Sign me up Login

Details about package clamav

Name:	clamav (PTS)
Uploader:	Edmund Lodewijks <edmund@proteamail.com> (Debian QA page)
Description:	clamav-base - anti-virus utility for Unix - base package clamav-docs - anti-virus utility for Unix - documentation clamav-doc - anti-virus utility for Unix - documentation clamav - anti-virus utility for Unix - command-line interface libclamav-dev - anti-virus utility for Unix - development files libclamav12 - anti-virus utility for Unix - library clamav-daemon - anti-virus utility for Unix - scanner daemon clamdscan - anti-virus utility for Unix - scanner client clamav-testfiles - anti-virus utility for Unix - test files clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration

Package uploads

Upload #1

Information

Version:	1.4.6+dfsg-1
Uploaded:	2026-08-17 17:23
Source package:	clamav_1.4.6+dfsg-1.dsc
Distribution:	unstable
Section:	utils
Priority:	optional
Homepage:	https://www.clamav.net/
Vcs-Git:	https://salsa.debian.org/clamav-team/clamav.git
Vcs-Browser:	https://salsa.debian.org/clamav-team/clamav
Closes bugs:	#1143939

Changelog

 clamav (1.4.6+dfsg-1) unstable; urgency=high
 .
   * Import 1.4.6 (Closes: #1143939)
     - CVE-2026-20345 ("Fixed an indexing error while converting GPT
       partition names")
     - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker")
     - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser")
     - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the
       Mach-O parser")
     - CVE-2026-20348 ("Fixed XAR parser size handling")
     - Fixed thread-safety issues in the clamd STATS command that could
       disclose process memory or crash the daemon
   * Refresh 0004-unit_tests-Don-t-set-TMP.patch
   * Update symbols and the CL_FLEVEL guard in d/rules for 1.4.6
     (CL_FLEVEL 215 -> 216)
   * d/ci: Disable blhc (unreleased change already in the packaging repository)

QA information

–
Package uses debhelper-compat

Debhelper compatibility level 12

–

Package is the latest upstream version

Local:	1.4.6+dfsg
Upstream:	1.4.6
Url:	https://www.clamav.net/downloads/production/clamav-1.4.6.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
The uploader is not in the package's "Maintainer" or "Uploaders" fields
User email

edmund@proteamail.com

"Maintainer" email

pkg-clamav-devel@lists.alioth.debian.org

"Uploaders" emails
–
Package has lintian warnings
clamav source
- W build-depends-on-obsolete-package
  - Build-Depends: pkg-config => pkgconf
- W newer-debconf-templates
  - [debian/po/templates.pot]
- W no-nmu-in-changelog
  - [debian/changelog:1]
- W source-contains-prebuilt-windows-binary
  - [.cargo/vendor/libloading/tests/nagisa32.dll]
  - [.cargo/vendor/libloading/tests/nagisa64.dll]
  - [debian/test.exe]
- W source-nmu-has-incorrect-version-number
  - 1.4.6+dfsg-1 [debian/changelog:1]
- W superfluous-file-pattern
  - .cargo/vendor/adler/* [debian/copyright:376]
  - .cargo/vendor/crossbeam-channel/* [debian/copyright:522]
  - .cargo/vendor/errno-dragonfly/* [debian/copyright:402]
  - .cargo/vendor/flume/* [debian/copyright:446]
  - .cargo/vendor/futures-core/* [debian/copyright:545]
  - .cargo/vendor/futures-sink/* [debian/copyright:545]
  - .cargo/vendor/hermit-abi/* [debian/copyright:446]
  - .cargo/vendor/jpeg-decoder/* [debian/copyright:580]
  - .cargo/vendor/lock_api/* [debian/copyright:410]
  - .cargo/vendor/memoffset/* [debian/copyright:603]
  - .cargo/vendor/nanorand/* [debian/copyright:613]
  - .cargo/vendor/num_cpus/* [debian/copyright:446]
  - .cargo/vendor/pin-project-internal/* [debian/copyright:446]
  - .cargo/vendor/pin-project/* [debian/copyright:446]
  - .cargo/vendor/redox_syscall/* [debian/copyright:630]
  - .cargo/vendor/scopeguard/* [debian/copyright:644]
  - .cargo/vendor/spin/* [debian/copyright:663]
  - .cargo/vendor/wasi/* [debian/copyright:597]
- I duplicate-short-description
  - clamav-doc clamav-docs [debian/control]
- I older-debian-watch-file-standard
  - 3 [debian/watch]
- I out-of-date-standards-version
  - 4.7.0 (released 2024-04-07) (current is 4.7.4)
- P maintainer-manual-page
  - [debian/clamav-config.1]
- P package-uses-old-debhelper-compat-version
  - 12
- P source-contains-autogenerated-gperf-data
  - [libclamav/iana_cctld.h]
  - [libclamav/iana_tld.h]
  - [libclamav/jsparse/generated/keywords.h]
  - [libclamav/jsparse/generated/operators.h]
- P source-contains-prebuilt-wasm-binary
  - [.cargo/vendor/wit-bindgen/src/rt/wit_bindgen_cabi.o]
  - [.cargo/vendor/wit-bindgen/src/rt/wit_bindgen_cabi_realloc.o]
  - [.cargo/vendor/wit-bindgen/src/rt/wit_bindgen_cabi_wasip3.o]
  - [.cargo/vendor/wit-bindgen/wasi-cli@0.2.0.wasm]
- X debian-rules-uses-as-needed-linker-flag
  - [debian/rules:24]
- X source-is-missing
  - [unit_tests/input/htmlnorm_scanfiles/css_background_2.html]
- X update-debian-copyright
  - 2004 vs 2026 [debian/copyright:111]
- X upstream-metadata-file-is-missing
- X very-long-line-length-in-source-file
  - 1002 > 512 [.cargo/vendor/prettyplease/README.md:81]
  - 1006 > 512 [.cargo/vendor/prettyplease/examples/output.rustfmt.rs:435]
  - 1006 > 512 [.cargo/vendor/prettyplease/src/lib.rs:83]
  - 1015 > 512 [unit_tests/input/other_scanfiles/lha_lzh/lh6.lzh:102]
  - 1015 > 512 [unit_tests/input/other_scanfiles/lha_lzh/lh7.lzh:102]
  - 1023215 > 512 [.cargo/vendor/windows_x86_64_gnu/lib/libwindows.0.52.0.a:490]
  - 1024 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.odc.cpio.xor:1]
  - 1027 > 512 [unit_tests/input/freshclam_testfiles/test-6.cvd:38]
  - 1027122 > 512 [.cargo/vendor/windows_aarch64_msvc/lib/windows.0.52.0.lib:477]
  - 1027122 > 512 [.cargo/vendor/windows_x86_64_msvc/lib/windows.0.52.0.lib:477]
  - 1028 > 512 [unit_tests/input/freshclam_testfiles/test-4.cvd:22]
  - 1035018 > 512 [.cargo/vendor/windows_aarch64_gnullvm/lib/libwindows.0.52.0.a:504]
  - 1035018 > 512 [.cargo/vendor/windows_x86_64_gnullvm/lib/libwindows.0.52.0.a:504]
  - 1071 > 512 [.cargo/vendor/windows-sys/src/Windows/Wdk/Storage/FileSystem/Minifilters/mod.rs:102]
  - 10953 > 512 [.cargo/vendor/regex-automata/tests/gen/dense/multi_pattern_v2_fwd.bigendian.dfa:27]
  - 10953 > 512 [.cargo/vendor/regex-automata/tests/gen/dense/multi_pattern_v2_fwd.littleendian.dfa:27]
  - 1112 > 512 [.cargo/vendor/onenote_parser/tests/samples/New Section Group/Open Notebook.onetoc2:18]
  - 1123 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-yc.exe.xor:1]
  - 1137 > 512 [.cargo/vendor/minimal-lexical/tests/parse_tests.rs:154]
  - 1141 > 512 [.cargo/vendor/serde_json/tests/lexical/parse.rs:169]
  - 1163519 > 512 [.cargo/vendor/windows_i686_gnu/lib/libwindows.0.52.0.a:528]
  - 1164637 > 512 [.cargo/vendor/windows_i686_msvc/lib/windows.0.52.0.lib:500]
  - 11647 > 512 [unit_tests/input/bytecode_sigs/pdf.cbc:6]
  - 1173146 > 512 [.cargo/vendor/windows_i686_gnullvm/lib/libwindows.0.52.0.a:518]
  - 1190 > 512 [unit_tests/input/other_scanfiles/lha_lzh/default.cap.lzh:69]
  - 1190 > 512 [unit_tests/input/other_scanfiles/lha_lzh/default.euc.lzh:69]
  - 1190 > 512 [unit_tests/input/other_scanfiles/lha_lzh/default.lzh:69]
  - 1190 > 512 [unit_tests/input/other_scanfiles/lha_lzh/default.sjis.lzh:69]
  - 1190 > 512 [unit_tests/input/other_scanfiles/lha_lzh/default.utf8.lzh:69]
  - 1190 > 512 [unit_tests/input/other_scanfiles/lha_lzh/lh5.lzh:69]
  - 1190 > 512 [unit_tests/input/other_scanfiles/lha_lzh/traditional.lzh:69]
  - 1194 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam_cache_emax.tgz.xor:6]
  - 1194 > 512 [unit_tests/input/freshclam_testfiles/test-2.cvd:21]
  - 1195 > 512 [unit_tests/input/pe_allmatch/block-cert-sigs/Test.Sig.CRB.BlockCert.crb:1]
  - 1195 > 512 [unit_tests/input/pe_allmatch/trust-sigs/Test.Sig.CRB.TrustCert.crb:1]
  - 1201 > 512 [.cargo/vendor/windows-sys/src/Windows/Wdk/Storage/FileSystem/mod.rs:645]
  - 1207 > 512 [unit_tests/input/freshclam_testfiles/test-1.cvd:24]
  - 1240 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-petite.exe.xor:1]
  - 12602 > 512 [unit_tests/input/htmlnorm_reffiles/buf.notags.ref:1]
  - 12652 > 512 [unit_tests/input/htmlnorm_reffiles/buf.nocomment.ref:1]
  - 1350 > 512 [libclamav/sis.c:978]
  - 1359 > 512 [libclamav_rust/src/sys.rs:101]
  - 1413 > 512 [libclamav/iana_tld.h:5]
  - 1418 > 512 [unit_tests/input/bytecode_sigs/matchwithread.cbc:5]
  - 14282 > 512 [unit_tests/input/htmlnorm_scanfiles/css_background_2.html:12]
  - 14296 > 512 [libclamav_rust/src/css_image_extract.rs:449]
  - 1436 > 512 [.cargo/vendor/built/README.md:73]
  - 1446 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.pdf.xor:32]
  - 1463 > 512 [.cargo/vendor/y4m/scripts/id_rsa.enc:10]
  - 1569 > 512 [unit_tests/input/other_scanfiles/lha_lzh/lh1.lzh:122]
  - 1569 > 512 [unit_tests/input/other_scanfiles/lha_lzh/lh2.lzh:122]
  - 15767 > 512 [.cargo/vendor/prettyplease/examples/input.rs:1]
  - 1617 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-wwpack.exe.xor:1]
  - 1641 > 512 [.cargo/vendor/pxfm/src/exponents/exp2f.rs:39]
  - 1644 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-pespin.exe.xor:40]
  - 1686 > 512 [examples/fileprop_analysis/analysis.cud:36]
  - 1710 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-aspack.exe.xor:1]
  - 1725 > 512 [unit_tests/input/bytecode_sigs/bytecode.cvd:27]
  - 1727 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-upx.exe.xor:1]
  - 1791 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Search/mod.rs:4224]
  - 1800 > 512 [.cargo/vendor/built/src/lib.rs:313]
  - 1814 > 512 [.cargo/vendor/flate2/tests/corrupt-gz-file.bin:1]
  - 1821 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.exe.rtf.xor:69]
  - 1842 > 512 [unit_tests/input/other_scanfiles/disasmref.bin:3]
  - 1880 > 512 [unit_tests/input/freshclam_testfiles/test-3.cvd:30]
  - 1882 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_dense_minimized-from-9486fb7c8a93b12c12a62166b43d31640c0208a9:1]
  - 1894 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_dense_crash-9486fb7c8a93b12c12a62166b43d31640c0208a9:1]
  - 1910 > 512 [libclamav/builtin_bytecodes.h:38]
  - 19775 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.ppt.xor:41]
  - 20081 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam_ISmsi_ext.exe.xor:1819]
  - 20081 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam_ISmsi_int.exe.xor:1819]
  - 2127 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.tnef.xor:25]
  - 2151 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-nsis.exe.xor:15]
  - 22257 > 512 [.cargo/vendor/onenote_parser/tests/samples/New Section Group/New Section 2.one:68]
  - 2441 > 512 [examples/fileprop_analysis/old/analysis.cud:1]
  - 2561 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.ea05.exe.xor:714]
  - 2619 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.ea06.exe.xor:567]
  - 2832 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.exe.2010.one.xor:2575]
  - 2833 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.exe.2007.one.xor:161]
  - 3085 > 512 [libclamav/7z/7zCrc.c:12]
  - 3087 > 512 [libclamav/7z/lzma.diff:9]
  - 309134 > 512 [unit_tests/input/clamav_hdb_scanfiles/clamjol.iso.xor:8]
  - 309164 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.iso.xor:2]
  - 3236 > 512 [.cargo/vendor/onenote_parser/tests/samples/OneNote_RecycleBin/OneNote_DeletedPages.one:12]
  - 32466 > 512 [unit_tests/input/pe_allmatch/test-exe-src/test.res:1]
  - 32901 > 512 [unit_tests/input/other_scanfiles/iso_no_joliet.logo.iso:1]
  - 32901 > 512 [unit_tests/input/other_scanfiles/iso_normal.logo.iso:1]
  - 3867 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam_IScab_ext.exe.xor:44]
  - 3901 > 512 [.cargo/vendor/onenote_parser/tests/samples/New Section Group/New Section 1.one:37]
  - 4154 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-fsg.exe.xor:8]
  - 4196 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.chm.xor:12]
  - 4373 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam_IScab_int.exe.xor:4152]
  - 46406 > 512 [.cargo/vendor/onenote_parser/tests/samples/New Section 1.one:721]
  - 5046 > 512 [.cargo/vendor/bzip2-rs/tests/samplefiles/sample2.ref:37]
  - 513 > 512 [.cargo/vendor/nom-7.1.3/CHANGELOG.md:1436]
  - 513 > 512 [.cargo/vendor/nom/CHANGELOG.md:1491]
  - 513 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Graphics/Printing/mod.rs:392]
  - 513 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Networking/WinHttp/mod.rs:57]
  - 515 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/DeploymentServices/mod.rs:126]
  - 515 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/UI/Controls/mod.rs:5]
  - 516 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/UI/Shell/mod.rs:24]
  - 521 > 512 [.cargo/vendor/windows-sys/src/Windows/Wdk/System/OfflineRegistry/mod.rs:34]
  - 521 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Devices/Tapi/mod.rs:292]
  - 522 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Pipes/mod.rs:10]
  - 524 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/NetworkManagement/WindowsFirewall/mod.rs:22]
  - 526 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Gaming/mod.rs:25]
  - 526 > 512 [docs/man/clamd.8.in:13]
  - 528 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/NetworkManagement/Rras/mod.rs:4524]
  - 529 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Devices/Sensors/mod.rs:69]
  - 530 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/UI/Shell/PropertiesSystem/mod.rs:132]
  - 533 > 512 [.cargo/vendor/minimal-lexical/README.md:6]
  - 535 > 512 [unit_tests/freshclam_test.py:795]
  - 536 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Web/InternetExplorer/mod.rs:57]
  - 538 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Memory/mod.rs:13]
  - 540721 > 512 [.cargo/vendor/exr/src/compression/b44/table.rs:9]
  - 543 > 512 [.cargo/vendor/regex-automata/tests/gen/sparse/multi_pattern_v2_rev.bigendian.dfa:43]
  - 543 > 512 [.cargo/vendor/regex-automata/tests/gen/sparse/multi_pattern_v2_rev.littleendian.dfa:43]
  - 543 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Media/Audio/mod.rs:2]
  - 543 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/DiagnosticDataQuery/mod.rs:39]
  - 545 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Networking/WinInet/mod.rs:30]
  - 546 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Devices/Enumeration/Pnp/mod.rs:3]
  - 546 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Storage/CloudFilters/mod.rs:59]
  - 548 > 512 [.cargo/vendor/pxfm/src/err/erf_poly.rs:130]
  - 549 > 512 [docs/man/freshclam.conf.5.in:108]
  - 552 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/NetworkManagement/WindowsFilteringPlatform/mod.rs:188]
  - 553 > 512 [unit_tests/input/bytecode_sigs/testadt_7.cbc:6]
  - 554 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/NetworkManagement/WiFi/mod.rs:106]
  - 555 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Media/Multimedia/mod.rs:124]
  - 555 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/PasswordManagement/mod.rs:4]
  - 556 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Graphics/Printing/PrintTicket/mod.rs:6]
  - 564 > 512 [.cargo/vendor/encoding_rs/src/lib.rs:531]
  - 566 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Networking/ActiveDirectory/mod.rs:185]
  - 568 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Storage/Packaging/Appx/mod.rs:106]
  - 570 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/Cryptography/Certificates/mod.rs:2491]
  - 571 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Rpc/mod.rs:3808]
  - 572 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/RemoteDesktop/mod.rs:86]
  - 574 > 512 [.cargo/vendor/half/README.md:2]
  - 575 > 512 [.cargo/vendor/rustfft/README.md:74]
  - 5820 > 512 [.cargo/vendor/bzip2-rs/tests/samplefiles/sample1.ref:595]
  - 583 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/MessageQueuing/mod.rs:48]
  - 585 > 512 [.cargo/vendor/base64/README.md:3]
  - 592 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/ExtensibleAuthenticationProtocol/mod.rs:20]
  - 592 > 512 [unit_tests/input/bytecode_sigs/api_files_7.cbc:6]
  - 593 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Devices/BiometricFramework/mod.rs:9]
  - 595 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Devices/DeviceAndDriverInstallation/mod.rs:757]
  - 595 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/Authorization/mod.rs:156]
  - 597 > 512 [.cargo/vendor/wasm-bindgen/guide/src/examples/synchronous-instantiation.md:7]
  - 601 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Devices/Display/mod.rs:89]
  - 607 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Graphics/Gdi/mod.rs:81]
  - 607 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/UI/WindowsAndMessaging/mod.rs:744]
  - 607 > 512 [clam-format:3]
  - 609 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Ole/mod.rs:77]
  - 617 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Registry/mod.rs:24]
  - 623 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/DirectoryServices/mod.rs:4]
  - 626 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/ApplicationInstallationAndServicing/mod.rs:38]
  - 629 > 512 [unit_tests/input/other_scanfiles/alz/bzip2.bin.alz:12]
  - 638 > 512 [libclamav/readdb.c:2560]
  - 639 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Storage/Vhd/mod.rs:14]
  - 641 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Networking/WinSock/mod.rs:63]
  - 643 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Diagnostics/Debug/mod.rs:279]
  - 650 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Devices/DeviceQuery/mod.rs:13]
  - 651 > 512 [.cargo/vendor/rustix/Cargo.toml.orig:55]
  - 653 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Storage/IscsiDisc/mod.rs:34]
  - 654 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Storage/FileSystem/mod.rs:96]
  - 659 > 512 [docs/man/clamscan.1.in:151]
  - 667 > 512 [.cargo/vendor/windows-sys/src/Windows/Wdk/System/IO/mod.rs:2]
  - 670 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Globalization/mod.rs:223]
  - 673 > 512 [docs/man/clamd.conf.5.in:376]
  - 6752 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.ole.doc.xor:3]
  - 677 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Services/mod.rs:20]
  - 684 > 512 [.cargo/vendor/pxfm/src/asinpi.rs:362]
  - 685 > 512 [.cargo/vendor/itertools-0.10.5/CHANGELOG.md:128]
  - 685 > 512 [.cargo/vendor/itertools/CHANGELOG.md:318]
  - 685 > 512 [.cargo/vendor/pxfm/src/exponents/exp2m1.rs:691]
  - 687 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Networking/WindowsWebServices/mod.rs:57]
  - 689 > 512 [.cargo/vendor/miniz_oxide/Readme.md:22]
  - 694 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Storage/Imapi/mod.rs:6]
  - 696 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.newc.cpio.xor:2]
  - 697 > 512 [.cargo/vendor/rustix/Cargo.toml:211]
  - 704 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Data/RightsManagement/mod.rs:74]
  - 704 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/NetworkManagement/IpHelper/mod.rs:223]
  - 710 > 512 [.cargo/vendor/rustc-hash/CODE_OF_CONDUCT.md:36]
  - 711 > 512 [.cargo/vendor/windows-core/readme.md:3]
  - 711 > 512 [.cargo/vendor/windows-sys/readme.md:3]
  - 713 > 512 [unit_tests/input/freshclam_testfiles/test-3.cdiff:5]
  - 721 > 512 [.cargo/vendor/stable_deref_trait/src/lib.rs:31]
  - 7218 > 512 [.cargo/vendor/regex-automata/tests/gen/dense/multi_pattern_v2_rev.littleendian.dfa:27]
  - 722 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/GroupPolicy/mod.rs:45]
  - 7221 > 512 [.cargo/vendor/regex-automata/tests/gen/dense/multi_pattern_v2_rev.bigendian.dfa:27]
  - 728 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_sparse_crash-dbb8172d3984e7e7d03f4b5f8bb86ecd1460eff9:1]
  - 732 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam-upack.exe.xor:6]
  - 744 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/System/Threading/mod.rs:91]
  - 749 > 512 [.cargo/vendor/unicode-ident/tests/fst/xid_start.fst:34]
  - 749 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.bin-be.cpio.xor:3]
  - 749 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.bin-le.cpio.xor:3]
  - 754 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/Cryptography/mod.rs:720]
  - 757 > 512 [.cargo/vendor/exr/LICENSE.md:20]
  - 772 > 512 [.cargo/vendor/arbitrary/CHANGELOG.md:341]
  - 776 > 512 [.cargo/vendor/regex-syntax/src/hir/translate.rs:3720]
  - 778 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_sparse_crash-c383ae07ec5e191422eadc492117439011816570:2]
  - 784 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/Authentication/Identity/mod.rs:7778]
  - 796 > 512 [.cargo/vendor/unicode-ident/tests/fst/xid_continue.fst:173]
  - 7987 > 512 [debian/clamav-freshclam.templates:30]
  - 802 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_sparse_crash-a1b839d899ced76d5d7d0f78f9edb7a421505838:1]
  - 805 > 512 [.cargo/vendor/minimal-lexical/tests/slow_tests.rs:292]
  - 813 > 512 [.cargo/vendor/windows-sys/src/Windows/Win32/Security/mod.rs:62]
  - 813 > 512 [common/optparser.c:393]
  - 8198 > 512 [unit_tests/input/htmlnorm_scanfiles/htmlnorm_buf.html:6]
  - 8239 > 512 [unit_tests/input/other_scanfiles/alz/uncompressed.bin.alz:2]
  - 8242 > 512 [unit_tests/input/htmlnorm_reffiles/encode.js.ref:2]
  - 8257 > 512 [unit_tests/input/htmlnorm_scanfiles/htmlnorm_encode.html:6]
  - 8257 > 512 [unit_tests/input/other_scanfiles/screnc_test:1]
  - 832 > 512 [unit_tests/check_jsnorm.c:296]
  - 833 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.exe.binhex.xor:1]
  - 835 > 512 [.cargo/vendor/windows-sys/src/Windows/Wdk/System/Registry/mod.rs:2]
  - 844 > 512 [.cargo/vendor/windows-sys/src/Windows/Wdk/System/SystemServices/mod.rs:693]
  - 8442 > 512 [unit_tests/input/htmlnorm_reffiles/encode.nocomment.ref:1]
  - 8883 > 512 [unit_tests/input/clamav_hdb_scanfiles/clam.exe.webapp-export.one.xor:123]
  - 918 > 512 [.cargo/vendor/onenote_parser/tests/samples/OneNote_RecycleBin/Open Notebook.onetoc2:12]
  - 918 > 512 [.cargo/vendor/onenote_parser/tests/samples/Open Notebook.onetoc2:10]
  - 922 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_sparse_crash-d07703ceb94b10dcd9e4acb809f2051420449e2b:1]
  - 924 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_sparse_crash-18cfc246f2ddfc3dfc92b0c7893178c7cf65efa9:1]
  - 933 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_sparse_crash-61fd8e3003bf9d99f6c1e5a8488727eefd234b98:1]
  - 934 > 512 [unit_tests/input/freshclam_testfiles/test-5.cvd:18]
  - 941 > 512 [.cargo/vendor/regex-automata/tests/fuzz/testdata/deserialize_sparse_crash-0da59c0434eaf35e5a6b470fa9244bb79c72b000:1]
  - 953 > 512 [.cargo/vendor/half/LICENSES/Apache-2.0.txt:41]
  - 953 > 512 [.cargo/vendor/widestring/LICENSES/Apache-2.0.txt:41]
  - 957 > 512 [.cargo/vendor/bytemuck/LICENSE-APACHE:34]
  - 988 > 512 [.cargo/vendor/chrono/src/offset/local/tz_info/timezone.rs:717]
- O source-contains-prebuilt-windows-binary
  - [unit_tests/input/pe_allmatch/test.exe] (override comment: The Windows binaries are packaged in clamav-testfiles as testcases for clamav)
- O source-is-missing
  - [unit_tests/input/htmlnorm_scanfiles/htmlnorm_buf.html] (override comment: These are actually the source form of a test file)
  - [unit_tests/input/htmlnorm_scanfiles/htmlnorm_encode.html] (override comment: These are actually the source form of a test file)
–
Package closes RC bug
- src:clamav:
  - #1143939 (Grave): clamav: CVE-2026-20339 CVE-2026-20345 CVE-2026-20346 CVE-2026-20347 CVE-2026-20348
–
Package is already in Debian
- The package uploader is not currently maintaining clamav in Debian
- Last upload was on the 2026-07-11

–

d/copyright is in DEP5 format

Upstream Contact:

clamav-devel@lists.clamav.net

Licenses:

LGPL-2.1 and BSD-3-clause, Apache-2.0-BSL-1.0, LGPL-2.1, Apache-2.0 with GPL exception, Apache-2.0-Expat, MPL-2.0, LZW, GPL-2, public-domain~1, GPL-3+ with Bison exception, nsis-bzip2, Expat, 0BSD-MIT-Apache-2.0-Zlib, BSD-3-clause, Apache-2.0-Expat or Zlib, GPL-2 with OpenSSL exception, Apache-2.0-Expat-LLVM-exception, Apache-2.0, 0BSD-MIT-Apache-2.0, ISC, GPL-2+, Zlib, BSD-2-clause, public-domain~3

Comments

No comments