Bug#1143939: clamav: CVE-2026-20339 CVE-2026-20345 CVE-2026-20346 CVE-2026-20347 CVE-2026-20348

Florian Ernst <[email protected]>
Newsgroups gmane.linux.debian.devel.bugs.rc
Message-ID <aoFjmUrStqU0z6h9__37506.9246905454$1786864651$gmane$org@fernst.no-ip.org>
Control: tags -1 fixed-upstream

On Sat, Aug 08, 2026 at 06:34:21PM +0200, Moritz Mühlenhoff wrote:
> The following vulnerabilities were published for clamav.
> 
> CVE-2026-20339[0]:
> CVE-2026-20345[1]:
> CVE-2026-20346[2]:
> CVE-2026-20347[3]:
> CVE-2026-20348[4]:

JFTR, these are all fixed upstream in release 1.4.6, cf.
<https://github.com/Cisco-Talos/clamav/releases#release-clamav-1.4.6>.

Cheers,
Flo
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=kup0
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.