1b9671 522048 clam= av_1.4.6+dfsg-1.debian.tar.xz Files: ed13bef81e8ebb00301f93dcbcdd04ac 3042 utils optional clamav_1.4.6+dfsg-1.dsc 1342952a4063eee18d239cd7761ef0ff 27698332 utils optional clamav_1.4.6+dfsg.o= rig.tar.xz 46077c44cfe3c9a9e921a437625a7bca 522048 utils optional clamav_1.4.6+dfsg-1.d= ebian.tar.xz -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmqLILMACgkQBWQfF1cS +ltc3Av/RdC2pPxeBj1tMKQvwi9iOASHnlPevbepWk/cuC4l6w27NC5ujvNz/nuy x/VSkTc3CxRSH9ZhM9+uBHoSwLI1zWImUAn9RuoA2gBXG435GagnBZZmbbXC38Dw jz8nWq0bSjY8+tm1tq4dInABOrUmmC4GSbV+DKCWus2TOOlIHM6y4kJXB4ePCcAA AOZfq84MZUhkZET4/hzVqtimm9TXDt6yqkJQ9+T6hMSofCGjpRirAQOizm3dDLOX GS+78CYmJSl/XPiHgdA4Il8R928AX20qKSROV/i9F5NXVWfvXgUrHJJdAHdIzp8L SVO2ZhfIeplO8GF2Wu2QyBX18bGJWMTw+5Ff4nTzJvZpTrwZnEW4Rg6bl5dOMqLl OvBF6yOe+w1FMx0q/tJ6GrUvdFHkBV3pZFL96WC202XAfXVHHBEAQDhp6q9AoOrG nSmI063hbrDaWMiqkgTTdb1KR0m0whsPeOTREQUhEw4Sr4YA/rplEHh/f4bgapvn mRyJK4Rq =3DB+J3 -----END PGP SIGNATURE----- --===============6036393175202262996== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaosofwAKCRCb9qggYcy5 If0LAP9iGB529qCDsHVY4r74ttzF1JzIUYFEkaVOJ0W13b+pswEApWk3c0CpV7RF pVl4NIfFzOBmnAiaKp/BMOHIIVx1oww= =44z7 -----END PGP SIGNATURE----- --===============6036393175202262996==-- ]