Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Fixes for multiple CVEs https://github.com/Cisco- Talos/clamav/releases/tag/clamav-1.4.5. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-144f87ee92 2026-07-07 01:08:27.509767+00:00 -------------------------------------------------------------------------------- Name : clamav Product : Fedora 43 Version : 1.4.5 Release : 1.fc43 URL : https://www.clamav.net/ Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: Fixes for multiple CVEs https://github.com/Cisco- Talos/clamav/releases/tag/clamav-1.4.5 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 2 2026 Gwyn Ciesla - 1.4.5-1 - Update to 1.4.5 * Fri Jun 12 2026 Yaakov Selkowitz - 1.4.4-2 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-144f87ee92' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPGkeys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Several vulnerabilities have been found in the ClamAV antivirus toolkit, that could result in denial of service or other unspecified impact. For Debian 9 stretch, these problems have been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3042-1
Several security issues were fixed in ClamAV.. =========================================================================Ubuntu Security Notice USN-4918-2 April 20, 2021 clamav vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM Summary: Several security issues were fixed in ClamAV. Software Description: - clamav: Anti-virus utility for Unix Details: USN-4918-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2021-1252) It was discovered that ClamAV incorrectly handled parsing PDF documents. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1404) It was discovered that ClamAV incorrectly handled parsing email. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2021-1405) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: clamav 0.103.2+dfsg-0ubuntu0.14.04.1+esm1 This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4918-2 https://ubuntu.com/security/notices/USN-4918-1 CVE-2021-1252, CVE-2021-1404, CVE-2021-1405 . Numerous vulnerabilities in ClamAV were resolved through Ubuntu's patch USN-4918-2, effectively mitigating risk of denial of service attacks.. ClamAV Security Fix, Ubuntu Update, Denial Of Service, Antivirus Threat, Security Advisory. . Severity: Critical. LinuxSecurity.com Team
ClamAV has been updated to a new version.. =========================================================================Ubuntu Security Notice USN-2157-1 March 27, 2014 clamav update ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 13.10 - Ubuntu 12.10 - Ubuntu 12.04 LTS Summary: ClamAV has been updated to a new version. Software Description: - clamav: Anti-virus utility for Unix Details: This updates ClamAV to a new major version in order to gain new detection technologies and maintain proper compatibility with the virus signature database. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 13.10: clamav 0.98.1+dfsg-4ubuntu1~ubuntu13.10.2 Ubuntu 12.10: clamav 0.98.1+dfsg-4ubuntu1~ubuntu12.10.2 Ubuntu 12.04 LTS: clamav 0.98.1+dfsg-4ubuntu1~ubuntu12.04.2 This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2157-1 https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1296856 Package Information: https://launchpad.net/ubuntu/+source/clamav/0.98.1+dfsg-4ubuntu1~ubuntu13.10.2 https://launchpad.net/ubuntu/+source/clamav/0.98.1+dfsg-4ubuntu1~ubuntu12.10.2 https://launchpad.net/ubuntu/+source/clamav/0.98.1+dfsg-4ubuntu1~ubuntu12.04.2 . =========================================================================Ubuntu Security Notice USN-. clamav, updated, version, ==========================================================. . Severity: Important. LinuxSecurity.com Team
Several vulnerabilities have been discovered in the ClamAV anti-virus toolkit: CVE-2008-6680 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1771-1
Get the latest Linux and open source security news straight to your inbox.