USN-7615-1: ClamAV vulnerabilities

USN-7615-1: ClamAV vulnerabilities

Publication date:2 July 2025
Overview:Several security issues were fixed in ClamAV.

Packages
clamav - Anti-virus utility for Unix

Details
It was discovered that ClamAV incorrectly handled scanning UDF files. A
remote attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service. (CVE-2025-20234)

It was discovered that ClamAV incorrectly handled scanning PDF files. A
remote attacker could use this issue to cause ClamAV to crash, resulting
in a denial of service, or possibly execute arbitrary code.
(CVE-2025-20260)

Update instructions

• 25.04 plucky clamav – 1.4.3+dfsg-0ubuntu0.25.04.1
• 24.10 oracular clamav – 1.4.3+dfsg-0ubuntu0.24.10.1
• 24.04 noble clamav – 1.4.3+dfsg-0ubuntu0.24.04.1
• 22.04 jammy clamav – 1.4.3+dfsg-0ubuntu0.22.04.1