[Git][security-tracker-team/security-tracker][master] Mark clamav issues as pending for the next update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 30 05:12:15 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3dab91c5 by Salvatore Bonaccorso at 2026-10-30T06:08:04+01:00
Mark clamav issues as pending for the next update

Not yet included in trixie or trixie-security and we track the pending
CVEs in data/next-point-update.txt

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -117954,27 +117954,27 @@ CVE-2026-37171 (A lack of tenant separation in SuperTokens Inc. SuperTokens Core
 CVE-2026-20348 (A vulnerability in the XAR file format parser of ClamAV could allow an ...)
 	{DLA-4852-1}
 	- clamav 1.4.6+dfsg-1 (bug #1143939)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20347 (A vulnerability in the Mach-O file format parser of ClamAV could allow ...)
 	{DLA-4852-1}
 	- clamav 1.4.6+dfsg-1 (bug #1143939)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20346 (A vulnerability in the PDF file format parser of ClamAV could allow an ...)
 	{DLA-4852-1}
 	- clamav 1.4.6+dfsg-1 (bug #1143939)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20345 (A vulnerability in the GPT file format parser of ClamAV could allow an ...)
 	{DLA-4852-1}
 	- clamav 1.4.6+dfsg-1 (bug #1143939)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20339 (A vulnerability in the PESpin file format parser of ClamAV could allow ...)
 	{DLA-4852-1}
 	- clamav 1.4.6+dfsg-1 (bug #1143939)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html
 CVE-2026-20338 (A vulnerability in the zip archive parser of ClamAV could allow an una ...)
 	NOT-FOR-US: Cisco
@@ -150555,37 +150555,37 @@ CVE-2026-24240 (NVIDIA Megatron Bridge for Linux contains a vulnerability where
 CVE-2026-20244 (A vulnerability in the DMG file format parser of ClamAV could allow an ...)
 	{DLA-4852-1}
 	- clamav 1.4.5+dfsg-1 (bug #1141303)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
 CVE-2026-20243 (A vulnerability in the ALZ file format parser of ClamAV could allow an ...)
 	{DLA-4852-1}
 	- clamav 1.4.5+dfsg-1 (bug #1141303)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
 CVE-2026-20217 (A vulnerability in the PESpin file format parser of ClamAV could allow ...)
 	{DLA-4852-1}
 	- clamav 1.4.5+dfsg-1 (bug #1141303)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
 CVE-2026-20216 (A vulnerability in the InstallShield file format parser of ClamAV coul ...)
 	{DLA-4852-1}
 	- clamav 1.4.5+dfsg-1 (bug #1141303)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
 CVE-2026-20215 (A vulnerability in the 7z file format parser of ClamAV could allow an  ...)
 	{DLA-4852-1}
 	- clamav 1.4.5+dfsg-1 (bug #1141303)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
 CVE-2026-20214 (A vulnerability in the FSG file format parser of ClamAV could allow an ...)
 	{DLA-4852-1}
 	- clamav 1.4.5+dfsg-1 (bug #1141303)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
 CVE-2026-20213 (A vulnerability in the PE file format parser of ClamAV could allow an  ...)
 	{DLA-4852-1}
 	- clamav 1.4.5+dfsg-1 (bug #1141303)
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	NOTE: https://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html
 CVE-2026-20191 (A vulnerability in Cisco Catalyst Center could allow an unauthenticate ...)
 	NOT-FOR-US: Cisco
@@ -229564,7 +229564,7 @@ CVE-2026-20039 (A vulnerability in the VPN web server of Cisco Secure Firewall A
 CVE-2026-20031 (A vulnerability in the HTML Cascading Style Sheets (CSS) module of Cla ...)
 	{DLA-4852-1}
 	- clamav 1.4.4+dfsg-1
-	[trixie] - clamav 1.4.6+dfsg-1~deb13u1
+	[trixie] - clamav <no-dsa> (clamav is updated via -updates)
 	[bullseye] - clamav <postponed> (Minor issue; backport with stable release updates)
 	NOTE: https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html
 CVE-2026-20025 (A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Soft ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3dab91c555c8b435768d11b81ec909fd48d1628f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3dab91c555c8b435768d11b81ec909fd48d1628f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/40dc8b5a/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list