BSD Ports

Vulnerable: version 1.4.6nb1 is affected by 1 known vulnerability. See below.

security/clamav 1.4.6nb1 NetBSD

Anti-virus toolkit

System
NetBSD
Repository
pkgsrc
Last update
Commit
7b5a3977f9
License
gnu-gpl-v2
Categories
security
Package size
46505.5 KiB, 406062.4 KiB installed

Description

Clam AntiVirus is an anti-virus toolkit written from scratch. It is licensed under GNU GPL2 and uses the virus database from OpenAntiVirus, which is an another free anti-virus project. In contrast to OpenAntiVirus (which is written in Java), Clam AntiVirus is written entirely in C and its database is KEPT UP TO DATE. It also detects polymorphic viruses as well.

In the other systems

SystemPortVersion
NetBSDsecurity/clamav1.4.6nb1
FreeBSDsecurity/clamav1.5.4_2,1
OpenBSDsecurity/clamav1.5.4
DragonFlysecurity/clamav1.4.2_1,1
MidnightBSDsecurity/clamav1.5.4_1,1
HardenedBSDsecurity/clamav1.5.4_1,1
GhostBSDsecurity/clamav1.5.4_1,1
OPNsensesecurity/clamav1.5.2_3,1

Install

Binary package:

pkgin install clamav

From pkgsrc:

cd /usr/pkgsrc/security/clamav && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_641.4.6nb1
NetBSD 10.1 aarch641.4.6
SmartOS / illumos x86_641.4.6nb3
macOS 15 arm641.4.6nb3

Dependencies

Run dependencies 6

Known vulnerabilities 1

Commit history 5

DateCommitCreditsLog message
7b5a3977f9 wiz *: recursive bump for pcre2 10.49
204ac6b2b7 tnn *: revbump for pcre2 symbol versioning change
5e4aea17e2 wiz *: recursive bump for pcre2 10.48
34b4786e0b taca security/clamav: update to 1.4.6
1.4.6 (2026-08-07) ClamAV 1.4.6 is a patch release with the following fixes: - [CVE-2026-20345](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20345): Fixed an indexing error while converting GPT partition names that could read or write beyond a stack-allocated partition entry. This issue affects ClamAV 0.98.2 through 1.5.3. The fix is included in 1.4.6 and 1.5.4. Thank you to Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen of Tencent Xuanwu Lab for identifying this issue. - [CVE-2026-20339](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20339): Fixed an integer overflow in the PESpin unpacker that could allocate an undersized buffer and then write beyond it while rebuilding a PE file. This issue affects ClamAV 0.90 through 1.5.3. …
af9cffa513 taca lang/clamav: update to 1.4.5
ClamAV 1.4.5 (2026-07-01) ClamAV 1.4.5 is a patch release with the following fixes: * CVE-2026-20217: Fixed a bug in the PESpin unpacker cleanup path that could free pointers into the scanned file buffer and crash the scanner. <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20217> This issue affects ClamAV 1.5.2, 1.4.4, and all prior versions as far back as 2005. The fix is included in 1.5.3 and 1.4.5. Thank you to Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen of Tencent Xuanwu Lab for identifying this issue. * CVE-2026-20213: Fixed an integer overflow in PE rebuild size calculations that could be reached through a malformed Aspack-packed PE file and lead to a heap buffer overflow write. …