File _patchinfo of Package patchinfo.38933

<patchinfo incident="38933">
  <issue tracker="bnc" id="1243565">[SUSE:SLFO:Main] clamav fails to build on s390x</issue>
  <issue tracker="cve" id="2025-20234"/>
  <issue tracker="cve" id="2025-20260"/>
  <issue tracker="bnc" id="1245055">VUL-0: CVE-2025-20234: clamav: A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</issue>
  <issue tracker="bnc" id="1245054">VUL-0: CVE-2025-20260: clamav: ClamAV PDF Scanning Buffer Overflow Vulnerability</issue>
  <packager>rmax</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for clamav</summary>
  <description>This update for clamav fixes the following issues:

ClamAV version 1.4.3:

- CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability (bsc#1245054).
- CVE-2025-20234: Vulnerability in Universal Disk Format (UDF) processing (bsc#1245055).

Other bugfixes:

- Fix a race condition between the mockup servers started by different test cases in freshclam_test.py (bsc#1243565)
</description>
</patchinfo>
openSUSE Build Service is sponsored by