[Git][security-tracker-team/security-tracker][master] record fixes for clamav stable-updates update
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Sun Oct 18 18:59:21 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e263018c by Moritz Mühlenhoff at 2026-10-18T19:58:27+02:00
record fixes for clamav stable-updates update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -98976,23 +98976,23 @@ CVE-2026-37171 (A lack of tenant separation in SuperTokens Inc. SuperTokens Core
NOT-FOR-US: SuperTokens
CVE-2026-20348 (A vulnerability in the XAR file format parser of ClamAV could allow an ...)
- clamav 1.4.6+dfsg-1 (bug #1143939)
- [trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
CVE-2026-20347 (A vulnerability in the Mach-O file format parser of ClamAV could allow ...)
- clamav 1.4.6+dfsg-1 (bug #1143939)
- [trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
CVE-2026-20346 (A vulnerability in the PDF file format parser of ClamAV could allow an ...)
- clamav 1.4.6+dfsg-1 (bug #1143939)
- [trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
CVE-2026-20345 (A vulnerability in the GPT file format parser of ClamAV could allow an ...)
- clamav 1.4.6+dfsg-1 (bug #1143939)
- [trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
CVE-2026-20339 (A vulnerability in the PESpin file format parser of ClamAV could allow ...)
- clamav 1.4.6+dfsg-1 (bug #1143939)
- [trixie] - clamav <no-dsa> (clamav is being updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
CVE-2026-20338 (A vulnerability in the zip archive parser of ClamAV could allow an una ...)
TODO: check
@@ -131564,31 +131564,31 @@ CVE-2026-24240 (NVIDIA Megatron Bridge for Linux contains a vulnerability where
NOT-FOR-US: NVIDIA
CVE-2026-20244 (A vulnerability in the DMG file format parser of ClamAV could allow an ...)
- clamav 1.4.5+dfsg-1 (bug #1141303)
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
CVE-2026-20243 (A vulnerability in the ALZ file format parser of ClamAV could allow an ...)
- clamav 1.4.5+dfsg-1 (bug #1141303)
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
CVE-2026-20217 (A vulnerability in the PESpin file format parser of ClamAV could allow ...)
- clamav 1.4.5+dfsg-1 (bug #1141303)
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
CVE-2026-20216 (A vulnerability in the InstallShield file format parser of ClamAV coul ...)
- clamav 1.4.5+dfsg-1 (bug #1141303)
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
CVE-2026-20215 (A vulnerability in the 7z file format parser of ClamAV could allow an ...)
- clamav 1.4.5+dfsg-1 (bug #1141303)
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
CVE-2026-20214 (A vulnerability in the FSG file format parser of ClamAV could allow an ...)
- clamav 1.4.5+dfsg-1 (bug #1141303)
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
CVE-2026-20213 (A vulnerability in the PE file format parser of ClamAV could allow an ...)
- clamav 1.4.5+dfsg-1 (bug #1141303)
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
CVE-2026-20191 (A vulnerability in Cisco Catalyst Center could allow an unauthenticate ...)
NOT-FOR-US: Cisco
@@ -210563,7 +210563,7 @@ CVE-2026-20039 (A vulnerability in the VPN web server of Cisco Secure Firewall A
NOT-FOR-US: Cisco
CVE-2026-20031 (A vulnerability in the HTML Cascading Style Sheets (CSS) module of Cla ...)
- clamav 1.4.4+dfsg-1
- [trixie] - clamav <no-dsa> (clamav is updated via -updates)
+ [trixie] - clamav 1.4.6+dfsg-1~deb13u1
[bookworm] - clamav <no-dsa> (clamav is updated via -updates)
[bullseye] - clamav <postponed> (Minor issue; backport with stable release updates)
NOTE: https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e263018c5a638e9c5dd551df2c6c7d5312491a4a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e263018c5a638e9c5dd551df2c6c7d5312491a4a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/9bb24060/attachment.htm>
More information about the debian-security-tracker-commits
mailing list