-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2026-a9beec8485
2026-08-12 01:10:02.714660+00:00
-------------------------------------------------------------------------------
-

Name : clamav
Product : Fedora 43
Version : 1.4.6
Release : 1.fc43
URL : https://www.clamav.net/
Summary : End-user tools for the Clam Antivirus scanner
Description :
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
software is the integration with mail servers (attachment scanning). The
package provides a flexible and scalable multi-threaded daemon, a command
line scanner, and a tool for automatic updating via Internet. The programs
are based on a shared library distributed with the Clam AntiVirus package,
which you can use with your own software. The virus database is based on
the virus database from OpenAntiVirus, but contains additional signatures
(including signatures for popular polymorphic viruses, too) and is KEPT UP
TO DATE.

-------------------------------------------------------------------------------
-
Update Information:

1.4.6
-------------------------------------------------------------------------------
-
ChangeLog:

* Mon Aug 10 2026 Gwyn Ciesla <gwync@protonmail.com> - 1.4.6-1
- Update to 1.4.6
* Wed Jul 15 2026 Fedora Release Engineering <releng@fedoraproject.org> -
1.4.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jul 10 2026 Jerry James <loganjerry@gmail.com> - 1.4.5-2
- Remove unused ocaml BuildRequires
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #2444609 - CVE-2026-20031 clamav: improper error handling when
splitting UTF-8 strings in the HTML Cascading Style Sheets (CSS) module [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2444609
[ 2 ] Bug #2444610 - CVE-2026-20031 clamav: improper error handling when
splitting UTF-8 strings in the HTML Cascading Style Sheets (CSS) module [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2444610
[ 3 ] Bug #2496742 - CVE-2026-20216 clamav: ClamAV: Denial of Service via
crafted InstallShield file [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496742
[ 4 ] Bug #2496743 - CVE-2026-20216 clamav: ClamAV: Denial of Service via
crafted InstallShield file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496743
[ 5 ] Bug #2496819 - CVE-2026-20215 clamav: ClamAV: Denial of Service via
crafted 7z file [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496819
[ 6 ] Bug #2496820 - CVE-2026-20215 clamav: ClamAV: Denial of Service via
crafted 7z file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496820
[ 7 ] Bug #2496827 - CVE-2026-20217 clamav: ClamAV: Denial of Service via
crafted PESpin file [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496827
[ 8 ] Bug #2496828 - CVE-2026-20217 clamav: ClamAV: Denial of Service via
crafted PESpin file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496828
[ 9 ] Bug #2496834 - CVE-2026-20214 clamav: ClamAV: Denial of Service via
crafted FSG file parsing [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496834
[ 10 ] Bug #2496835 - CVE-2026-20214 clamav: ClamAV: Denial of Service via
crafted FSG file parsing [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496835
[ 11 ] Bug #2496842 - CVE-2026-20244 clamav: ClamAV: Denial of Service via
crafted DMG file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496842
[ 12 ] Bug #2496843 - CVE-2026-20244 clamav: ClamAV: Denial of Service via
crafted DMG file [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2496843
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-a9beec8485' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-

--
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new