Mageia alert MGASA-2026-0271 (clamav)

From:
             
 
Mageia Updates <updates-announce@ml.mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2026-0271: Updated clamav packages fix security vulnerabilities
Date:
             
 
Sun, 19 Jul 2026 08:29:59 +0200
Message-ID:
             
 
<20260719062959.6B24E9F9D9@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2026-0271 - Updated clamav packages fix security vulnerabilities

Publication date: 19 Jul 2026
URL: https://advisories.mageia.org/MGASA-2026-0271.html
Type: security
Affected Mageia releases: 10
CVE: CVE-2026-20213,
     CVE-2026-20214,
     CVE-2026-20215,
     CVE-2026-20216,
     CVE-2026-20217,
     CVE-2026-20243,
     CVE-2026-20244

Description:
The updated packages fix security vulnerabilities:
PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability.
(CVE-2026-20213)
FSG File Format Processing Out-of-Bounds Memory Corruption
Vulnerability. (CVE-2026-20214)
7Zip File Format Processing Out-of-Bounds Memory Corruption
Vulnerability. (CVE-2026-20215)
InstallShield File Format Processing Resource Exhaustion Vulnerability.
(CVE-2026-20216)
PESpin File Format Processing Out-of-Bounds Memory Corruption
Vulnerability. (CVE-2026-20217)
ALZ Archive Processing Denial of Service Vulnerability. (CVE-2026-20243)
DMG File Processing Denial of Service Vulnerability. (CVE-2026-20244)

References:
- https://bugs.mageia.org/show_bug.cgi?id=35841
-
https://lists.fedoraproject.org/archives/list/package-ann...
- https://github.com/Cisco-Talos/clamav/releases/tag/clamav...
- https://www.cve.org/CVERecord?id=CVE-2026-20213
- https://www.cve.org/CVERecord?id=CVE-2026-20214
- https://www.cve.org/CVERecord?id=CVE-2026-20215
- https://www.cve.org/CVERecord?id=CVE-2026-20216
- https://www.cve.org/CVERecord?id=CVE-2026-20217
- https://www.cve.org/CVERecord?id=CVE-2026-20243
- https://www.cve.org/CVERecord?id=CVE-2026-20244

SRPMS:
- 10/core/clamav-1.4.5-1.mga10