[Pkg-clamav-devel] clamav_1.4.6+dfsg-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 18:32:02 +0200
Source: clamav
Architecture: source
Version: 1.4.6+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Closes: 1143939
Changes:
 clamav (1.4.6+dfsg-1) unstable; urgency=medium
 .
   [ Edmund Lodewijks ]
   * Import 1.4.6 (Closes: #1143939)
     - CVE-2026-20345 ("Fixed an indexing error while converting GPT
       partition names")
     - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker")
     - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser")
     - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the
       Mach-O parser")
     - CVE-2026-20348 ("Fixed XAR parser size handling")
     - Fixed thread-safety issues in the clamd STATS command that could
       disclose process memory or crash the daemon
Checksums-Sha1:
 d062bc1b22bdac859f68e7a5d2629d7437edf0b0 3042 clamav_1.4.6+dfsg-1.dsc
 d076f78137f51afc0dbb7b67ec476c3c62487089 27698332 clamav_1.4.6+dfsg.orig.tar.xz
 cd2cf544237f6fcb02455625ff003f43e5419c24 522048 clamav_1.4.6+dfsg-1.debian.tar.xz
Checksums-Sha256:
 e105a6e31c4df5a4e3e2af330e2f5bcf2678582f9423b2bba2af8d94deeef315 3042 clamav_1.4.6+dfsg-1.dsc
 09823124e9bae5d602699c2a2fe5d4876298283cf3e7f8982973571843572468 27698332 clamav_1.4.6+dfsg.orig.tar.xz
 11e6f5229f254e8799df4c320fa94c0b20370688231050d960eb6cb71a1b9671 522048 clamav_1.4.6+dfsg-1.debian.tar.xz
Files:
 ed13bef81e8ebb00301f93dcbcdd04ac 3042 utils optional clamav_1.4.6+dfsg-1.dsc
 1342952a4063eee18d239cd7761ef0ff 27698332 utils optional clamav_1.4.6+dfsg.orig.tar.xz
 46077c44cfe3c9a9e921a437625a7bca 522048 utils optional clamav_1.4.6+dfsg-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=B+J3
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-clamav-devel/attachments/20260823/591f866c/attachment.sig>