[Git][security-tracker-team/security-tracker][master] Reserve DLA-4852-1 for clamav

Emilio Pozuelo Monfort (@pochu) pochu at debian.org
Fri Oct 23 10:45:30 BST 2026



Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b0f2fa81 by Emilio Pozuelo Monfort at 2026-10-23T11:42:47+02:00
Reserve DLA-4852-1 for clamav

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -219524,7 +219524,6 @@ CVE-2026-20039 (A vulnerability in the VPN web server of Cisco Secure Firewall A
 CVE-2026-20031 (A vulnerability in the HTML Cascading Style Sheets (CSS) module of Cla ...)
 	- clamav 1.4.4+dfsg-1
 	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
-	[bookworm] - clamav <no-dsa> (clamav is updated via -updates)
 	[bullseye] - clamav <postponed> (Minor issue; backport with stable release updates)
 	NOTE: https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html
 CVE-2026-20025 (A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Soft ...)


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[23 Oct 2026] DLA-4852-1 clamav - security update
+	{CVE-2026-20031 CVE-2026-20213 CVE-2026-20214 CVE-2026-20215 CVE-2026-20216 CVE-2026-20217 CVE-2026-20243 CVE-2026-20244 CVE-2026-20339 CVE-2026-20345 CVE-2026-20346 CVE-2026-20347 CVE-2026-20348}
+	[bookworm] - clamav 1.4.6+dfsg-0+deb12u1
 [22 Oct 2026] DLA-4851-1 aide - security update
 	[bookworm] - aide 0.18.3-1+deb12u5
 [22 Oct 2026] DLA-4850-1 linux-6.12 - security update


=====================================
data/dla-needed.txt
=====================================
@@ -122,11 +122,6 @@ cjose
 cjson
   NOTE: 20260801: Added by Front-Desk (ta)
 --
-clamav (Emilio)
-  NOTE: 20260711: Added by Front-Desk (utkarsh)
-  NOTE: 20260711: Needs a newer rustc to be backported as well. (utkarsh)
-  NOTE: 20260911: toolchain is ready, waiting for trixie-pu (pochu)
---
 cockpit
   NOTE: 20260819: Added by Front-Desk (lamby)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b0f2fa8168cb03a8adbd678f6d1e99e0101a96d4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b0f2fa8168cb03a8adbd678f6d1e99e0101a96d4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/82877ff7/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list