[ubuntu/resolute-proposed] clamav 1.4.3+dfsg-2ubuntu1 (Accepted)
Hector Cao
hector.cao at canonical.com
Wed Jan 14 12:42:27 UTC 2026
clamav (1.4.3+dfsg-2ubuntu1) resolute; urgency=medium
* Merge with Debian unstable (LP: #2125999). Remaining changes:
- clamav-base.postinst.in: Quell warning from check for clamav user
(LP 1920217).
- d/rules: use RelWithDebInfo profile as the Rust CMake scripts can not
recognize the "None" type specified by dh-cmake.
(LP 2071663)
- Extend ifupdown script to support networkd-dispatcher.
+ d/clamav-freshclam-ifupdown: Modernize some parts of
the script. Implement support for networkd-dispatcher.
+ d/clamav-freshclam.links: Install the
clamav-freshclam-ifupdown script inside the proper
/usr/lib/networkd-dispatcher/{off,routable}.d/
directories. (LP 1718227)
- debian/po: update translations
- d/control: Recommends: networkd-dispatcher (LP 2132159)
* Added:
- d/rules, debian/clamav-freshclam.postinst.in : revert manual loading
of freshclam apparmor profile and go back to using dh_apparmor
* Dropped:
- Updated to version 1.4.3 to fix security issue.
- debian/rules: bump CL_FLEVEL to 213.
- debian/libclamav12.symbols: updated CLAMAV_PRIVATE and
cl_retflevel symbols to new version.
- CVE-2025-20234
- CVE-2025-20260
[Debian now carries 1.4.3]
clamav (1.4.3+dfsg-2) unstable; urgency=medium
[ Pino Toscano ]
* Make sure to ignore the not installed files on all the architectures.
* Limit systemd build dependencies as linux-any, as systemd is available only
on Linux.
* Simplify handling of Linux-only files by using dh-exec, rather than creating
install and manpages files during build:
- add the dh-exec build dependency
- mark the Linux-only files in install and manpages files
- simplify debian/rules accordingly
* Wrap the whole override_dh_installsystemd to run on Linux, rather than only
the first command in it.
clamav (1.4.3+dfsg-1) unstable; urgency=medium
* Import 1.4.3
- CVE-2025-20234 (Fixed a possible buffer overflow read bug in the UDF
file parser that may write to a temp file and thus disclose information,
or it may crash and cause a denial-of-service (DoS) condition.)
Closes: #1108045
- CVE-2025-20260 (Fixed a possible buffer overflow write bug in the PDF
file parser that could cause a denial-of-service (DoS) condition or
enable remote code execution.) Closes: #1108046
Date: Thu, 08 Jan 2026 11:22:44 +0100
Changed-By: Hector Cao <hector.cao at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Andreas Hasenack <andreas.hasenack at canonical.com>
https://launchpad.net/ubuntu/+source/clamav/1.4.3+dfsg-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 08 Jan 2026 11:22:44 +0100
Source: clamav
Built-For-Profiles: noudeb
Architecture: source
Version: 1.4.3+dfsg-2ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Hector Cao <hector.cao at canonical.com>
Closes: 1108045 1108046
Launchpad-Bugs-Fixed: 2125999
Changes:
clamav (1.4.3+dfsg-2ubuntu1) resolute; urgency=medium
.
* Merge with Debian unstable (LP: #2125999). Remaining changes:
- clamav-base.postinst.in: Quell warning from check for clamav user
(LP 1920217).
- d/rules: use RelWithDebInfo profile as the Rust CMake scripts can not
recognize the "None" type specified by dh-cmake.
(LP 2071663)
- Extend ifupdown script to support networkd-dispatcher.
+ d/clamav-freshclam-ifupdown: Modernize some parts of
the script. Implement support for networkd-dispatcher.
+ d/clamav-freshclam.links: Install the
clamav-freshclam-ifupdown script inside the proper
/usr/lib/networkd-dispatcher/{off,routable}.d/
directories. (LP 1718227)
- debian/po: update translations
- d/control: Recommends: networkd-dispatcher (LP 2132159)
* Added:
- d/rules, debian/clamav-freshclam.postinst.in : revert manual loading
of freshclam apparmor profile and go back to using dh_apparmor
* Dropped:
- Updated to version 1.4.3 to fix security issue.
- debian/rules: bump CL_FLEVEL to 213.
- debian/libclamav12.symbols: updated CLAMAV_PRIVATE and
cl_retflevel symbols to new version.
- CVE-2025-20234
- CVE-2025-20260
[Debian now carries 1.4.3]
.
clamav (1.4.3+dfsg-2) unstable; urgency=medium
.
[ Pino Toscano ]
* Make sure to ignore the not installed files on all the architectures.
* Limit systemd build dependencies as linux-any, as systemd is available only
on Linux.
* Simplify handling of Linux-only files by using dh-exec, rather than creating
install and manpages files during build:
- add the dh-exec build dependency
- mark the Linux-only files in install and manpages files
- simplify debian/rules accordingly
* Wrap the whole override_dh_installsystemd to run on Linux, rather than only
the first command in it.
.
clamav (1.4.3+dfsg-1) unstable; urgency=medium
.
* Import 1.4.3
- CVE-2025-20234 (Fixed a possible buffer overflow read bug in the UDF
file parser that may write to a temp file and thus disclose information,
or it may crash and cause a denial-of-service (DoS) condition.)
Closes: #1108045
- CVE-2025-20260 (Fixed a possible buffer overflow write bug in the PDF
file parser that could cause a denial-of-service (DoS) condition or
enable remote code execution.) Closes: #1108046
Checksums-Sha1:
010f481ea1faf14c4dcf01da47608b4d8f79606a 3321 clamav_1.4.3+dfsg-2ubuntu1.dsc
5d68f890e2d1943bf685328b144acaf650542ebe 513444 clamav_1.4.3+dfsg-2ubuntu1.debian.tar.xz
ff9107864914154ea8c765306c9472aad75e70f2 9121 clamav_1.4.3+dfsg-2ubuntu1_source.buildinfo
Checksums-Sha256:
53147128d4e53371e3ce64271d4f926272e95b67b7e4063f1f21acd9ccb7ecd4 3321 clamav_1.4.3+dfsg-2ubuntu1.dsc
cb34ce1af7e7e24a2ae3ee8c10449a7200920c194c8a3a683391de790a0edf65 513444 clamav_1.4.3+dfsg-2ubuntu1.debian.tar.xz
5b1644e856d9e3a486e11e5970008283be222825859cf8ff6a958fa8a5e28f20 9121 clamav_1.4.3+dfsg-2ubuntu1_source.buildinfo
Files:
0d364dc1f73f73fc1363021a7ae94231 3321 utils optional clamav_1.4.3+dfsg-2ubuntu1.dsc
c50ac20ee62d135f45006a8a5308668d 513444 utils optional clamav_1.4.3+dfsg-2ubuntu1.debian.tar.xz
ffbb45960f1b3e618598d2f78a197d70 9121 utils optional clamav_1.4.3+dfsg-2ubuntu1_source.buildinfo
Original-Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/clamav
Vcs-Git-Commit: 365b6a40e95ca2471dba24fc9a1086280c3bad14
Vcs-Git-Ref: refs/heads/lp2125999-merge-resolute
More information about the Resolute-changes
mailing list