Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 522
Alerts This Week
Warning Icon 1 522

Mageia 10 Clamav Moderate Memory Corruption Issues Advisory 2026-0271

mageia
Calendar Grey July 19, 2026
Scroller Mageia
Mageia security update addresses multiple Out-of-Bounds Memory Corruption and Denial of Service issues in clamav.
Security update

Summary

Description: The updated packages fix security vulnerabilities: PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability. (CVE-2026-20213) FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability. (CVE-2026-20214) 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability. (CVE-2026-20215) InstallShield File Format Processing Resource Exhaustion Vulnerability. (CVE-2026-20216) PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability. (CVE-2026-20217) ALZ Archive Processing Denial of Service Vulnerability. (CVE-2026-20243) DMG File Processing Denial of Service Vulnerability. (CVE-2026-20244)

References

- https://bugs.mageia.org/show_bug.cgi?id=35841

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4HZVOZRQX4MIQVALYKDCGBZUHHVH4QN/

- https://github.com/Cisco-Talos/clamav/releases/tag/clamav-1.4.5

- https://www.cve.org/CVERecord?id=CVE-2026-20213

- https://www.cve.org/CVERecord?id=CVE-2026-20214

- https://www.cve.org/CVERecord?id=CVE-2026-20215

- https://www.cve.org/CVERecord?id=CVE-2026-20216

- https://www.cve.org/CVERecord?id=CVE-2026-20217

- https://www.cve.org/CVERecord?id=CVE-2026-20243

- https://www.cve.org/CVERecord?id=CVE-2026-20244

Resolution

SRPMS

- 10/core/clamav-1.4.5-1.mga10

Severity
moderate
Lowest
Low
Medium
High
Critical

Publication date: 19 Jul 2026 
URL: https://advisories.mageia.org/MGASA-2026-0271.html
Type: security
CVE: CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.