Advisories » MGASA-2026-0271

Updated clamav packages fix security vulnerabilities

Publication date: 19 Jul 2026
Modification date: 19 Jul 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-20213 , CVE-2026-20214 , CVE-2026-20215 , CVE-2026-20216 , CVE-2026-20217 , CVE-2026-20243 , CVE-2026-20244

Description

The updated packages fix security vulnerabilities:
PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability.
(CVE-2026-20213)
FSG File Format Processing Out-of-Bounds Memory Corruption
Vulnerability. (CVE-2026-20214)
7Zip File Format Processing Out-of-Bounds Memory Corruption
Vulnerability. (CVE-2026-20215)
InstallShield File Format Processing Resource Exhaustion Vulnerability.
(CVE-2026-20216)
PESpin File Format Processing Out-of-Bounds Memory Corruption
Vulnerability. (CVE-2026-20217)
ALZ Archive Processing Denial of Service Vulnerability. (CVE-2026-20243)
DMG File Processing Denial of Service Vulnerability. (CVE-2026-20244)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35841
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N4HZVOZRQX4MIQVALYKDCGBZUHHVH4QN/
• https://github.com/Cisco-Talos/clamav/releases/tag/clamav-1.4.5
• https://www.cve.org/CVERecord?id=CVE-2026-20213
• https://www.cve.org/CVERecord?id=CVE-2026-20214
• https://www.cve.org/CVERecord?id=CVE-2026-20215
• https://www.cve.org/CVERecord?id=CVE-2026-20216
• https://www.cve.org/CVERecord?id=CVE-2026-20217
• https://www.cve.org/CVERecord?id=CVE-2026-20243
• https://www.cve.org/CVERecord?id=CVE-2026-20244

SRPMS

10/core

• clamav-1.4.5-1.mga10