{"id":"CLSA-2025-1756409595","summary":"clamav: Fix of 4 CVEs","details":"- Update to 1.4.3 LTS\n- CVE-2025-20260: Fixed a possible buffer overflow write bug in\n  the PDF file parser\n- CVE-2025-20234: Fixed a possible buffer overflow read bug in\n  the UDF file parser\n- CVE-2025-20128: Fixed a possible buffer overflow read bug in\n  the OLE2 file parser\n- CVE-2024-20506: Changed the logging module to disable following\n  symlinks on Linux and Unix systems so as to prevent an attacker\n  with existing access to the 'clamd' or 'freshclam' services from\n  using a symlink to corrupt system files","modified":"2026-05-27T11:32:48.097297320Z","published":"2025-08-28T19:33:18Z","upstream":["CVE-2024-20506","CVE-2025-20128","CVE-2025-20234","CVE-2025-20260"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1756409595.html"}],"affected":[{"package":{"name":"clamav","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamav-data","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav-data?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamav-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamav-doc","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav-doc?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamav-filesystem","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav-filesystem?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamav-freshclam","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav-freshclam?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamav-lib","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav-lib?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamav-milter","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamav-milter?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}},{"package":{"name":"clamd","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/clamd?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.3-1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409595.json"}}],"schema_version":"1.7.5"}