{"id":182829,"date":"2026-08-11T04:54:30","date_gmt":"2026-08-11T02:54:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/clamav-1-5-4-i-1-4-6"},"modified":"2026-08-11T04:54:30","modified_gmt":"2026-08-11T02:54:31","slug":"clamav-1-5-4-i-1-4-6","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/clamav-1-5-4-i-1-4-6","title":{"rendered":"ClamAV 1.5.4 et 1.4.6","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23865\/original.jpg\">           <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/08\/b481964852b08c053e35852054a3949b.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23866\/original.jpg\">           <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/08\/7aa87c2eb8a1b4fbbbaa661b5c93c476.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                                              <noindex>          <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23865\/original.jpg\" class=\"active\"><\/a><\/noindex>                                                      <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23866\/original.jpg\"><\/a>                                             <a rel=\"nofollow\" id=\"memories_button\" href=\"#\" title=\"Suivre\"><i class=\"icon-bell\"><\/i><\/a><br \/>1                            <\/p>\n<p>Le 7 ao\u00fbt, des mises \u00e0 jour correctives du paquet antivirus libre ont \u00e9t\u00e9 publi\u00e9es <strong>ClamAV 1.5.4 et 1.4.6<\/strong>. Les nouvelles versions se concentrent principalement sur la s\u00e9curit\u00e9 : la branche actuelle 1.5 a corrig\u00e9 huit CVE, dont six ont \u00e9galement \u00e9t\u00e9 corrig\u00e9s dans la branche support\u00e9e 1.4. De plus, un probl\u00e8me dans clamd a \u00e9t\u00e9 r\u00e9solu, ce qui pouvait entra\u00eener la divulgation du contenu de la m\u00e9moire du processus.<\/p>\n<p>Dans <strong>ClamAV 1.5.4<\/strong> les vuln\u00e9rabilit\u00e9s suivantes ont \u00e9t\u00e9 corrig\u00e9es :<\/p>\n<ul>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20337\">CVE-2026-20337<\/a> \u2014 une erreur de calcul de la taille du r\u00e9pertoire ZIP pouvait entra\u00eener une \u00e9criture au-del\u00e0 de la m\u00e9moire allou\u00e9e dans le tampon lors de l'indexation des en-t\u00eates de fichiers locaux. Sont vuln\u00e9rables les versions ClamAV 1.5.0 \u00e0 1.5.3.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20338\">CVE-2026-20338<\/a> \u2014 une erreur de gestion de la m\u00e9moire lors de la fusion des enregistrements de r\u00e9pertoire ZIP pouvait entra\u00eener une lib\u00e9ration incorrecte de la m\u00e9moire lors du traitement d'une archive sp\u00e9cialement con\u00e7ue. Cela ne concernait que la branche 1.5.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20345\">CVE-2026-20345<\/a> \u2014 une erreur d'indexation lors de la conversion des noms de partitions GPT permettait de lire ou d'\u00e9crire des donn\u00e9es au-del\u00e0 de la structure de partition situ\u00e9e dans la pile. Le probl\u00e8me \u00e9tait pr\u00e9sent depuis ClamAV 0.98.2.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20339\">CVE-2026-20339<\/a> \u2014 un d\u00e9bordement d'entier dans le d\u00e9compresseur PESpin pouvait entra\u00eener l'allocation d'un tampon trop petit avec une \u00e9criture au-del\u00e0 de celui-ci lors de la r\u00e9cup\u00e9ration d'un fichier PE. La vuln\u00e9rabilit\u00e9 existait depuis ClamAV 0.90.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20346\">CVE-2026-20346<\/a> \u2014 un d\u00e9bordement d'entier vers le bas dans l'analyseur PDF pouvait provoquer une fermeture anormale du processus lors de la lecture d'une cha\u00eene hexad\u00e9cimale incorrecte.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20347\">CVE-2026-20347<\/a> \u2014 un d\u00e9bordement d'entier et un comportement ind\u00e9fini dans l'analyseur Mach-O pouvaient entra\u00eener l'arr\u00eat du scanner lors de la v\u00e9rification d'un fichier sp\u00e9cialement con\u00e7u.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20348\">CVE-2026-20348<\/a> \u2014 des erreurs de v\u00e9rification de taille dans l'analyseur XAR pouvaient entra\u00eener une allocation excessive de m\u00e9moire ou un d\u00e9passement des limites de num\u00e9risation lors de la d\u00e9compression d'une table de contenu corrompue.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-8088\">CVE-2025-8088<\/a> \u2014 un correctif en amont a \u00e9t\u00e9 int\u00e9gr\u00e9 dans la biblioth\u00e8que UnRAR livr\u00e9e avec ClamAV. Sur Windows, les s\u00e9parateurs de chemin dans les noms de flux alternatifs NTFS pouvaient permettre d'extraire des donn\u00e9es en dehors du r\u00e9pertoire temporaire de ClamAV.<\/li>\n<\/ul>\n<p> <noindex><\/p>\n<p>Dans <strong>ClamAV 1.4.6<\/strong> six des vuln\u00e9rabilit\u00e9s list\u00e9es ont \u00e9t\u00e9 corrig\u00e9es : <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20345\">CVE-2026-20345<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20339\">CVE-2026-20339<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20346\">CVE-2026-20346<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20347\">CVE-2026-20347<\/a>, <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20348\">CVE-2026-20348<\/a> et <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-8088\">CVE-2025-8088<\/a>. Deux probl\u00e8mes du gestionnaire ZIP \u2014 <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20337\">CVE-2026-20337<\/a> et <a rel=\"nofollow\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-20338\">CVE-2026-20338<\/a> \u2014 concernent le code de la branche 1.5 et ne sont donc pas pertinents pour 1.4.<\/p>\n<p><\/noindex> <\/p>\n<p>Les d\u00e9veloppeurs ont \u00e9galement r\u00e9solu un ancien probl\u00e8me de s\u00e9curit\u00e9 des threads de la commande <strong>clamd STATISTIQUES<\/strong>. Lors de l'ex\u00e9cution simultan\u00e9e d'analyses et de requ\u00eates de statistiques, une course pourrait conduire \u00e0 la divulgation de donn\u00e9es de la m\u00e9moire du processus ou \u00e0 l'arr\u00eat du d\u00e9mon. Cette erreur \u00e9tait pr\u00e9sente dans ClamAV depuis la version 0.95. Le traitement des \u00e9critures partielles dans la socket lors de l'envoi de grandes r\u00e9ponses STATS a \u00e9galement \u00e9t\u00e9 corrig\u00e9. Cette correction est incluse dans les deux nouvelles versions.<\/p>\n<p>Pour FreeBSD, le fonctionnement s\u00e9curis\u00e9 des op\u00e9rations de d\u00e9placement en quarantaine et de suppression de fichiers est \u00e0 nouveau op\u00e9rationnel. Dans la version 1.5.4, une fuite de contexte OpenSSL lors de l'utilisation de fonctions de hachage obsol\u00e8tes dans certaines configurations a \u00e9t\u00e9 corrig\u00e9e, en particulier lorsque le fournisseur standard est indisponible dans un environnement avec FIPS. Dans les deux branches, la d\u00e9pendance Rust crossbeam-epoch a \u00e9t\u00e9 mise \u00e0 jour pour \u00e9liminer l'avertissement. <strong>RUSTSEC-2026-0204<\/strong>.<\/p>\n<p>ClamAV est un package antivirus libre et multiplateforme et un ensemble de biblioth\u00e8ques pour la d\u00e9tection de logiciels malveillants, largement utilis\u00e9 sur des serveurs Linux et de messagerie. Le projet est distribu\u00e9 sous la licence <strong>GNU GPLv2<\/strong>.<\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18354803\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.5.4 \u0438 1.4.6. \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0434\u0435\u043b\u0435\u043d\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 1.5 \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0432\u043e\u0441\u0435\u043c\u044c CVE, \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 1.4. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 clamd, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u0412 ClamAV 1.5.4 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182829","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Emin Berklin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/clamav-1-5-4-i-1-4-6\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ClamAV 1.5.4 \u0438 1.4.6 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/clamav-1-5-4-i-1-4-6\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-11T02:54:31+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-11T02:54:31+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ClamAV 1.5.4 et 1.4.6 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/clamav-1-5-4-i-1-4-6","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ClamAV 1.5.4 \u0438 1.4.6 | ProHoster","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/clamav-1-5-4-i-1-4-6","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T02:54:31+00:00","article:modified_time":"2026-08-11T02:54:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182829","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-11 06:43:48","updated":"2026-08-11 06:43:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/182829","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=182829"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/182829\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=182829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=182829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=182829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}