-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 29 Jun 2025 12:01:31 +0200
Source: clamav
Architecture: source
Version: 1.4.3+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Closes: 1108045 1108046
Changes:
clamav (1.4.3+dfsg-1) unstable; urgency=medium
.
* Import 1.4.3
- CVE-2025-20234 (Fixed a possible buffer overflow read bug in the UDF
file parser that may write to a temp file and thus disclose information,
or it may crash and cause a denial-of-service (DoS) condition.)
Closes: #1108045
- CVE-2025-20260 (Fixed a possible buffer overflow write bug in the PDF
file parser that could cause a denial-of-service (DoS) condition or
enable remote code execution.) Closes: #1108046
Checksums-Sha1:
a6a8e904105a18f4bdf7712110bd861620bbec69 2906 clamav_1.4.3+dfsg-1.dsc
9de4123ce7c983eb14b3b103f583628e279945a5 33173124 clamav_1.4.3+dfsg.orig.tar.xz
71601f88972d5b6e2467db748143c963dd1c0b0c 504104 clamav_1.4.3+dfsg-1.debian.tar.xz
Checksums-Sha256:
4023358e62af9cdceb3914fc8155f481150431e2b4235b2833db4c1c9d62caaa 2906 clamav_1.4.3+dfsg-1.dsc
438640cfa0558745aac611c13245ebed64796b11bd1716bb9f485f3dc7478e75 33173124 clamav_1.4.3+dfsg.orig.tar.xz
03ba75f8ec0abea73fce8b91b9a5e0a644c82d09167a5c18bc74d3b10b4d18ff 504104 clamav_1.4.3+dfsg-1.debian.tar.xz
Files:
e581f832b45353626a075fcef7802b74 2906 utils optional clamav_1.4.3+dfsg-1.dsc
588610c495c89d975cc4283f7125ec42 33173124 utils optional clamav_1.4.3+dfsg.orig.tar.xz
f01b6caddea2fe3d2662532839ee52b3 504104 utils optional clamav_1.4.3+dfsg-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=1MqD
-----END PGP SIGNATURE-----
Attachment:
pgpn23PRBr3DA.pgp
Description: PGP signature