[ubuntu/resolute-proposed] clamav 1.4.3+dfsg-2ubuntu1 (Accepted)

Hector Cao hector.cao at canonical.com
Wed Jan 14 12:42:27 UTC 2026


clamav (1.4.3+dfsg-2ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2125999). Remaining changes:
    - clamav-base.postinst.in: Quell warning from check for clamav user
      (LP 1920217).
    - d/rules: use RelWithDebInfo profile as the Rust CMake scripts can not
      recognize the "None" type specified by dh-cmake.
      (LP 2071663)
    - Extend ifupdown script to support networkd-dispatcher.
      + d/clamav-freshclam-ifupdown: Modernize some parts of
        the script.  Implement support for networkd-dispatcher.
      + d/clamav-freshclam.links: Install the
        clamav-freshclam-ifupdown script inside the proper
        /usr/lib/networkd-dispatcher/{off,routable}.d/
        directories. (LP 1718227)
    - debian/po: update translations
    - d/control: Recommends: networkd-dispatcher (LP 2132159)
  * Added:
    - d/rules, debian/clamav-freshclam.postinst.in : revert manual loading
      of freshclam apparmor profile and go back to using dh_apparmor
  * Dropped:
    - Updated to version 1.4.3 to fix security issue.
      - debian/rules: bump CL_FLEVEL to 213.
      - debian/libclamav12.symbols: updated CLAMAV_PRIVATE and
        cl_retflevel symbols to new version.
      - CVE-2025-20234
      - CVE-2025-20260
      [Debian now carries 1.4.3]

clamav (1.4.3+dfsg-2) unstable; urgency=medium

  [ Pino Toscano ]
  * Make sure to ignore the not installed files on all the architectures.
  * Limit systemd build dependencies as linux-any, as systemd is available only
    on Linux.
  * Simplify handling of Linux-only files by using dh-exec, rather than creating
    install and manpages files during build:
    - add the dh-exec build dependency
    - mark the Linux-only files in install and manpages files
    - simplify debian/rules accordingly
  * Wrap the whole override_dh_installsystemd to run on Linux, rather than only
    the first command in it.

clamav (1.4.3+dfsg-1) unstable; urgency=medium

  * Import 1.4.3
    - CVE-2025-20234 (Fixed a possible buffer overflow read bug in the UDF
      file parser that may write to a temp file and thus disclose information,
      or it may crash and cause a denial-of-service (DoS) condition.)
      Closes: #1108045
    - CVE-2025-20260 (Fixed a possible buffer overflow write bug in the PDF
      file parser that could cause a denial-of-service (DoS) condition or
      enable remote code execution.) Closes: #1108046

Date: Thu, 08 Jan 2026 11:22:44 +0100
Changed-By: Hector Cao <hector.cao at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Andreas Hasenack <andreas.hasenack at canonical.com>
https://launchpad.net/ubuntu/+source/clamav/1.4.3+dfsg-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 08 Jan 2026 11:22:44 +0100
Source: clamav
Built-For-Profiles: noudeb
Architecture: source
Version: 1.4.3+dfsg-2ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Hector Cao <hector.cao at canonical.com>
Closes: 1108045 1108046
Launchpad-Bugs-Fixed: 2125999
Changes:
 clamav (1.4.3+dfsg-2ubuntu1) resolute; urgency=medium
 .
   * Merge with Debian unstable (LP: #2125999). Remaining changes:
     - clamav-base.postinst.in: Quell warning from check for clamav user
       (LP 1920217).
     - d/rules: use RelWithDebInfo profile as the Rust CMake scripts can not
       recognize the "None" type specified by dh-cmake.
       (LP 2071663)
     - Extend ifupdown script to support networkd-dispatcher.
       + d/clamav-freshclam-ifupdown: Modernize some parts of
         the script.  Implement support for networkd-dispatcher.
       + d/clamav-freshclam.links: Install the
         clamav-freshclam-ifupdown script inside the proper
         /usr/lib/networkd-dispatcher/{off,routable}.d/
         directories. (LP 1718227)
     - debian/po: update translations
     - d/control: Recommends: networkd-dispatcher (LP 2132159)
   * Added:
     - d/rules, debian/clamav-freshclam.postinst.in : revert manual loading
       of freshclam apparmor profile and go back to using dh_apparmor
   * Dropped:
     - Updated to version 1.4.3 to fix security issue.
       - debian/rules: bump CL_FLEVEL to 213.
       - debian/libclamav12.symbols: updated CLAMAV_PRIVATE and
         cl_retflevel symbols to new version.
       - CVE-2025-20234
       - CVE-2025-20260
       [Debian now carries 1.4.3]
 .
 clamav (1.4.3+dfsg-2) unstable; urgency=medium
 .
   [ Pino Toscano ]
   * Make sure to ignore the not installed files on all the architectures.
   * Limit systemd build dependencies as linux-any, as systemd is available only
     on Linux.
   * Simplify handling of Linux-only files by using dh-exec, rather than creating
     install and manpages files during build:
     - add the dh-exec build dependency
     - mark the Linux-only files in install and manpages files
     - simplify debian/rules accordingly
   * Wrap the whole override_dh_installsystemd to run on Linux, rather than only
     the first command in it.
 .
 clamav (1.4.3+dfsg-1) unstable; urgency=medium
 .
   * Import 1.4.3
     - CVE-2025-20234 (Fixed a possible buffer overflow read bug in the UDF
       file parser that may write to a temp file and thus disclose information,
       or it may crash and cause a denial-of-service (DoS) condition.)
       Closes: #1108045
     - CVE-2025-20260 (Fixed a possible buffer overflow write bug in the PDF
       file parser that could cause a denial-of-service (DoS) condition or
       enable remote code execution.) Closes: #1108046
Checksums-Sha1:
 010f481ea1faf14c4dcf01da47608b4d8f79606a 3321 clamav_1.4.3+dfsg-2ubuntu1.dsc
 5d68f890e2d1943bf685328b144acaf650542ebe 513444 clamav_1.4.3+dfsg-2ubuntu1.debian.tar.xz
 ff9107864914154ea8c765306c9472aad75e70f2 9121 clamav_1.4.3+dfsg-2ubuntu1_source.buildinfo
Checksums-Sha256:
 53147128d4e53371e3ce64271d4f926272e95b67b7e4063f1f21acd9ccb7ecd4 3321 clamav_1.4.3+dfsg-2ubuntu1.dsc
 cb34ce1af7e7e24a2ae3ee8c10449a7200920c194c8a3a683391de790a0edf65 513444 clamav_1.4.3+dfsg-2ubuntu1.debian.tar.xz
 5b1644e856d9e3a486e11e5970008283be222825859cf8ff6a958fa8a5e28f20 9121 clamav_1.4.3+dfsg-2ubuntu1_source.buildinfo
Files:
 0d364dc1f73f73fc1363021a7ae94231 3321 utils optional clamav_1.4.3+dfsg-2ubuntu1.dsc
 c50ac20ee62d135f45006a8a5308668d 513444 utils optional clamav_1.4.3+dfsg-2ubuntu1.debian.tar.xz
 ffbb45960f1b3e618598d2f78a197d70 9121 utils optional clamav_1.4.3+dfsg-2ubuntu1_source.buildinfo
Original-Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/clamav
Vcs-Git-Commit: 365b6a40e95ca2471dba24fc9a1086280c3bad14
Vcs-Git-Ref: refs/heads/lp2125999-merge-resolute


More information about the Resolute-changes mailing list