[Git][security-tracker-team/security-tracker][master] Add new clamav issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5b155f55 by Salvatore Bonaccorso at 2026-08-08T13:42:43+02:00
Add new clamav issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -325,15 +325,25 @@ CVE-2026-44964 (In versions of the Datadog Android application prior to v545-5.9
 CVE-2026-37171 (A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0. ...)
 	NOT-FOR-US: SuperTokens
 CVE-2026-20348 (A vulnerability in the XAR file format parser of ClamAV could allow an ...)
-	TODO: check
+	- clamav <unfixed>
+	[trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20347 (A vulnerability in the Mach-O file format parser of ClamAV could allow ...)
-	TODO: check
+	- clamav <unfixed>
+	[trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20346 (A vulnerability in the PDF file format parser of ClamAV could allow an ...)
-	TODO: check
+	- clamav <unfixed>
+	[trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20345 (A vulnerability in the GPT file format parser of ClamAV could allow an ...)
-	TODO: check
+	- clamav <unfixed>
+	[trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20339 (A vulnerability in the PESpin file format parser of ClamAV could allow ...)
-	TODO: check
+	- clamav <unfixed>
+	[trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20338 (A vulnerability in the zip archive parser of ClamAV could allow an una ...)
 	TODO: check
 CVE-2026-20337 (A vulnerability in the zip archive parser of ClamAV could allow an una ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b155f55feb2c4e503607de18a2c239ecf9984b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b155f55feb2c4e503607de18a2c239ecf9984b6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260808/124a3c0e/attachment.htm>