gpp_maybe
Security update for clamav
SUSE-SLE-Module-Basesystem-15-SP7-2026-4180
This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write (bsc#1274599). - CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600). - CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601). - CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash (bsc#1274602). - CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass (bsc#1274603). - CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook directory (bsc#1271922). - CVE-2025-8088: ejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's temporary scan directory on Windows. Changes for clamav: Update to 1.5.4: * Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon while scans and STATS requests run concurrently. Also fixed partial socket-write handling used for large STATS responses. * FreeBSD: Restored support for safe quarantine move and remove actions while preserving protection against source-path replacement races. * Fixed an OpenSSL library-context leak in legacy hashing helpers when a requested message digest cannot be fetched, such as when the default provider is unavailable in a FIPS-enabled environment. * Upgraded the Rust crossbeam-epoch dependency to resolve the RUSTSEC-2026-0204 advisory.
-
Release DateSep 14 2026
-
ReferencesBugzilla: 1271922, 1274597, 1274598, 1274599, 1274600, 1274601, 1274602, 1274603
CVEs: CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348, CVE-2026-46671 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Basesystem Module 15.7 aarch64
-
Packagesclamav
Antivirus Toolkitclamav-devel1.5.4-150600.18.31.1 lock rpm lock src
Development files for libclamav, an antivirus engineclamav-docs-html1.5.4-150600.18.31.1 lock rpm
Documentation for ClamAV in HTML formatclamav-milter1.5.4-150600.18.31.1 lock rpm
ClamAV Milter compatible mail scannerlibclamav121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclammspack01.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclamunrar121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus RAR supportlibfreshclam41.5.4-150600.18.31.1 lock rpm
ClamAV updater library1.5.4-150600.18.31.1 lock rpm
Basesystem Module 15.7 ppc64le
-
Packagesclamav
Antivirus Toolkitclamav-devel1.5.4-150600.18.31.1 lock rpm lock src
Development files for libclamav, an antivirus engineclamav-docs-html1.5.4-150600.18.31.1 lock rpm
Documentation for ClamAV in HTML formatclamav-milter1.5.4-150600.18.31.1 lock rpm
ClamAV Milter compatible mail scannerlibclamav121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclammspack01.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclamunrar121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus RAR supportlibfreshclam41.5.4-150600.18.31.1 lock rpm
ClamAV updater library1.5.4-150600.18.31.1 lock rpm
Basesystem Module 15.7 x86_64
-
Packagesclamav
Antivirus Toolkitclamav-devel1.5.4-150600.18.31.1 lock rpm lock src
Development files for libclamav, an antivirus engineclamav-docs-html1.5.4-150600.18.31.1 lock rpm
Documentation for ClamAV in HTML formatclamav-milter1.5.4-150600.18.31.1 lock rpm
ClamAV Milter compatible mail scannerlibclamav121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclammspack01.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclamunrar121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus RAR supportlibfreshclam41.5.4-150600.18.31.1 lock rpm
ClamAV updater library1.5.4-150600.18.31.1 lock rpm
Basesystem Module 15.7 s390x
-
Packagesclamav
Antivirus Toolkitclamav-devel1.5.4-150600.18.31.1 lock rpm lock src
Development files for libclamav, an antivirus engineclamav-docs-html1.5.4-150600.18.31.1 lock rpm
Documentation for ClamAV in HTML formatclamav-milter1.5.4-150600.18.31.1 lock rpm
ClamAV Milter compatible mail scannerlibclamav121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclammspack01.5.4-150600.18.31.1 lock rpm
ClamAV antivirus engine runtimelibclamunrar121.5.4-150600.18.31.1 lock rpm
ClamAV antivirus RAR supportlibfreshclam41.5.4-150600.18.31.1 lock rpm
ClamAV updater library1.5.4-150600.18.31.1 lock rpm