[Midnightbsd-cvs] [MidnightBSD/mports] 72d0ce: security/clamav-lts: update to 1.4.6 (#696)

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 72d0ce0872a15212a22f5a4cf4f73401896e0e84
      https://github.com/MidnightBSD/mports/commit/72d0ce0872a15212a22f5a4cf4f73401896e0e84
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-07 (Fri, 07 Aug 2026)

  Changed paths:
    M security/clamav-lts/Makefile
    M security/clamav-lts/distinfo
    M security/clamav-lts/pkg-plist

  Log Message:
  -----------
  security/clamav-lts: update to 1.4.6 (#696)

## Summary

- update ClamAV LTS from 1.4.4 to 1.4.6
- regenerate distinfo
- update generated documentation plist entries
- address CVE-2026-20339, CVE-2026-20345, CVE-2026-20346,
CVE-2026-20347, CVE-2026-20348, and CVE-2025-8088

Upstream advisory:
https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html

## Validation

- `bmake makesum`
- `bmake patch`
- `bmake check-license`
- `bmake`
- `bmake fake`
- `bmake package`
- package created: `clamav-lts-1.4.6,1.mport`
- `portlint -C`: 0 fatal errors, 5 pre-existing warnings
- test-enabled build: 4 of 6 CTest suites pass

The `libclamav` and `clamd` test suites resolve the installed
regular-release ClamAV 1.5.2 library and fail with an explicit `ENGINE
VERSION MISMATCH: 1.5.2 != 1.4.6`. The remaining suites
(`libclamav_rust`, `clamscan`, `freshclam`, and `sigtool`) pass. No
tests were disabled.

The libclamav and libfreshclam shared-library versions are unchanged, so
dependent port revisions do not need bumps.

## Summary by Sourcery

Update the clamav-lts port to ClamAV 1.4.6 to incorporate upstream
security fixes and refresh generated packaging metadata.

Bug Fixes:
- Incorporate upstream ClamAV 1.4.6 security patches addressing multiple
CVEs in the LTS port.

Enhancements:
- Regenerate distinfo and update generated plist entries to match the
new ClamAV 1.4.6 release.

Build:
- Refresh port checksums and packaging lists for the clamav-lts 1.4.6
update.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications