[Pkg-clamav-devel] clamav_1.4.6+dfsg-1~deb13u1_source.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Thank you for your contribution to Debian.

Mapping trixie to stable.
Mapping stable to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 05 Sep 2026 21:13:32 +0200
Source: clamav
Architecture: source
Version: 1.4.6+dfsg-1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Closes: 1043428 1092882 1103001 1120998 1123913 1141347 1143939
Changes:
 clamav (1.4.6+dfsg-1~deb13u1) trixie; urgency=medium
 .
   [ Sebastian Andrzej Siewior ]
   * Import 1.4.5
     - CVE-2026-20031 (Fixed an error handling bug in the HTML file parser)
     - Fixes a few bugs scanning JPEG/ TIFF files (Closes: #1120998)
     - CVE-2026-20217 ("Fixed a bug in the PESpin unpacker cleanup path")
     - CVE-2026-20213 ("Fixed an integer overflow in PE rebuild size
       calculations")
     - CVE-2026-20216 ("Fixed an InstallShield archive extraction limit
       bypass")
     - CVE-2026-20214 ("Fixed an FSG unpacker loop underflow")
     - CVE-2026-20243 ("Fixed ALZ parser size handling bugs")
     - CVE-2026-20215 ("Fixed a 7z parser substream count overflow")
     - CVE-2026-20244 ("Fixed 32-bit DMG parser size checks")
   * Update apparmor profile for clamd (Closes: #1092882, #1123913).
   * Use -DCMAKE_BUILD_TYPE=RelWithDebInfo by default (Closes: #1141347).
   * Add Romanian debconf templates translation (Closes: #1103001).
   * Mention in the README.Debian that clamAV AppArmor profiles do not allow
     OnAccess scanning ("Closes: #1043428).
 .
   [ Pino Toscano ]
   * Make sure to ignore the not installed files on all the architectures.
   * Limit systemd build dependencies as linux-any, as systemd is available only
     on Linux.
   * Simplify handling of Linux-only files by using dh-exec, rather than creating
     install and manpages files during build:
     - add the dh-exec build dependency
     - mark the Linux-only files in install and manpages files
     - simplify debian/rules accordingly
   * Wrap the whole override_dh_installsystemd to run on Linux, rather than only
     the first command in it.
 .
   [ Pétur Ingi Egilsson ]
   * clamav-daemon.postinst.in: honour "none" as a way to disable
     the LogFile directive.
 .
   [ Edmund Lodewijks ]
   * Import 1.4.6 (Closes: #1143939)
     - CVE-2026-20345 ("Fixed an indexing error while converting GPT
       partition names")
     - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker")
     - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser")
     - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the
       Mach-O parser")
     - CVE-2026-20348 ("Fixed XAR parser size handling")
     - Fixed thread-safety issues in the clamd STATS command that could
       disclose process memory or crash the daemon
Checksums-Sha1:
 cab9a2d68ee3cbc18ade037981c941a9032cf70d 3023 clamav_1.4.6+dfsg-1~deb13u1.dsc
 d076f78137f51afc0dbb7b67ec476c3c62487089 27698332 clamav_1.4.6+dfsg.orig.tar.xz
 1a4432935b80c9c0ef46f0bc33d90c378cba9e8b 519104 clamav_1.4.6+dfsg-1~deb13u1.debian.tar.xz
Checksums-Sha256:
 2ded467a2b40e1077d1fa0d7eafe673195db487d00aa230dd51825ca89855bec 3023 clamav_1.4.6+dfsg-1~deb13u1.dsc
 09823124e9bae5d602699c2a2fe5d4876298283cf3e7f8982973571843572468 27698332 clamav_1.4.6+dfsg.orig.tar.xz
 53056aa745141d97192fdfe7b20ebbba318117850b3cab43b81a766ba9ff39a5 519104 clamav_1.4.6+dfsg-1~deb13u1.debian.tar.xz
Files:
 511c576d3776aff040ef69cd0e1bdc3e 3023 utils optional clamav_1.4.6+dfsg-1~deb13u1.dsc
 1342952a4063eee18d239cd7761ef0ff 27698332 utils optional clamav_1.4.6+dfsg.orig.tar.xz
 2833c186fa3b02773c3a16d4d24d439e 519104 utils optional clamav_1.4.6+dfsg-1~deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=TRXP
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-clamav-devel/attachments/20260905/ae3fa18b/attachment.sig>