OPENSUSE-SU-2026:21831-1
Vulnerability from csaf_opensuse - Published: 2026-09-11 12:01 - Updated: 2026-09-17 17:44Summary
Security update for clamav
Severity
Important
Notes
Title of the patch: Security update for clamav
Description of the patch: This update for clamav fixes the following issues:
- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).
- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).
- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write
(bsc#1274599).
- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).
- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).
- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash
(bsc#1274602).
- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass
(bsc#1274603).
- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook
directory (bsc#1271922).
- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's
temporary scan directory on Windows.
Changes for clamav:
Update to 1.5.4:
* Fixed thread-safety issues in the clamd STATS command that could disclose
process memory or crash the daemon while scans and STATS requests run
concurrently. Also fixed partial socket-write handling used for large STATS
responses.
* FreeBSD: Restored support for safe quarantine move and remove actions while
preserving protection against source-path replacement races.
* Fixed an OpenSSL library-context leak in legacy hashing helpers when a
requested message digest cannot be fetched, such as when the default
provider is unavailable in a FIPS-enabled environment.
* Upgraded the Rust crossbeam-epoch dependency to resolve the
RUSTSEC-2026-0204 advisory.
Patchnames: openSUSE-Leap-16.0-1660
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
important
7.5 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
important
7.5 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
important
7.5 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
important
7.5 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
important
7.5 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
important
7.5 (High)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
important
4.4 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-8088
Threats
Impact
moderate
References
36 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for clamav",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV\u0027s\n temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1660",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21831-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1271922",
"url": "https://bugzilla.suse.com/1271922"
},
{
"category": "self",
"summary": "SUSE Bug 1274597",
"url": "https://bugzilla.suse.com/1274597"
},
{
"category": "self",
"summary": "SUSE Bug 1274598",
"url": "https://bugzilla.suse.com/1274598"
},
{
"category": "self",
"summary": "SUSE Bug 1274599",
"url": "https://bugzilla.suse.com/1274599"
},
{
"category": "self",
"summary": "SUSE Bug 1274600",
"url": "https://bugzilla.suse.com/1274600"
},
{
"category": "self",
"summary": "SUSE Bug 1274601",
"url": "https://bugzilla.suse.com/1274601"
},
{
"category": "self",
"summary": "SUSE Bug 1274602",
"url": "https://bugzilla.suse.com/1274602"
},
{
"category": "self",
"summary": "SUSE Bug 1274603",
"url": "https://bugzilla.suse.com/1274603"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-8088 page",
"url": "https://www.suse.com/security/cve/CVE-2025-8088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20337 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20337/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20338 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20339 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20339/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20345 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20346 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20346/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20347 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-20348 page",
"url": "https://www.suse.com/security/cve/CVE-2026-20348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46671 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46671/"
}
],
"title": "Security update for clamav",
"tracking": {
"current_release_date": "2026-09-17T17:44:24Z",
"generator": {
"date": "2026-09-11T12:01:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21831-1",
"initial_release_date": "2026-09-11T12:01:10Z",
"revision_history": [
{
"date": "2026-09-11T12:01:10Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-11T12:01:10Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:47:54Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:48:49Z",
"number": "4",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:44:24Z",
"number": "5",
"summary": "unknown changes"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "clamav-0:1.5.4-160000.1.1.aarch64",
"product": {
"name": "clamav-0:1.5.4-160000.1.1.aarch64",
"product_id": "clamav-0:1.5.4-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav@1.5.4-160000.1.1?arch=aarch64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-devel-0:1.5.4-160000.1.1.aarch64",
"product": {
"name": "clamav-devel-0:1.5.4-160000.1.1.aarch64",
"product_id": "clamav-devel-0:1.5.4-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-devel@1.5.4-160000.1.1?arch=aarch64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-milter-0:1.5.4-160000.1.1.aarch64",
"product": {
"name": "clamav-milter-0:1.5.4-160000.1.1.aarch64",
"product_id": "clamav-milter-0:1.5.4-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-milter@1.5.4-160000.1.1?arch=aarch64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamav12-0:1.5.4-160000.1.1.aarch64",
"product": {
"name": "libclamav12-0:1.5.4-160000.1.1.aarch64",
"product_id": "libclamav12-0:1.5.4-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamav12@1.5.4-160000.1.1?arch=aarch64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclammspack0-0:1.5.4-160000.1.1.aarch64",
"product": {
"name": "libclammspack0-0:1.5.4-160000.1.1.aarch64",
"product_id": "libclammspack0-0:1.5.4-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclammspack0@1.5.4-160000.1.1?arch=aarch64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"product": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"product_id": "libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamunrar12@1.5.4-160000.1.1?arch=aarch64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"product": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"product_id": "libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreshclam4@1.5.4-160000.1.1?arch=aarch64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"product": {
"name": "clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"product_id": "clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-docs-html@1.5.4-160000.1.1?arch=noarch\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-0:1.5.4-160000.1.1.ppc64le",
"product": {
"name": "clamav-0:1.5.4-160000.1.1.ppc64le",
"product_id": "clamav-0:1.5.4-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav@1.5.4-160000.1.1?arch=ppc64le\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"product": {
"name": "clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"product_id": "clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-devel@1.5.4-160000.1.1?arch=ppc64le\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"product": {
"name": "clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"product_id": "clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-milter@1.5.4-160000.1.1?arch=ppc64le\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamav12-0:1.5.4-160000.1.1.ppc64le",
"product": {
"name": "libclamav12-0:1.5.4-160000.1.1.ppc64le",
"product_id": "libclamav12-0:1.5.4-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamav12@1.5.4-160000.1.1?arch=ppc64le\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"product": {
"name": "libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"product_id": "libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclammspack0@1.5.4-160000.1.1?arch=ppc64le\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"product": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"product_id": "libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamunrar12@1.5.4-160000.1.1?arch=ppc64le\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"product": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"product_id": "libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreshclam4@1.5.4-160000.1.1?arch=ppc64le\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-0:1.5.4-160000.1.1.s390x",
"product": {
"name": "clamav-0:1.5.4-160000.1.1.s390x",
"product_id": "clamav-0:1.5.4-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav@1.5.4-160000.1.1?arch=s390x\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-devel-0:1.5.4-160000.1.1.s390x",
"product": {
"name": "clamav-devel-0:1.5.4-160000.1.1.s390x",
"product_id": "clamav-devel-0:1.5.4-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-devel@1.5.4-160000.1.1?arch=s390x\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-milter-0:1.5.4-160000.1.1.s390x",
"product": {
"name": "clamav-milter-0:1.5.4-160000.1.1.s390x",
"product_id": "clamav-milter-0:1.5.4-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-milter@1.5.4-160000.1.1?arch=s390x\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamav12-0:1.5.4-160000.1.1.s390x",
"product": {
"name": "libclamav12-0:1.5.4-160000.1.1.s390x",
"product_id": "libclamav12-0:1.5.4-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamav12@1.5.4-160000.1.1?arch=s390x\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclammspack0-0:1.5.4-160000.1.1.s390x",
"product": {
"name": "libclammspack0-0:1.5.4-160000.1.1.s390x",
"product_id": "libclammspack0-0:1.5.4-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclammspack0@1.5.4-160000.1.1?arch=s390x\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamunrar12-0:1.5.4-160000.1.1.s390x",
"product": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.s390x",
"product_id": "libclamunrar12-0:1.5.4-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamunrar12@1.5.4-160000.1.1?arch=s390x\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libfreshclam4-0:1.5.4-160000.1.1.s390x",
"product": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.s390x",
"product_id": "libfreshclam4-0:1.5.4-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreshclam4@1.5.4-160000.1.1?arch=s390x\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "clamav-0:1.5.4-160000.1.1.x86_64",
"product": {
"name": "clamav-0:1.5.4-160000.1.1.x86_64",
"product_id": "clamav-0:1.5.4-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav@1.5.4-160000.1.1?arch=x86_64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-devel-0:1.5.4-160000.1.1.x86_64",
"product": {
"name": "clamav-devel-0:1.5.4-160000.1.1.x86_64",
"product_id": "clamav-devel-0:1.5.4-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-devel@1.5.4-160000.1.1?arch=x86_64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "clamav-milter-0:1.5.4-160000.1.1.x86_64",
"product": {
"name": "clamav-milter-0:1.5.4-160000.1.1.x86_64",
"product_id": "clamav-milter-0:1.5.4-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/clamav-milter@1.5.4-160000.1.1?arch=x86_64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamav12-0:1.5.4-160000.1.1.x86_64",
"product": {
"name": "libclamav12-0:1.5.4-160000.1.1.x86_64",
"product_id": "libclamav12-0:1.5.4-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamav12@1.5.4-160000.1.1?arch=x86_64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclammspack0-0:1.5.4-160000.1.1.x86_64",
"product": {
"name": "libclammspack0-0:1.5.4-160000.1.1.x86_64",
"product_id": "libclammspack0-0:1.5.4-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclammspack0@1.5.4-160000.1.1?arch=x86_64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"product": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"product_id": "libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libclamunrar12@1.5.4-160000.1.1?arch=x86_64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libfreshclam4-0:1.5.4-160000.1.1.x86_64",
"product": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.x86_64",
"product_id": "libfreshclam4-0:1.5.4-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:clamav:clamav:1.5.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreshclam4@1.5.4-160000.1.1?arch=x86_64\u0026upstream=clamav-0:1.5.4-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-0:1.5.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64"
},
"product_reference": "clamav-0:1.5.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-0:1.5.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le"
},
"product_reference": "clamav-0:1.5.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-0:1.5.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x"
},
"product_reference": "clamav-0:1.5.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-0:1.5.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64"
},
"product_reference": "clamav-0:1.5.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-0:1.5.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64"
},
"product_reference": "clamav-devel-0:1.5.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-0:1.5.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le"
},
"product_reference": "clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-0:1.5.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x"
},
"product_reference": "clamav-devel-0:1.5.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-devel-0:1.5.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64"
},
"product_reference": "clamav-devel-0:1.5.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-docs-html-0:1.5.4-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch"
},
"product_reference": "clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-0:1.5.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64"
},
"product_reference": "clamav-milter-0:1.5.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-0:1.5.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le"
},
"product_reference": "clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-0:1.5.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x"
},
"product_reference": "clamav-milter-0:1.5.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clamav-milter-0:1.5.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64"
},
"product_reference": "clamav-milter-0:1.5.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-0:1.5.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64"
},
"product_reference": "libclamav12-0:1.5.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-0:1.5.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le"
},
"product_reference": "libclamav12-0:1.5.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-0:1.5.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x"
},
"product_reference": "libclamav12-0:1.5.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamav12-0:1.5.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64"
},
"product_reference": "libclamav12-0:1.5.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-0:1.5.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64"
},
"product_reference": "libclammspack0-0:1.5.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-0:1.5.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le"
},
"product_reference": "libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-0:1.5.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x"
},
"product_reference": "libclammspack0-0:1.5.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclammspack0-0:1.5.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64"
},
"product_reference": "libclammspack0-0:1.5.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64"
},
"product_reference": "libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le"
},
"product_reference": "libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x"
},
"product_reference": "libclamunrar12-0:1.5.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libclamunrar12-0:1.5.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64"
},
"product_reference": "libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64"
},
"product_reference": "libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le"
},
"product_reference": "libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x"
},
"product_reference": "libfreshclam4-0:1.5.4-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreshclam4-0:1.5.4-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
},
"product_reference": "libfreshclam4-0:1.5.4-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-8088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-8088"
}
],
"notes": [
{
"category": "general",
"text": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Ko\u0161in\u00e1r, and Peter Str\u00fd\u010dek\n from ESET.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-8088",
"url": "https://www.suse.com/security/cve/CVE-2025-8088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2025-8088"
},
{
"cve": "CVE-2026-20337",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20337"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20337",
"url": "https://www.suse.com/security/cve/CVE-2026-20337"
},
{
"category": "external",
"summary": "SUSE Bug 1274597 for CVE-2026-20337",
"url": "https://bugzilla.suse.com/1274597"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2026-20337"
},
{
"cve": "CVE-2026-20338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20338"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.\r\n\r\nThis vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate as a result of a memory double-free, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20338",
"url": "https://www.suse.com/security/cve/CVE-2026-20338"
},
{
"category": "external",
"summary": "SUSE Bug 1274598 for CVE-2026-20338",
"url": "https://bugzilla.suse.com/1274598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2026-20338"
},
{
"cve": "CVE-2026-20339",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20339"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20339",
"url": "https://www.suse.com/security/cve/CVE-2026-20339"
},
{
"category": "external",
"summary": "SUSE Bug 1274599 for CVE-2026-20339",
"url": "https://bugzilla.suse.com/1274599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2026-20339"
},
{
"cve": "CVE-2026-20345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20345"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20345",
"url": "https://www.suse.com/security/cve/CVE-2026-20345"
},
{
"category": "external",
"summary": "SUSE Bug 1274600 for CVE-2026-20345",
"url": "https://bugzilla.suse.com/1274600"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2026-20345"
},
{
"cve": "CVE-2026-20346",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20346"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PDF files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20346",
"url": "https://www.suse.com/security/cve/CVE-2026-20346"
},
{
"category": "external",
"summary": "SUSE Bug 1274601 for CVE-2026-20346",
"url": "https://bugzilla.suse.com/1274601"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2026-20346"
},
{
"cve": "CVE-2026-20347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20347"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20347",
"url": "https://www.suse.com/security/cve/CVE-2026-20347"
},
{
"category": "external",
"summary": "SUSE Bug 1274602 for CVE-2026-20347",
"url": "https://bugzilla.suse.com/1274602"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2026-20347"
},
{
"cve": "CVE-2026-20348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-20348"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in XAR files during scanning. An attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-20348",
"url": "https://www.suse.com/security/cve/CVE-2026-20348"
},
{
"category": "external",
"summary": "SUSE Bug 1274603 for CVE-2026-20348",
"url": "https://bugzilla.suse.com/1274603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "important"
}
],
"title": "CVE-2026-20348"
},
{
"cve": "CVE-2026-46671",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46671"
}
],
"notes": [
{
"category": "general",
"text": "Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted `.onetoc2` table-of-contents file can cause `Parser::parse_notebook` to open arbitrary files on the host filesystem outside the notebook\u0027s directory. The parser reads entry names listed inside the `.onetoc2` and joins them against the notebook\u0027s base directory without validating that they are relative paths confined to that directory. The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser\u0027s return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible. Anyone using `onenote_parser` to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk. The issue is fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook\u0027s base directory. For users who cannot upgrade to 1.1.1, only call `Parser::parse_notebook` on `.onetoc2` files from trusted sources. Alternatively, use `Parser::parse_section` / `Parser::parse_section_buffer` on individual .one files, which do not perform the directory walk.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46671",
"url": "https://www.suse.com/security/cve/CVE-2026-46671"
},
{
"category": "external",
"summary": "SUSE Bug 1271922 for CVE-2026-46671",
"url": "https://bugzilla.suse.com/1271922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-devel-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:clamav-docs-html-0:1.5.4-160000.1.1.noarch",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:clamav-milter-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamav12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclammspack0-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libclamunrar12-0:1.5.4-160000.1.1.x86_64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.aarch64",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.s390x",
"openSUSE Leap 16.0:libfreshclam4-0:1.5.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-11T12:01:10Z",
"details": "moderate"
}
],
"title": "CVE-2026-46671"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…