ClamAV 1.5.3 and 1.4.5 security patch versions published
"Valerie Snyder \(valsnyde\) via clamav-users" <[email protected]> Wed, 1 Jul 2026 19:55:57 +0000
| Newsgroups | gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <IA4PR11MB93231E0C9680F07EDCDAE976DEF62__28167.3241335497$1782935791$gmane$org@IA4PR11MB9323.namprd11.prod.outlook.com> |
--===============4467995553821454477==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_IA4PR11MB93231E0C9680F07EDCDAE976DEF62IA4PR11MB9323namp_"
--_000_IA4PR11MB93231E0C9680F07EDCDAE976DEF62IA4PR11MB9323namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Read this online at: https://blog.clamav.net/2026/07/clamav-153-and-145-sec=
urity-patch.html
Today, we are publishing the 1.5.3 and 1.4.5 security patch versions.
The release files for the patch versions are available for download on the =
ClamAV downloads<https://www.clamav.net/downloads> page, on the GitHub Rele=
ase page<https://github.com/Cisco-Talos/clamav/releases>, and through Docke=
r Hub with both Alpine<https://hub.docker.com/r/clamav/clamav/> and Debian<=
https://hub.docker.com/r/clamav/clamav-debian/> containers. The images on D=
ocker Hub may not be immediately available on release day. Continue reading=
to learn what changed in each version.
1.5.3
ClamAV 1.5.3 is a patch release with the following fixes:
*
CVE-2026-20217<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
217>: Fixed a bug in the PESpin unpacker cleanup path that could free point=
ers into the scanned file buffer and crash the scanner.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2005. The fix is included in 1.5.3 and 1.4.5.
Thank you to Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen=
of Tencent Xuanwu Lab for identifying this issue.
*
CVE-2026-20213<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
213>: Fixed an integer overflow in PE rebuild size calculations that could =
be reached through a malformed Aspack-packed PE file and lead to a heap buf=
fer overflow write.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2007. The fix is included in 1.5.3 and 1.4.5.
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.
*
CVE-2026-20216<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
216>: Fixed an InstallShield archive extraction limit bypass that could wri=
te far more temporary data than intended and exhaust temporary storage.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2009. The fix is included in 1.5.3 and 1.4.5.
Thank you to Mizu for identifying this issue.
*
CVE-2026-20214<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
214>: Fixed an FSG unpacker loop underflow that could write past the sectio=
n array while scanning a malformed PE file.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2004. The fix is included in 1.5.3 and 1.4.5.
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.
*
CVE-2026-20243<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
243>: Fixed ALZ parser size handling bugs that could cause malformed ALZ ar=
chives to panic, abort the scanner, or skip expected scan-limit handling.
This issue affects ClamAV 1.5.0 through 1.5.2 and 1.4.0 through 1.4.4. The =
fix is included in 1.5.3 and 1.4.5.
Thank you to Yazdan Soltani for identifying this issue.
*
CVE-2026-20215<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
215>: Fixed a 7z parser substream count overflow that could under-allocate =
parser metadata arrays and write past them while reading a malformed archiv=
e.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions back to 2009=
. The fix is included in 1.5.3 and 1.4.5.
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.
*
CVE-2026-20244<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
244>: Fixed 32-bit DMG parser size checks that could let a short mish strip=
e table pass validation and crash 32-bit scanner builds.
This issue affects 32-bit ClamAV builds from 0.98.1 through 1.5.2, includin=
g 1.4.0 through 1.4.4 and 1.5.0 through 1.5.2. It does not affect 64-bit bu=
ilds. The fix is included in 1.5.3 and 1.4.5.
Thank you to Stanley John Tobias for identifying this issue.
*
Hardened clamscan, clamdscan, and clamonacc quarantine actions against time=
-of-check/time-of-use races that could redirect copied, moved, or removed f=
iles under unsafe quarantine directory configurations.
Thank you to Hiroki Imai from Ricerca Security, Inc. for identifying this i=
ssue.
*
Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and RUSTS=
EC-2026-0068 advisories, and upgraded the Rust openssl dependency to resolv=
e CVE-2026-41676.
*
Raised the minimum required CMake version to 3.17 to fix Linux builds with =
libcurl v8.21.0 when linking static library dependencies.
*
Metadata preclass scans now run before the final scan verdict.
*
ClamOnAcc: Fixed errors when recursively excluded paths are children of an =
included path.
*
ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide=
in the same bucket.
These fixes are courtesy of sharkautarch.
1.4.5
ClamAV 1.4.5 is a patch release with the following fixes:
*
CVE-2026-20217<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
217>: Fixed a bug in the PESpin unpacker cleanup path that could free point=
ers into the scanned file buffer and crash the scanner.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2005. The fix is included in 1.5.3 and 1.4.5.
Thank you to Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen=
of Tencent Xuanwu Lab for identifying this issue.
*
CVE-2026-20213<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
213>: Fixed an integer overflow in PE rebuild size calculations that could =
be reached through a malformed Aspack-packed PE file and lead to a heap buf=
fer overflow write.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2007. The fix is included in 1.5.3 and 1.4.5.
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.
*
CVE-2026-20216<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
216>: Fixed an InstallShield archive extraction limit bypass that could wri=
te far more temporary data than intended and exhaust temporary storage.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2009. The fix is included in 1.5.3 and 1.4.5.
Thank you to Mizu for identifying this issue.
*
CVE-2026-20214<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
214>: Fixed an FSG unpacker loop underflow that could write past the sectio=
n array while scanning a malformed PE file.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2004. The fix is included in 1.5.3 and 1.4.5.
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.
*
CVE-2026-20243<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
243>: Fixed ALZ parser size handling bugs that could cause malformed ALZ ar=
chives to panic, abort the scanner, or skip expected scan-limit handling.
This issue affects ClamAV 1.5.0 through 1.5.2 and 1.4.0 through 1.4.4. The =
fix is included in 1.5.3 and 1.4.5.
Thank you to Yazdan Soltani for identifying this issue.
*
CVE-2026-20215<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
215>: Fixed a 7z parser substream count overflow that could under-allocate =
parser metadata arrays and write past them while reading a malformed archiv=
e.
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions back to 2009=
. The fix is included in 1.5.3 and 1.4.5.
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.
*
CVE-2026-20244<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2026-20=
244>: Fixed 32-bit DMG parser size checks that could let a short mish strip=
e table pass validation and crash 32-bit scanner builds.
This issue affects 32-bit ClamAV builds from 0.98.1 through 1.5.2, includin=
g 1.4.0 through 1.4.4 and 1.5.0 through 1.5.2. It does not affect 64-bit bu=
ilds. The fix is included in 1.5.3 and 1.4.5.
Thank you to Stanley John Tobias for identifying this issue.
*
Hardened clamscan, clamdscan, and clamonacc quarantine actions against time=
-of-check/time-of-use races that could redirect copied, moved, or removed f=
iles under unsafe quarantine directory configurations.
Thank you to Hiroki Imai from Ricerca Security, Inc. for identifying this i=
ssue.
*
Raised the minimum required CMake version to 3.17 to fix Linux builds with =
libcurl v8.21.0 when linking static library dependencies.
*
ClamOnAcc: Fixed errors when recursively excluded paths are children of an =
included path.
This fix is courtesy of sharkautarch.
Respectfully,
Val
Valerie Snyder (she/they)
ClamAV Development
Talos
Cisco Systems, Inc.
--_000_IA4PR11MB93231E0C9680F07EDCDAE976DEF62IA4PR11MB9323namp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; color: rgb(0, 0, 0=
);">
<span style=3D"font-size: 10pt;"><i>Read this online at: </i><a href=3D"htt=
ps://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html"><i>htt=
ps://blog.clamav.net/2026/07/clamav-153-and-145-security-patch.html</i></a>=
</span></div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin-top: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont=
, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
Today, we are publishing the 1.5.3 and 1.4.5 security patch versions. =
</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
margin-top: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont=
, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
<span style=3D"color: rgb(0, 0, 0);">The release files for the patch versio=
ns are available for download on the
</span><span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://www.clam=
av.net/downloads" target=3D"_blank" id=3D"OWA0a72b680-6db2-22e3-16ce-82b19d=
0617a3" class=3D"OWAAutoLink" rel=3D"nofollow" style=3D"color: rgb(240, 73,=
77);">ClamAV downloads</a></span><span style=3D"color: rgb(0, 0, 0);">&nbs=
p;page,
on the </span><span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://=
github.com/Cisco-Talos/clamav/releases" target=3D"_blank" id=3D"OWA5839f409=
-4ded-7158-bfb4-63b9c81d2542" class=3D"OWAAutoLink" rel=3D"nofollow" style=
=3D"color: rgb(240, 73, 77);">GitHub Release page</a></span><span style=3D"=
color: rgb(0, 0, 0);">,
and through Docker Hub with both </span><span style=3D"color: rgb(240, 73,=
77);"><a href=3D"https://hub.docker.com/r/clamav/clamav/" target=3D"_blank=
" id=3D"OWA15a73476-ab28-58b9-1c46-f69ab60dd466" class=3D"OWAAutoLink" rel=
=3D"nofollow" style=3D"color: rgb(240, 73, 77);">Alpine</a></span><span sty=
le=3D"color: rgb(0, 0, 0);"> and
</span><span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://hub.dock=
er.com/r/clamav/clamav-debian/" target=3D"_blank" id=3D"OWA3f44697a-fe94-2e=
bb-b71c-df8af602336a" class=3D"OWAAutoLink" rel=3D"nofollow" style=3D"color=
: rgb(240, 73, 77);">Debian</a></span><span style=3D"color: rgb(0, 0, 0);">=
containers.
The images on Docker Hub may not be immediately available on release day. =
Continue reading to learn what changed in each version. </span></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
line-height: normal; margin: 0px 0px 30px; font-family: Aptos, Aptos_Embedd=
edFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12p=
t; color: rgb(0, 0, 0);">
<b>1.5.3 </b></div>
<div class=3D"elementToProof" style=3D"direction: ltr; text-align: left; te=
xt-indent: 0px; margin-top: 0px; margin-bottom: 16px; font-family: Aptos, A=
ptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fon=
t-size: 12pt; color: rgb(0, 0, 0);">
ClamAV 1.5.3 is a patch release with the following fixes:</div>
<ul data-line=3D"9" style=3D"direction: ltr; text-align: left; margin: 0px =
0px 0.7em; padding-right: 2.5em; padding-left: 2.5em; list-style-position: =
initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); direct=
ion: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20217" id=3D"OWAe6b7b3fe-8eee-0b91-58b5-=
8100d07c0e15" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20217" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20217</a></span>:
Fixed a bug in the PESpin unpacker cleanup path that could free pointers i=
nto the scanned file buffer and crash the scanner.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2005. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen=
of Tencent Xuanwu Lab for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20213" id=3D"OWA142b50af-987d-31e1-b07f-=
add57a362b2d" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20213" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20213</a></span>:
Fixed an integer overflow in PE rebuild size calculations that could be re=
ached through a malformed Aspack-packed PE file and lead to a heap buffer o=
verflow write.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2007. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20216" id=3D"OWAd72084fa-f22a-e1ce-6180-=
3dffb447c1ee" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20216" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20216</a></span>:
Fixed an InstallShield archive extraction limit bypass that could write fa=
r more temporary data than intended and exhaust temporary storage.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2009. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Mizu for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20214" id=3D"OWAdcfd1191-edb1-c7a6-1c3c-=
9d7cd6d8b732" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20214" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20214</a></span>:
Fixed an FSG unpacker loop underflow that could write past the section arr=
ay while scanning a malformed PE file.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2004. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20243" id=3D"OWA47c60d11-da28-f2ac-6dd4-=
dc0c2e8196ad" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20243" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20243</a></span>:
Fixed ALZ parser size handling bugs that could cause malformed ALZ archive=
s to panic, abort the scanner, or skip expected scan-limit handling.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.0 through 1.5.2 and 1.4.0 through 1.4.4. The =
fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Yazdan Soltani for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20215" id=3D"OWA5f2c1af8-3c8b-6d1b-2257-=
e5f538657c33" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20215" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20215</a></span>:
Fixed a 7z parser substream count overflow that could under-allocate parse=
r metadata arrays and write past them while reading a malformed archive.</d=
iv>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions back to 2009=
. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20244" id=3D"OWA65cdf387-674f-e447-d371-=
c8ee1f00f112" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20244" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20244</a></span>:
Fixed 32-bit DMG parser size checks that could let a short mish stripe tab=
le pass validation and crash 32-bit scanner builds.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects 32-bit ClamAV builds from 0.98.1 through 1.5.2, includin=
g 1.4.0 through 1.4.4 and 1.5.0 through 1.5.2. It does not affect 64-bit bu=
ilds. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Stanley John Tobias for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Hardened <code>clamscan</code>, <code>clamdscan</code>, and <code>clamonacc=
</code> quarantine actions against time-of-check/time-of-use races tha=
t could redirect copied, moved, or removed files under unsafe quarantine di=
rectory configurations.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Hiroki Imai from Ricerca Security, Inc. for identifying this i=
ssue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Upgraded the Rust <code>tar</code> dependency to resolve the RUSTSEC-2=
026-0067 and RUSTSEC-2026-0068 advisories, and upgraded the Rust
<code>openssl</code> dependency to resolve CVE-2026-41676.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Raised the minimum required CMake version to 3.17 to fix Linux builds with =
libcurl v8.21.0 when linking static library dependencies.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Metadata preclass scans now run before the final scan verdict.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
ClamOnAcc: Fixed errors when recursively excluded paths are children of an =
included path.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide=
in the same bucket.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
These fixes are courtesy of sharkautarch.</div>
</li></ul>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
line-height: normal; margin: 0px 0px 30px; font-family: Aptos, Aptos_Embedd=
edFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12p=
t; color: rgb(0, 0, 0);">
<b><br>
</b></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
line-height: normal; margin: 0px 0px 30px; font-family: Aptos, Aptos_Embedd=
edFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12p=
t; color: rgb(0, 0, 0);">
<b>1.4.5 </b></div>
<div class=3D"elementToProof" style=3D"direction: ltr; text-align: left; te=
xt-indent: 0px; margin-top: 0px; margin-bottom: 16px; font-family: Aptos, A=
ptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fon=
t-size: 12pt; color: rgb(0, 0, 0);">
ClamAV 1.4.5 is a patch release with the following fixes:</div>
<ul data-line=3D"9" style=3D"direction: ltr; text-align: left; margin: 0px =
0px 0.7em; padding-right: 2.5em; padding-left: 2.5em; list-style-position: =
initial; list-style-type: disc;">
<li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=
alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); direct=
ion: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20217" id=3D"OWAc7524a33-a830-40f8-dd6d-=
9d127f5e8583" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20217" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20217</a></span>:
Fixed a bug in the PESpin unpacker cleanup path that could free pointers i=
nto the scanned file buffer and crash the scanner.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2005. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen=
of Tencent Xuanwu Lab for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20213" id=3D"OWA99aefa49-f78a-1173-adfd-=
dca98d054239" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20213" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20213</a></span>:
Fixed an integer overflow in PE rebuild size calculations that could be re=
ached through a malformed Aspack-packed PE file and lead to a heap buffer o=
verflow write.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2007. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20216" id=3D"OWA729404c3-c9ad-ff1e-6236-=
ad1d99c4699c" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20216" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20216</a></span>:
Fixed an InstallShield archive extraction limit bypass that could write fa=
r more temporary data than intended and exhaust temporary storage.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2009. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Mizu for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20214" id=3D"OWAa040bd90-2439-904c-3346-=
3fe537136efa" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20214" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20214</a></span>:
Fixed an FSG unpacker loop underflow that could write past the section arr=
ay while scanning a malformed PE file.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back =
as 2004. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20243" id=3D"OWAfa589cf3-0096-6164-84a0-=
d44a0b847ecb" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20243" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20243</a></span>:
Fixed ALZ parser size handling bugs that could cause malformed ALZ archive=
s to panic, abort the scanner, or skip expected scan-limit handling.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.0 through 1.5.2 and 1.4.0 through 1.4.4. The =
fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Yazdan Soltani for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20215" id=3D"OWA1c1a8f0f-26eb-8151-a1c2-=
68661256269e" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20215" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20215</a></span>:
Fixed a 7z parser substream count overflow that could under-allocate parse=
r metadata arrays and write past them while reading a malformed archive.</d=
iv>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions back to 2009=
. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Trail of Bits, in collaboration with Anthropic, for identifyin=
g this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
<span style=3D"color: rgb(240, 73, 77);"><a href=3D"https://cve.mitre.org/c=
gi-bin/cvename.cgi?name=3DCVE-2026-20244" id=3D"OWAafb008b1-f5ef-8a01-d5ea-=
e50defb60126" class=3D"OWAAutoLink" data-href=3D"https://cve.mitre.org/cgi-=
bin/cvename.cgi?name=3DCVE-2026-20244" style=3D"color: rgb(240, 73, 77);">C=
VE-2026-20244</a></span>:
Fixed 32-bit DMG parser size checks that could let a short mish stripe tab=
le pass validation and crash 32-bit scanner builds.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This issue affects 32-bit ClamAV builds from 0.98.1 through 1.5.2, includin=
g 1.4.0 through 1.4.4 and 1.5.0 through 1.5.2. It does not affect 64-bit bu=
ilds. The fix is included in 1.5.3 and 1.4.5.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Stanley John Tobias for identifying this issue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Hardened <code>clamscan</code>, <code>clamdscan</code>, and <code>clamonacc=
</code> quarantine actions against time-of-check/time-of-use races tha=
t could redirect copied, moved, or removed files under unsafe quarantine di=
rectory configurations.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Thank you to Hiroki Imai from Ricerca Security, Inc. for identifying this i=
ssue.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
Raised the minimum required CMake version to 3.17 to fix Linux builds with =
libcurl v8.21.0 when linking static library dependencies.</div>
</li><li style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontServi=
ce, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); d=
irection: ltr; text-indent: 0px; margin: 0px 0px 0.25em;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
ClamOnAcc: Fixed errors when recursively excluded paths are children of an =
included path.</div>
<div class=3D"elementToProof" role=3D"presentation" style=3D"direction: ltr=
; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0.7em=
;">
This fix is courtesy of sharkautarch.</div>
</li></ul>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div id=3D"Signature" class=3D"elementToProof">
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Arial, Helveti=
ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Respectfully,</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Arial, Helveti=
ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Val</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Arial, Helveti=
ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Valerie Snyder (sh=
e/they)</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">ClamAV Development=
</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Talos</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Cisco Systems, Inc=
.</span><br>
</div>
</div>
</body>
</html>
--_000_IA4PR11MB93231E0C9680F07EDCDAE976DEF62IA4PR11MB9323namp_--
--===============4467995553821454477==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
--===============4467995553821454477==--