From adelia.mendes at tce.am.gov.br  Sat Nov  1 00:36:49 2014
From: adelia.mendes at tce.am.gov.br (Ruth Horwitz)
Date: Fri, 31 Oct 2014 20:36:49 -0400 (AMT)
Subject: [Pkg-clamav-devel] Congratulations
In-Reply-To: <893936475.1548263.1414802183170.JavaMail.root@tce.am.gov.br>
Message-ID: <621019642.1548322.1414802209074.JavaMail.root@tce.am.gov.br>



Dear E-mail Account User,

After a random automated selection of email addresses over the Internet, 
your email emerged as one of our special winners to receive ?3,252,590.00 
and is attached to the following details: 
FILE CATEGORY - LOTTTO-ENGLAND/01/2014 
Ticket No: 13/299 
Reference Number: 89,DW,83/LOTTO-LUCKY5 
To confirm the authenticity and validity of your winnings as well as to 
commence receipts of your entitlement, you MUST FORWARD a copy of this announcement as well as your

FULL NAMES - 
VALID MOBILE/CELL NO. - 
COUNTRY OF RESIDENCE - 
to our Winnings Director via contact information below:

Mr.Michael Thompson, 
Winnings Director, 
Automated Winnings Department, 
Email: michael_wd at foxmail.com

Yours faithfully, 
Ruth Horwitz, 
Automated Winnings Coordinator, 
Automated Winnings Department 
Email: rhorwitz984 at gmail.com


From debian at kitterman.com  Sun Nov  2 05:10:52 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Sun, 02 Nov 2014 01:10:52 -0400
Subject: [Pkg-clamav-devel] Bug#767718: unblock: clamtk/5.11-1
Message-ID: <20141102051052.15495.8524.reportbug@Scott-Latitude-E6320>

Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock

Please unblock package clamtk

This new upstream version includes one important bug fix to properly escape
the filename used in the right-click menu with Nautilus.  It also provides
improved documentation and updated translations.

The simplified signature updating UI and Update Assistant are improvements it
would be nice to get in.  I particularly like that the code base gets smaller.
Less to go wrong.

I have the package ready to upload, but I'd like a pre-review so I don't block
up unstable with this if it's not appropriate for Jessie.

unblock clamtk/5.11-1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: clamtk_update
Type: text/x-diff
Size: 66019 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141102/3d56476a/attachment-0001.diff>

From ftpmaster at ftp-master.debian.org  Sun Nov  2 13:56:15 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 02 Nov 2014 13:56:15 +0000
Subject: [Pkg-clamav-devel] Processing of clamtk_5.11-1_i386.changes
Message-ID: <E1Xkvdf-0000cZ-8F@franck.debian.org>

clamtk_5.11-1_i386.changes uploaded successfully to localhost
along with the files:
  clamtk_5.11-1.dsc
  clamtk_5.11.orig.tar.gz
  clamtk_5.11-1.debian.tar.xz
  clamtk_5.11-1_all.deb
  clamtk-nautilus_5.11-1_all.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Sun Nov  2 15:49:19 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 02 Nov 2014 15:49:19 +0000
Subject: [Pkg-clamav-devel] clamtk_5.11-1_i386.changes ACCEPTED into unstable
Message-ID: <E1XkxP5-0003hP-MB@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 02 Nov 2014 00:57:45 -0400
Source: clamtk
Binary: clamtk clamtk-nautilus
Architecture: source all
Version: 5.11-1
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Scott Kitterman <scott at kitterman.com>
Description:
 clamtk     - graphical front-end for ClamAV
 clamtk-nautilus - Nautilus MenuProvider extension for ClamTk
Changes:
 clamtk (5.11-1) unstable; urgency=medium
 .
   * New upstream version
Checksums-Sha1:
 8bdd9511e4e15d87b8073227c74051345c0f0ae4 2133 clamtk_5.11-1.dsc
 150a079d81facda2246546fd7bbf8b22d0c15112 894160 clamtk_5.11.orig.tar.gz
 ce97a38da2444ae6de48f8178a4731033ba3d174 11796 clamtk_5.11-1.debian.tar.xz
 4fbac5cd325dbe4aa2e77b9d7650fe12033e5a87 571522 clamtk_5.11-1_all.deb
 047dfc75fb31a01650f67c1c3e6960fb751e6043 31734 clamtk-nautilus_5.11-1_all.deb
Checksums-Sha256:
 ca5d182a72c462d5ff98f7c05825bbfe371c2c2097489088b50c0d41d0230677 2133 clamtk_5.11-1.dsc
 5348bba54d3d5a538e999c4c13fdd2a491fb09cec484a7c7632b8e68bff58703 894160 clamtk_5.11.orig.tar.gz
 b9174408fdea650d0a33c734b237beb588e34be7ec60d3e7c15b05754d4756ca 11796 clamtk_5.11-1.debian.tar.xz
 3a298e3d7275342c97fe821d357c9f4f6afff9f154c5954d11a448dcc1cc4417 571522 clamtk_5.11-1_all.deb
 2a9fd76c4a97ac7d69f178f18fca927d67b323d8d95ef5f7168f418a92f6126c 31734 clamtk-nautilus_5.11-1_all.deb
Files:
 f1c8d516b0871f1e3c4ac9887b411a54 2133 utils optional clamtk_5.11-1.dsc
 cdb7634fd7be79d565b80a1e7155e2c5 894160 utils optional clamtk_5.11.orig.tar.gz
 2877ad221df093b80c2356eb8adf3d56 11796 utils optional clamtk_5.11-1.debian.tar.xz
 6df67992b967ea6154cf7fae8f983663 571522 utils optional clamtk_5.11-1_all.deb
 f548fa168b3ae12e35320fef6a252913 31734 utils optional clamtk-nautilus_5.11-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=tNU7
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From info at grabboo.com  Sun Nov  2 20:06:06 2014
From: info at grabboo.com (Security)
Date: Sun, 02 Nov 2014 22:06:06 +0200
Subject: [Pkg-clamav-devel] =?utf-8?b?0J/QvtC00YHQu9GD0YjQsiAg0LDQvdC1INC9?=
 =?utf-8?b?0LAgR1NNLdC80Lg=?=
Message-ID: <1414958766.54568eae26484@swift.generated>

??????????? ?? GSM-??&nbsp;
??????????? ?? GSM-? ?? www.SPYMASTER.bg  ?????? ?? ?? ??????? ????????, ?????... ??? ?? ????????? ?????? ??????... ???? ?? ?? ??????? ?????? ?? ??????????? ??, ?????????, ??????????, ???????, ????... ????- ???-??????? ? ?? ?? ??????? ???, ?????? ???-????? ???????- ???? ?????? ???????! ??????? ??????????? ?? ? ?????? ?????, ?????? ???? ?????????, ?????? ?????? SMS-?, GPS ???????????, ??????? ???? ??? Facebook, Viber, Skype, ?????????? ?????? ??????... ? ?????? ????- ???????!!!  ??-???????? ??????????, ?????????? ?????? ? ???? ?????? ?? ???????? ?? www.SPYMASTER.bg - ???? 6 ?. ????? ????????? ?? ????????!

????????: ??? ??????? ?? ??????? ???? ???????, ????????? ????????? ??? ?????????? ?? ???? ???????? ????????? ??? ?? ?????? ??????? ?? ???????, ???? ??????????? ?????????? ?????? ??????? ? ???????? ? ????? www.GSMSPY.bg?????? ?? ????? ??? ???????? ???? ??????? ?? ?? ?????????.???????? ?????? ?? ?????????? ????????, ??. 6 (1) ?? ??????????, ?? ? ???????? ???? ????????? ????????? ?? ?? ? ???????? ?? ???.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141102/7aa9938a/attachment.html>

From victorydoncan at gmail.com  Mon Nov  3 11:59:44 2014
From: victorydoncan at gmail.com (victory doncan)
Date: Mon, 3 Nov 2014 13:59:44 +0200
Subject: [Pkg-clamav-devel] Hello can we be friend
Message-ID: <CAEjp4n8b=2q5AwkfOmyi=gJqzpxSP8iz03ztnr9o3+Jr-Jz2cA@mail.gmail.com>

Hello can we be friend
My name is Victory I am a simple and decent girl I'm interested in you for
a good friendship please contact me with my email address (
victorydoncan at gmail.com) for better introduction and for my photos and
confidential discussion.
Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141103/d7850d9a/attachment.html>

From rob at rektau.ukfsn.org  Tue Nov  4 22:34:27 2014
From: rob at rektau.ukfsn.org (rob)
Date: Tue, 04 Nov 2014 22:34:27 +0000
Subject: [Pkg-clamav-devel] Bug#768097: clamtk: Won't start.
Message-ID: <20141104223427.1337.87952.reportbug@debian>

Package: clamtk
Version: 5.11-1
Severity: important

Dear Maintainer,


Running from terminal:

Icon 'gtk-new' not present in theme at /usr/share/perl5/ClamTk/GUI.pm line 262.





-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14.4preempt (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages clamtk depends on:
ii  clamav                          0.98.5~rc1+dfsg-3
ii  clamav-freshclam [clamav-data]  0.98.4+dfsg-2+b1
ii  cron                            3.0pl1-127
ii  gnome-icon-theme                3.12.0-1
ii  libgtk2-perl                    2:1.2492-3
ii  libjson-perl                    2.61-1
ii  liblocale-gettext-perl          1.05-8+b1
ii  liblwp-protocol-https-perl      6.06-2
ii  libtext-csv-perl                1.32-1
ii  libwww-perl                     6.08-1
ii  perl                            5.20.1-2

clamtk recommends no packages.

Versions of packages clamtk suggests:
ii  cabextract       1.4-4
pn  clamtk-nautilus  <none>

-- no debconf information


From owner at bugs.debian.org  Tue Nov  4 23:57:05 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Tue, 04 Nov 2014 23:57:05 +0000
Subject: [Pkg-clamav-devel] Processed: Re: Bug#768097: clamtk: Won't start.
References: <5459677D.8030409@googlemail.com>
 <20141104223427.1337.87952.reportbug@debian>
Message-ID: <handler.s.B768097.141514535131121.transcript@bugs.debian.org>

Processing control commands:

> tags -1 unreproducible moreinfo
Bug #768097 [clamtk] clamtk: Won't start.
Added tag(s) unreproducible and moreinfo.

-- 
768097: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768097
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From andreas.cadhalpun at googlemail.com  Tue Nov  4 23:55:41 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Wed, 05 Nov 2014 00:55:41 +0100
Subject: [Pkg-clamav-devel] Bug#768097: clamtk: Won't start.
In-Reply-To: <20141104223427.1337.87952.reportbug@debian>
References: <20141104223427.1337.87952.reportbug@debian>
Message-ID: <5459677D.8030409@googlemail.com>

Control: tags -1 unreproducible moreinfo

Hi Rob,

On 04.11.2014 23:34, rob wrote:
> Running from terminal:
>
> Icon 'gtk-new' not present in theme at /usr/share/perl5/ClamTk/GUI.pm line 262.

This is strange and I can't reproduce it.

The icon should be provide by the package gnome-icon-theme and clamtk 
depends on that.

Maybe your installation/disk is corrupt?

Please report the output of the following commands:
$ dpkg --verify gnome-icon-theme
$ find /usr/share/icons/gnome/ -name *gtk-new* | xargs file
$ find /usr/share/icons/gnome/ -name *document-new* | xargs file

Best regards,
Andreas

> -- System Information:
> Debian Release: jessie/sid
>    APT prefers unstable
>    APT policy: (500, 'unstable'), (500, 'stable')

Mixing unstable and stable might cause problems.

> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
>
> Kernel: Linux 3.14.4preempt (SMP w/8 CPU cores; PREEMPT)
> Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/bash
>
> Versions of packages clamtk depends on:
> ii  clamav                          0.98.5~rc1+dfsg-3
> ii  clamav-freshclam [clamav-data]  0.98.4+dfsg-2+b1

Is there a reason, why you updated clamav, but not clamav-freshclam?

> ii  cron                            3.0pl1-127
> ii  gnome-icon-theme                3.12.0-1

You have the package installed, so the icon should be available.

Best regards,
Andreas


From debian at kitterman.com  Wed Nov  5 06:13:46 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Wed, 05 Nov 2014 01:13:46 -0500
Subject: [Pkg-clamav-devel] Bug#768097:  Bug#768097: clamtk: Won't start.
In-Reply-To: <5459677D.8030409@googlemail.com>
References: <20141104223427.1337.87952.reportbug@debian>
 <5459677D.8030409@googlemail.com>
Message-ID: <7373552.iTT5Rhes23@kitterman-optiplex-9020m>

On Wednesday, November 05, 2014 12:55:41 AM Andreas Cadhalpun wrote:
> > Versions of packages clamtk depends on:
> > ii  clamav                          0.98.5~rc1+dfsg-3
> > ii  clamav-freshclam [clamav-data]  0.98.4+dfsg-2+b1
> 
> Is there a reason, why you updated clamav, but not clamav-freshclam?

This is a bit odd, since clamav depends:

Depends: clamav-freshclam (>= 0.98.5~rc1+dfsg) | clamav-data

Scott K


From rob at rektau.ukfsn.org  Wed Nov  5 12:30:31 2014
From: rob at rektau.ukfsn.org (rob)
Date: Wed, 05 Nov 2014 12:30:31 +0000
Subject: [Pkg-clamav-devel] Bug#768097: clamtk: Won't start.
In-Reply-To: <5459677D.8030409@googlemail.com>
References: <20141104223427.1337.87952.reportbug@debian>
 <5459677D.8030409@googlemail.com>
Message-ID: <545A1867.8010100@rektau.ukfsn.org>

On 04/11/14 23:55, Andreas Cadhalpun wrote:
> Control: tags -1 unreproducible moreinfo
>
> Hi Rob,
>
> On 04.11.2014 23:34, rob wrote:
>> Running from terminal:
>>
>> Icon 'gtk-new' not present in theme at /usr/share/perl5/ClamTk/GUI.pm
>> line 262.
>
> This is strange and I can't reproduce it.
>
> The icon should be provide by the package gnome-icon-theme and clamtk
> depends on that.
>
> Maybe your installation/disk is corrupt?
>
> Please report the output of the following commands:
> $ dpkg --verify gnome-icon-theme
> $ find /usr/share/icons/gnome/ -name *gtk-new* | xargs file
> $ find /usr/share/icons/gnome/ -name *document-new* | xargs file
>

root at debian:/home/rob# dpkg --verify gnome-icon-theme
No output

root at debian:/home/rob# find /usr/share/icons/gnome/ -name *gtk-new* | 
xargs file
/usr/share/icons/gnome/16x16/actions/gtk-new.png:   symbolic link to 
`document-new.png'
/usr/share/icons/gnome/24x24/actions/gtk-new.png:   symbolic link to 
`document-new.png'
/usr/share/icons/gnome/256x256/actions/gtk-new.png: symbolic link to 
`document-new.png'
/usr/share/icons/gnome/48x48/actions/gtk-new.png:   symbolic link to 
`document-new.png'
/usr/share/icons/gnome/22x22/actions/gtk-new.png:   symbolic link to 
`document-new.png'
/usr/share/icons/gnome/32x32/actions/gtk-new.png:   symbolic link to 
`document-new.png'

root at debian:/home/rob# find /usr/share/icons/gnome/ -name *document-new* 
| xargs file
/usr/share/icons/gnome/16x16/actions/document-new.png:   PNG image data, 
16 x 16, 8-bit/color RGBA, non-interlaced
/usr/share/icons/gnome/24x24/actions/document-new.png:   PNG image data, 
24 x 24, 8-bit/color RGBA, non-interlaced
/usr/share/icons/gnome/256x256/actions/document-new.png: PNG image data, 
256 x 256, 8-bit/color RGBA, non-interlaced
/usr/share/icons/gnome/48x48/actions/document-new.png:   PNG image data, 
48 x 48, 8-bit/color RGBA, non-interlaced
/usr/share/icons/gnome/22x22/actions/document-new.png:   PNG image data, 
22 x 22, 8-bit/color RGBA, non-interlaced
/usr/share/icons/gnome/32x32/actions/document-new.png:   PNG image data, 
32 x 32, 8-bit/color RGBA, non-interlaced

Thanks

rob

> Best regards,
> Andreas
>
>> -- System Information:
>> Debian Release: jessie/sid
>>    APT prefers unstable
>>    APT policy: (500, 'unstable'), (500, 'stable')
>
> Mixing unstable and stable might cause problems.
>
>> Architecture: amd64 (x86_64)
>> Foreign Architectures: i386
>>
>> Kernel: Linux 3.14.4preempt (SMP w/8 CPU cores; PREEMPT)
>> Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
>> Shell: /bin/sh linked to /bin/bash
>>
>> Versions of packages clamtk depends on:
>> ii  clamav                          0.98.5~rc1+dfsg-3
>> ii  clamav-freshclam [clamav-data]  0.98.4+dfsg-2+b1
>
> Is there a reason, why you updated clamav, but not clamav-freshclam?
>
>> ii  cron                            3.0pl1-127
>> ii  gnome-icon-theme                3.12.0-1
>
> You have the package installed, so the icon should be available.
>
> Best regards,
> Andreas
>
>


From andreas.cadhalpun at googlemail.com  Wed Nov  5 13:54:46 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Wed, 05 Nov 2014 14:54:46 +0100
Subject: [Pkg-clamav-devel] Bug#768097: clamtk: Won't start.
In-Reply-To: <545A1867.8010100@rektau.ukfsn.org>
References: <20141104223427.1337.87952.reportbug@debian>
 <5459677D.8030409@googlemail.com> <545A1867.8010100@rektau.ukfsn.org>
Message-ID: <545A2C26.6030303@googlemail.com>

Hi Rob,

On 05.11.2014 13:30, rob wrote:
> On 04/11/14 23:55, Andreas Cadhalpun wrote:
>> Please report the output of the following commands:
>> $ dpkg --verify gnome-icon-theme
>> $ find /usr/share/icons/gnome/ -name *gtk-new* | xargs file
>> $ find /usr/share/icons/gnome/ -name *document-new* | xargs file
>
> root at debian:/home/rob# dpkg --verify gnome-icon-theme
> No output
>
> root at debian:/home/rob# find /usr/share/icons/gnome/ -name *gtk-new* |
> xargs file
> /usr/share/icons/gnome/16x16/actions/gtk-new.png:   symbolic link to
> `document-new.png'
> /usr/share/icons/gnome/24x24/actions/gtk-new.png:   symbolic link to
> `document-new.png'
> /usr/share/icons/gnome/256x256/actions/gtk-new.png: symbolic link to
> `document-new.png'
> /usr/share/icons/gnome/48x48/actions/gtk-new.png:   symbolic link to
> `document-new.png'
> /usr/share/icons/gnome/22x22/actions/gtk-new.png:   symbolic link to
> `document-new.png'
> /usr/share/icons/gnome/32x32/actions/gtk-new.png:   symbolic link to
> `document-new.png'
>
> root at debian:/home/rob# find /usr/share/icons/gnome/ -name *document-new*
> | xargs file
> /usr/share/icons/gnome/16x16/actions/document-new.png:   PNG image data,
> 16 x 16, 8-bit/color RGBA, non-interlaced
> /usr/share/icons/gnome/24x24/actions/document-new.png:   PNG image data,
> 24 x 24, 8-bit/color RGBA, non-interlaced
> /usr/share/icons/gnome/256x256/actions/document-new.png: PNG image data,
> 256 x 256, 8-bit/color RGBA, non-interlaced
> /usr/share/icons/gnome/48x48/actions/document-new.png:   PNG image data,
> 48 x 48, 8-bit/color RGBA, non-interlaced
> /usr/share/icons/gnome/22x22/actions/document-new.png:   PNG image data,
> 22 x 22, 8-bit/color RGBA, non-interlaced
> /usr/share/icons/gnome/32x32/actions/document-new.png:   PNG image data,
> 32 x 32, 8-bit/color RGBA, non-interlaced

So the icons are there, they are just not registered.
Please run:
# gtk-update-icon-cache-3.0 --force /usr/share/icons/gnome

After that clamtk should work.

Best regards,
Andreas


From noreply at release.debian.org  Thu Nov  6 16:39:12 2014
From: noreply at release.debian.org (Debian testing watch)
Date: Thu, 06 Nov 2014 16:39:12 +0000
Subject: [Pkg-clamav-devel] clamav 0.98.5~rc1+dfsg-3 MIGRATED to testing
Message-ID: <E1XmQ5Y-0004Kz-76@franck.debian.org>

FYI: The status of the clamav source package
in Debian's testing distribution has changed.

  Previous version: 0.98.5~rc1+dfsg-2
  Current version:  0.98.5~rc1+dfsg-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From noreply at release.debian.org  Sat Nov  8 16:39:17 2014
From: noreply at release.debian.org (Debian testing watch)
Date: Sat, 08 Nov 2014 16:39:17 +0000
Subject: [Pkg-clamav-devel] clamtk 5.11-1 MIGRATED to testing
Message-ID: <E1Xn92j-0000Jq-RA@franck.debian.org>

FYI: The status of the clamtk source package
in Debian's testing distribution has changed.

  Previous version: 5.10-1
  Current version:  5.11-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From customerservice at hlgbn.com  Tue Nov 11 19:06:02 2014
From: customerservice at hlgbn.com (Govisumber NDH)
Date: Tue, 11 Nov 2014 19:06:02 +0000
Subject: [Pkg-clamav-devel] From Hong Leong Bank Malaysia,
Message-ID: <20141111190602.3318922c@mail.ndaatgal.mn>

HONG LEONG BANK MALAYSIA
Address No. 10, Jalan SS 78/34G, City 
Centre Subang Jaya, 47500 Subang Jaya, Selangor
Email:customerservice at hlgbn.com


Use For the poor.

Your name and e-mail address came up in a random draw conducted by Hong Leong Bank Malaysia
on Behalf of our late customer Crown Prince Nayef bin Abdulaziz Al Saud, of Saudi Arabia who was the Second 
Deputy Prime Minister of the Kingdom of Saudi Arabia before he died on the 16 June 2012 in 
Geneva Switzerland after a brief illness. 

Prince Nayef bin Abdulaziz Al Saud a well known Philanthropist and a devoted Humanitarian, 
before he died, made a WILL and deposited $3,200,000,000 in our BANK stating that the 
fund should be donated to any Philanthropist of our choice Overseas for Charity Work in 
his remembrance.

We have conducted a random draw and your name and e-mail address was picked as
the beneficiary to this WILL. Hong Leong Bank is interested in securing this money and to 
make sure that said FUND gets to you as the beneficiary of the WILL as the Federeal High 
Court Malaysia has mandated us to produce the beneficiary of this WILL or else the money 
will be credited to the Government treasury in accordance with the malaysia inheritance act.

It is our utmost desire to execute the WILL of our late customer. You are
required to contact the bank Accounting department immediately to start the process 
of transferring this money to any of your designated official account. 
Here is the Bank accounting department Contact information. 

Hong Leong Bank Malaysia
Email:hong at accountant.com
Direct Line: +601136053173
Contact Person:Amy Usman

Your Sincerely
Mrs. Hazira Bin Ahmed
Customer Service Manager
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141111/509cac42/attachment.html>

From pabs at debian.org  Wed Nov 12 05:08:37 2014
From: pabs at debian.org (Paul Wise)
Date: Wed, 12 Nov 2014 13:08:37 +0800
Subject: [Pkg-clamav-devel] Bug#761162: clamav-unofficial-sigs: Cron job
	results spread onto mail and logs
In-Reply-To: <CAB8vp8Ysy3WKR50KJXeBCxGGF10LEt+E_mGz60QPem4RKmn1eA@mail.gmail.com>
References: <20140911094253.20582.68050.reportbug@north.ext.tana.it>
 <1410430811.18877.152.camel@debian.org> <5411D78E.30801@tana.it>
 <CAB8vp8Ysy3WKR50KJXeBCxGGF10LEt+E_mGz60QPem4RKmn1eA@mail.gmail.com>
Message-ID: <1415768917.22492.8.camel@debian.org>

On Thu, 2014-10-16 at 20:45 -0700, Bill Landry wrote:

> Also, I don't feel that ignoring failed database downloads is prudent.
> Most admins what to know right away if there is a problem with a
> download site.  When I get some time I'll take a look at the provided
> patch to see if any of the suggested changes make sense.

The main problem with the current code is that the amount of cron spam
is high due to temporary connection issues. I think that the code should
track when the last successful download and install was and only send an
error to the cron job output recipient if a particular file is more than
24 hours out of date. The report could include the last 3 or 4 errors.
Obviously all errors should be logged though for debugging when the
admin discovers the problem.

Any thoughts Bill?

I would love to be able to get this fixed in the next Debian release.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141112/b17fc19f/attachment.sig>

From marketing at multech-pcb.com  Thu Nov 13 01:55:27 2014
From: marketing at multech-pcb.com (sales)
Date: Thu, 13 Nov 2014 09:55:27 +0800
Subject: [Pkg-clamav-devel] New Windows
Message-ID: <201411130955277967726@szdigital.pw>

DearSirGoodmorning! ThisisKenChenfromMultechPCB.inChina.I'mappreciatedt=hatyoucantaketimetolookatthisemail.Ijustvisitedyour=website,andstudiedthatyouhaveverymuchexperienceinthecompon=entandmanufacturingbusiness.Werespectcustomerwhohasrich=experience,becauseweMultechalsohasover17yearsPCBmanufactureex=perience,alsoitisahonortobethevendorofthatcustomerli=keyouare. Iamwritingtotellyou,thatweareabl=etocutyourcostforPCBitembyabout20%,thankstothecurrentbr=eak-throughinnovationontheproductionprocess.EspeciallyLP(=LeanProduction)processed,thereductionincostwillnotinanywayi=nfluencethequality,becauseMultechhassuccessfullysupportma=nyfamouscustomerlikeFlextronicsandSamina,Fuji,Smar..etc,a=lsowehavepassedISO9001,ISO14001,TS16949andourproductshaspass=edULcertificate(E320829).Weareveryconfidentthatyoucanr=elyonusasacapablevendor. Mayyougivemeachancetopresentyoumoreinformationont=his?Iwillbegladtosendyoumoredetailedinformationuponyourco=nsent. Thanks&amp;Bestregards!  KenChenSalesManager----------------=----------------------------------------------------------------------=---------MultechPCBTechnologiesCo.,LimitedTel:+86-755-=66828019-809Fax:+86-755-61828970Mobile:+86(0)15919705532= Skype:kenchen0919E-mail:Sales3 at Multech-pcb.com;homepage:www.multech-pcb.com  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141113/6a0237dc/attachment.html>

From jesse at opendreams.net  Thu Nov 13 08:16:25 2014
From: jesse at opendreams.net (Jesse Molina)
Date: Thu, 13 Nov 2014 01:16:25 -0700
Subject: [Pkg-clamav-devel] Bug#769384: ERROR: This tool requires libclamav
	with functionality level 79 or higher (current f-level: 77)
Message-ID: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>

Package: clamav-freshclam
Version: 0.98.5~rc1+dfsg-3
Severity: grave
Justification: renders package unusable

Fails on start. I imagine this wasn't tested?

Setting up clamav-freshclam (0.98.5~rc1+dfsg-3) ...
[....] Starting ClamAV virus database updater: freshclamERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
 failed!

This is a fresh install of clamav and clamav-freshclam after a dpkg purge.



-- Package-specific info:
--- configuration ---
# Automatically created by the clamav-freshclam postinst
# Comments will get lost when you reconfigure the clamav-freshclam package

DatabaseOwner clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogVerbose false
LogSyslog false
LogFacility LOG_LOCAL6
LogFileMaxSize 0
LogRotate true
LogTime true
Foreground false
Debug false
MaxAttempts 5
DatabaseDirectory /var/lib/clamav
DNSDatabaseInfo current.cvd.clamav.net
AllowSupplementaryGroups false
PidFile /var/run/clamav/freshclam.pid
ConnectTimeout 30
ReceiveTimeout 30
TestDatabases yes
ScriptedUpdates yes
CompressLocalDatabase no
SafeBrowsing false
Bytecode true
NotifyClamd /etc/clamav/clamd.conf
# Check for new database 24 times a day
Checks 24
DatabaseMirror db.local.clamav.net
DatabaseMirror database.clamav.net

--- data dir ---
total 0

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages clamav-freshclam depends on:
ii  clamav-base            0.98.5~rc1+dfsg-3
ii  debconf [debconf-2.0]  1.5.53
ii  dpkg                   1.17.21
ii  init-system-helpers    1.21
ii  libc6                  2.19-13
ii  libclamav6             0.98.4+dfsg-2+b1
ii  libssl1.0.0            1.0.1j-1
ii  logrotate              3.8.7-1+b1
ii  lsb-base               4.1+Debian13+nmu1
ii  procps                 2:3.3.9-8
ii  ucf                    3.0030
ii  zlib1g                 1:1.2.8.dfsg-2

clamav-freshclam recommends no packages.

Versions of packages clamav-freshclam suggests:
pn  apparmor     <none>
pn  clamav-docs  <none>

-- debconf information:
  clamav-freshclam/internet_interface:
  clamav-freshclam/autoupdate_freshclam: daemon
  clamav-freshclam/proxy_user:
  clamav-freshclam/update_interval: 24
  clamav-freshclam/SafeBrowsing: false
  clamav-freshclam/http_proxy:
  clamav-freshclam/local_mirror: db.local.clamav.net
  clamav-freshclam/LogRotate: true
  clamav-freshclam/PrivateMirror:
  clamav-freshclam/NotifyClamd: true
  clamav-freshclam/Bytecode: true


From sebastian at breakpoint.cc  Thu Nov 13 12:25:34 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Thu, 13 Nov 2014 13:25:34 +0100
Subject: [Pkg-clamav-devel] Bug#769384: ERROR: This tool requires libclamav
	with functionality level 79 or higher (current f-level: 77)
In-Reply-To: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
References: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
Message-ID: <20141113122534.GA18613@breakpoint.cc>

On 2014-11-13 01:16:25 [-0700], Jesse Molina wrote:
> Severity: grave
I would downgrade it to important. Scott?

> Fails on start. I imagine this wasn't tested?
You imagine wrong. But this case in particular wasn't.

> Setting up clamav-freshclam (0.98.5~rc1+dfsg-3) ...
> [....] Starting ClamAV virus database updater: freshclamERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
>  failed!
> 
> This is a fresh install of clamav and clamav-freshclam after a dpkg purge.

Almost a complete purge:

> ii  clamav-base            0.98.5~rc1+dfsg-3
> ii  libclamav6             0.98.4+dfsg-2+b1

You have the old libclamav6 dangling around. If you do an "apt-get
upgrade" then it should be fixed.
We have depends on libclamav6 based on library functions / ABI. Now the
ABI remains unchanged but stops working. This was neither tested nor
expected.

I guess the simplest thing to do is to depend the whole clamav package
on the built version instead of versioned symbols like we now.
This check comes from check_flevel() and it is not exported so havp &
friends won't care about his.
Any comments?

Sebastian


From debian at kitterman.com  Thu Nov 13 12:55:23 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Thu, 13 Nov 2014 07:55:23 -0500
Subject: [Pkg-clamav-devel] Bug#769384: Bug#769384: ERROR: This tool
	requires libclamav with functionality level 79 or higher
	(current f-level: 77)
In-Reply-To: <20141113122534.GA18613@breakpoint.cc>
References: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
 <20141113122534.GA18613@breakpoint.cc>
Message-ID: <39333322.osp5e16GUr@scott-latitude-e6320>

On Thursday, November 13, 2014 13:25:34 Sebastian Andrzej Siewior wrote:
> On 2014-11-13 01:16:25 [-0700], Jesse Molina wrote:
> > Severity: grave
> 
> I would downgrade it to important. Scott?

Serious due to incomplete depends.  I don't recall the exact policy paragraph, 
but it's a fails to comply with policy issue.  Debian supports partial 
upgrades, so it shouldn't be possible to get in this situation.

> > Fails on start. I imagine this wasn't tested?
> 
> You imagine wrong. But this case in particular wasn't.
> 
> > Setting up clamav-freshclam (0.98.5~rc1+dfsg-3) ...
> > [....] Starting ClamAV virus database updater: freshclamERROR: This tool
> > requires libclamav with functionality level 79 or higher (current
> > f-level: 77)> 
> >  failed!
> > 
> > This is a fresh install of clamav and clamav-freshclam after a dpkg purge.
> 
> Almost a complete purge:
> > ii  clamav-base            0.98.5~rc1+dfsg-3
> > ii  libclamav6             0.98.4+dfsg-2+b1
> 
> You have the old libclamav6 dangling around. If you do an "apt-get
> upgrade" then it should be fixed.
> We have depends on libclamav6 based on library functions / ABI. Now the
> ABI remains unchanged but stops working. This was neither tested nor
> expected.
> 
> I guess the simplest thing to do is to depend the whole clamav package
> on the built version instead of versioned symbols like we now.
> This check comes from check_flevel() and it is not exported so havp &
> friends won't care about his.
> Any comments?

I don't have a better idea.  We need to do something and that's the only 
approach I can think of that avoids having to manually set a minimum version.

Scott K


From jesse at opendreams.net  Thu Nov 13 13:23:09 2014
From: jesse at opendreams.net (Jesse Molina)
Date: Thu, 13 Nov 2014 05:23:09 -0800
Subject: [Pkg-clamav-devel] Bug#769384: ERROR: This tool requires libclamav
	with functionality level 79 or higher (current f-level: 77)
In-Reply-To: <20141113122534.GA18613@breakpoint.cc>
References: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
 <20141113122534.GA18613@breakpoint.cc>
Message-ID: <5464B0BD.7000702@opendreams.net>


Sorry, I opened this bug when I was tired. My apologies for the lack of 
detail.

I did a global upgrade, which is how I ended up in that situation. 
libclamav6 was held back.  Seems obvious that the package needed to be 
upgraded but wasn't, but I was not thinking right at the time.

Seems like a simple oversight.



On 11/13/14 4:25, Sebastian Andrzej Siewior wrote:
> On 2014-11-13 01:16:25 [-0700], Jesse Molina wrote:
>> Severity: grave
> I would downgrade it to important. Scott?
>
>> Fails on start. I imagine this wasn't tested?
> You imagine wrong. But this case in particular wasn't.
>
>> Setting up clamav-freshclam (0.98.5~rc1+dfsg-3) ...
>> [....] Starting ClamAV virus database updater: freshclamERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
>>   failed!
>>
>> This is a fresh install of clamav and clamav-freshclam after a dpkg purge.
> Almost a complete purge:
>
>> ii  clamav-base            0.98.5~rc1+dfsg-3
>> ii  libclamav6             0.98.4+dfsg-2+b1
> You have the old libclamav6 dangling around. If you do an "apt-get
> upgrade" then it should be fixed.
> We have depends on libclamav6 based on library functions / ABI. Now the
> ABI remains unchanged but stops working. This was neither tested nor
> expected.
>
> I guess the simplest thing to do is to depend the whole clamav package
> on the built version instead of versioned symbols like we now.
> This check comes from check_flevel() and it is not exported so havp &
> friends won't care about his.
> Any comments?
>
> Sebastian


From sebastian at breakpoint.cc  Thu Nov 13 21:12:32 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Thu, 13 Nov 2014 22:12:32 +0100
Subject: [Pkg-clamav-devel] Bug#769384: ERROR: This tool requires libclamav
	with functionality level 79 or higher (current f-level: 77)
In-Reply-To: <5464B0BD.7000702@opendreams.net>
References: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
 <20141113122534.GA18613@breakpoint.cc>
 <5464B0BD.7000702@opendreams.net>
Message-ID: <20141113211232.GA30402@breakpoint.cc>

severity 769384 serious
tags 769384 + pending
thanks.

On 2014-11-13 05:23:09 [-0800], Jesse Molina wrote:
> Sorry, I opened this bug when I was tired. My apologies for the lack of
> detail.
No problem, it all worked out :)

> I did a global upgrade, which is how I ended up in that situation.
> libclamav6 was held back.  Seems obvious that the package needed to be
> upgraded but wasn't, but I was not thinking right at the time.

Ah, it was hold back mostlikely because it now needs additional
dependency on libmspack for instance so upgrade won't do it,
dist-upgrade is now required.

So with the change I made now, people in your position should have
everything hold back and get freshclam & friends upgraded once
libmspack6 is also upgraded as well.

> Seems like a simple oversight.

Hey, your bug reported deserves the severity serious and this is
something that deserves to be pushed to jessie during the freeze we have
now.

Sebastian


From owner at bugs.debian.org  Thu Nov 13 21:15:18 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 13 Nov 2014 21:15:18 +0000
Subject: [Pkg-clamav-devel] Processed: Re: Bug#769384: ERROR: This tool
 requires libclamav with functionality level 79 or higher (current f-level:
 77)
References: <20141113211232.GA30402@breakpoint.cc>
Message-ID: <handler.s.C.14159131591997.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> severity 769384 serious
Bug #769384 [clamav-freshclam] ERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
Severity set to 'serious' from 'grave'
> tags 769384 + pending
Bug #769384 [clamav-freshclam] ERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
Added tag(s) pending.
> thanks.
Stopping processing here.

Please contact me if you need assistance.
-- 
769384: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769384
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From andreas.cadhalpun at googlemail.com  Thu Nov 13 21:37:53 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Thu, 13 Nov 2014 22:37:53 +0100
Subject: [Pkg-clamav-devel] Bug#769384: Bug#769384: Bug#769384: ERROR: This
	tool requires libclamav with functionality level 79 or higher
	(current f-level: 77)
In-Reply-To: <39333322.osp5e16GUr@scott-latitude-e6320>
References: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
 <20141113122534.GA18613@breakpoint.cc>
 <39333322.osp5e16GUr@scott-latitude-e6320>
Message-ID: <546524B1.3080504@googlemail.com>

Hi,

On 13.11.2014 13:55, Scott Kitterman wrote:
> On Thursday, November 13, 2014 13:25:34 Sebastian Andrzej Siewior wrote:
>> We have depends on libclamav6 based on library functions / ABI. Now the
>> ABI remains unchanged but stops working. This was neither tested nor
>> expected.

The problem is that the API changed (subtly): CL_FLEVEL got increased.

>> I guess the simplest thing to do is to depend the whole clamav package
>> on the built version instead of versioned symbols like we now.
>> This check comes from check_flevel() and it is not exported so havp &
>> friends won't care about his.
>> Any comments?

The exported function is not check_flevel, but rather cl_retflevel, 
which just returns CL_FLEVEL.

> I don't have a better idea.  We need to do something and that's the only
> approach I can think of that avoids having to manually set a minimum version.

I think this is the wrong workaround.
The correct fix is to bump the minimal version requirement of 
cl_retflevel to 0.98.5~rc1, which is the upstream version in which 
CL_FLEVEL changed the last time.

We'll have to do that in the future every time CL_FLEVEL is increased.

It is important to note that c-icap-modules also uses cl_retflevel, even 
though it doesn't use CL_FLEVEL directly. Thus it can't have a runtime 
test failing with older libclamav.

Best regards,
Andreas


From andreas.cadhalpun at googlemail.com  Thu Nov 13 22:45:26 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Thu, 13 Nov 2014 23:45:26 +0100
Subject: [Pkg-clamav-devel] Bug#769384: Bug#769384: Bug#769384: ERROR: This
	tool requires libclamav with functionality level 79 or higher
	(current f-level: 77)
In-Reply-To: <546524B1.3080504@googlemail.com>
References: <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
 <20141113122534.GA18613@breakpoint.cc>
 <39333322.osp5e16GUr@scott-latitude-e6320> <546524B1.3080504@googlemail.com>
Message-ID: <54653486.7000502@googlemail.com>

Hi,

On 13.11.2014 22:37, Andreas Cadhalpun wrote:
> The correct fix is to bump the minimal version requirement of
> cl_retflevel to 0.98.5~rc1, which is the upstream version in which
> CL_FLEVEL changed the last time.

I have now reverted Sebastian's workaround and added this fix.
Now the packages clamav, clamav-daemon and clamav-freshclam depend on:
libclamav6 (>= 0.98.5~rc1)

Best regards,
Andreas


From owner at bugs.debian.org  Thu Nov 13 22:54:06 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 13 Nov 2014 22:54:06 +0000
Subject: [Pkg-clamav-devel] Bug#768097: marked as done (clamtk: Won't start.)
References: <546535D2.5060908@googlemail.com>
 <20141104223427.1337.87952.reportbug@debian>
Message-ID: <handler.768097.D768097.141591906910469.ackdone@bugs.debian.org>

Your message dated Thu, 13 Nov 2014 23:50:58 +0100
with message-id <546535D2.5060908 at googlemail.com>
and subject line Re: Bug#768097: clamtk: Won't start.
has caused the Debian Bug report #768097,
regarding clamtk: Won't start.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
768097: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768097
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: rob <rob at rektau.ukfsn.org>
Subject: clamtk: Won't start.
Date: Tue, 04 Nov 2014 22:34:27 +0000
Size: 2827
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141113/f314a34b/attachment-0002.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Andreas Cadhalpun <andreas.cadhalpun at googlemail.com>
Subject: Re: Bug#768097: clamtk: Won't start.
Date: Thu, 13 Nov 2014 23:50:58 +0100
Size: 2793
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141113/f314a34b/attachment-0003.mht>

From ftpmaster at ftp-master.debian.org  Fri Nov 14 00:50:16 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 14 Nov 2014 00:50:16 +0000
Subject: [Pkg-clamav-devel] Processing of
	clamav_0.98.5~rc1+dfsg-4_i386.changes
Message-ID: <E1Xp55c-0007Wy-Uj@franck.debian.org>

clamav_0.98.5~rc1+dfsg-4_i386.changes uploaded successfully to localhost
along with the files:
  clamav_0.98.5~rc1+dfsg-4.dsc
  clamav_0.98.5~rc1+dfsg-4.debian.tar.xz
  clamav-base_0.98.5~rc1+dfsg-4_all.deb
  clamav-docs_0.98.5~rc1+dfsg-4_all.deb
  clamav-dbg_0.98.5~rc1+dfsg-4_i386.deb
  clamav_0.98.5~rc1+dfsg-4_i386.deb
  libclamav-dev_0.98.5~rc1+dfsg-4_i386.deb
  libclamav6_0.98.5~rc1+dfsg-4_i386.deb
  clamav-daemon_0.98.5~rc1+dfsg-4_i386.deb
  clamdscan_0.98.5~rc1+dfsg-4_i386.deb
  clamav-testfiles_0.98.5~rc1+dfsg-4_all.deb
  clamav-freshclam_0.98.5~rc1+dfsg-4_i386.deb
  clamav-milter_0.98.5~rc1+dfsg-4_i386.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From debian at kitterman.com  Fri Nov 14 00:57:16 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Thu, 13 Nov 2014 19:57:16 -0500
Subject: [Pkg-clamav-devel] Bug#769492: unblock: clamav/0.98.5~rc1+dfsg-4
Message-ID: <20141114005716.13765.21514.reportbug@Scott-Latitude-E6320>

Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock

Please unblock package clamav

RC bug fix. 

unblock clamav/0.98.5~rc1+dfsg-4


From ftpmaster at ftp-master.debian.org  Fri Nov 14 01:04:04 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 14 Nov 2014 01:04:04 +0000
Subject: [Pkg-clamav-devel] clamav_0.98.5~rc1+dfsg-4_i386.changes ACCEPTED
	into unstable
Message-ID: <E1Xp5Iy-0000RU-2s@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 13 Nov 2014 23:34:58 +0100
Source: clamav
Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamdscan clamav-testfiles clamav-freshclam clamav-milter
Architecture: source all i386
Version: 0.98.5~rc1+dfsg-4
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Andreas Cadhalpun <Andreas.Cadhalpun at googlemail.com>
Description:
 clamav     - anti-virus utility for Unix - command-line interface
 clamav-base - anti-virus utility for Unix - base package
 clamav-daemon - anti-virus utility for Unix - scanner daemon
 clamav-dbg - debug symbols for ClamAV
 clamav-docs - anti-virus utility for Unix - documentation
 clamav-freshclam - anti-virus utility for Unix - virus database update utility
 clamav-milter - anti-virus utility for Unix - sendmail integration
 clamav-testfiles - anti-virus utility for Unix - test files
 clamdscan  - anti-virus utility for Unix - scanner client
 libclamav-dev - anti-virus utility for Unix - development files
 libclamav6 - anti-virus utility for Unix - library
Closes: 769384
Changes:
 clamav (0.98.5~rc1+dfsg-4) unstable; urgency=medium
 .
   * Bump the version requirement for the cl_retflevel symbol to 0.98.5~rc1,
     because the CL_FLEVEL, which this function returns, increased in that
     version the last time.
     This ensures that the functionality level of libclamav is always new
     enough. (Closes: #769384)
Checksums-Sha1:
 7171449682ec03d60c34c1c989262b2aba684361 3120 clamav_0.98.5~rc1+dfsg-4.dsc
 f59229d608db36ba125f5417bf6b90b234a93f4e 543260 clamav_0.98.5~rc1+dfsg-4.debian.tar.xz
 d86456000648cb90f048400c3fe4efef511ac181 277516 clamav-base_0.98.5~rc1+dfsg-4_all.deb
 6b7d20cea2e71369ec9aa39f3bffbbf8f4dac81a 915782 clamav-docs_0.98.5~rc1+dfsg-4_all.deb
 8817b2e0e4474e077021d0025111e7fd53939abf 2401374 clamav-dbg_0.98.5~rc1+dfsg-4_i386.deb
 3ba7ea5d5e15dab7fe6abde8297d7ebf7b4e3f9c 322946 clamav_0.98.5~rc1+dfsg-4_i386.deb
 1b117477de0542fb9ee6a62ca29b52b3965b062f 239814 libclamav-dev_0.98.5~rc1+dfsg-4_i386.deb
 8ba981b53cea30652715649b2e93177c61dded47 978456 libclamav6_0.98.5~rc1+dfsg-4_i386.deb
 e6c045a0ae085f9ff0946952e16aa2948745d786 420404 clamav-daemon_0.98.5~rc1+dfsg-4_i386.deb
 1e2bf73a1153e61a91c082515780b034c440feed 295646 clamdscan_0.98.5~rc1+dfsg-4_i386.deb
 54948cc62d1dbe6240a319f7431b04e5a8e97942 3089472 clamav-testfiles_0.98.5~rc1+dfsg-4_all.deb
 bad1a711147c63d6159fa2d271dac41a4d5e5dfb 347618 clamav-freshclam_0.98.5~rc1+dfsg-4_i386.deb
 e7ef94742e38f3d2abe801c24ecf0d6e8273603c 386640 clamav-milter_0.98.5~rc1+dfsg-4_i386.deb
Checksums-Sha256:
 73d52d0e99b48a3474ebb6f7db91bdd0a5fd18f69d68f1877ceeac0845da182c 3120 clamav_0.98.5~rc1+dfsg-4.dsc
 3dcfbda7e57e711493ecf7d071989965b89555f65e4bc26a51446345340d5806 543260 clamav_0.98.5~rc1+dfsg-4.debian.tar.xz
 e1acd0875a41cb9b220dd4d7b20afc3c477a43077d3961df64657e4a2c050926 277516 clamav-base_0.98.5~rc1+dfsg-4_all.deb
 4edaf748ac93d56793a1bd631920fd411bfca2c2ec6e34e44b9c33638d1448a7 915782 clamav-docs_0.98.5~rc1+dfsg-4_all.deb
 3a51e69db17bc1f8abdffc6b8055455b49731d196c1e8f9330749da347bb5372 2401374 clamav-dbg_0.98.5~rc1+dfsg-4_i386.deb
 32caf0714ef941362210382fb7b8396b7b870ce9d506b53cbe6f9fc5593842c6 322946 clamav_0.98.5~rc1+dfsg-4_i386.deb
 07f09300006f9cbbdaecdc075004ef685bdef6ef7d9ce4c96660503eed3b0f45 239814 libclamav-dev_0.98.5~rc1+dfsg-4_i386.deb
 7423254901e4ec7abd98e5c07f780ec941667b73013e9494a9b20e4c2d52a15d 978456 libclamav6_0.98.5~rc1+dfsg-4_i386.deb
 e7fc038273f3e65a1c5b6a081f78e9c4b99432397aa039aad7d6d10a9cc8e9cf 420404 clamav-daemon_0.98.5~rc1+dfsg-4_i386.deb
 2ee42ff88d68738723c3531b3adf129ab0d31ff4dd2123157661eb1cab9a6a43 295646 clamdscan_0.98.5~rc1+dfsg-4_i386.deb
 4d2d41aa1f5d719ad2e5f0093c493ad3e22a0ddff7b45677e130d7edc79bf43c 3089472 clamav-testfiles_0.98.5~rc1+dfsg-4_all.deb
 b24049b895230d5bce1bd0589c6e99274035b015e625d77328542d2c7351d5e1 347618 clamav-freshclam_0.98.5~rc1+dfsg-4_i386.deb
 dae701cba50ce7483c5e9b0fc48a5cb969d7246bd23950afa0ec77dbbbfa30c5 386640 clamav-milter_0.98.5~rc1+dfsg-4_i386.deb
Files:
 390082b9d26e3403231824621d3d9fc2 3120 utils optional clamav_0.98.5~rc1+dfsg-4.dsc
 aea2060d473e193254f4643b74dce8a8 543260 utils optional clamav_0.98.5~rc1+dfsg-4.debian.tar.xz
 eb1fbcbe15871453af7c2f65cbd3ea0f 277516 utils optional clamav-base_0.98.5~rc1+dfsg-4_all.deb
 b221fa8afc82879390eeac7ca9b1657c 915782 doc optional clamav-docs_0.98.5~rc1+dfsg-4_all.deb
 d9fdf817f131cc215cd75e7073d6b07d 2401374 debug extra clamav-dbg_0.98.5~rc1+dfsg-4_i386.deb
 e5244b8caa84ccd20ce7c3923ef00675 322946 utils optional clamav_0.98.5~rc1+dfsg-4_i386.deb
 5ac29366f87927b8009734a33782a561 239814 libdevel optional libclamav-dev_0.98.5~rc1+dfsg-4_i386.deb
 eff7bf8868a070e3abe01c524fedf223 978456 libs optional libclamav6_0.98.5~rc1+dfsg-4_i386.deb
 a1f38218b5edfd0828e18636baff2266 420404 utils optional clamav-daemon_0.98.5~rc1+dfsg-4_i386.deb
 d200a85aae01ec2e23e0871d29c6c108 295646 utils optional clamdscan_0.98.5~rc1+dfsg-4_i386.deb
 8554185c7598fcf73cebcd7e729e99da 3089472 utils optional clamav-testfiles_0.98.5~rc1+dfsg-4_all.deb
 8baf841459507d8f32004d5d59728eb1 347618 utils optional clamav-freshclam_0.98.5~rc1+dfsg-4_i386.deb
 3eb3800ee6124063bf057276487d3e9b 386640 utils extra clamav-milter_0.98.5~rc1+dfsg-4_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=v4Yx
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From owner at bugs.debian.org  Fri Nov 14 01:06:10 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Fri, 14 Nov 2014 01:06:10 +0000
Subject: [Pkg-clamav-devel] Bug#769384: marked as done (ERROR: This tool
 requires libclamav with functionality level 79 or higher (current f-level:
 77))
References: <E1Xp5Iy-0000Re-5K@franck.debian.org>
 <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
Message-ID: <handler.769384.D769384.141592704625676.ackdone@bugs.debian.org>

Your message dated Fri, 14 Nov 2014 01:04:04 +0000
with message-id <E1Xp5Iy-0000Re-5K at franck.debian.org>
and subject line Bug#769384: fixed in clamav 0.98.5~rc1+dfsg-4
has caused the Debian Bug report #769384,
regarding ERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
769384: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769384
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Jesse Molina <jesse at opendreams.net>
Subject: ERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
Date: Thu, 13 Nov 2014 01:16:25 -0700
Size: 4625
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141114/3b07ee9a/attachment-0002.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Andreas Cadhalpun <Andreas.Cadhalpun at googlemail.com>
Subject: Bug#769384: fixed in clamav 0.98.5~rc1+dfsg-4
Date: Fri, 14 Nov 2014 01:04:04 +0000
Size: 9179
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141114/3b07ee9a/attachment-0003.mht>

From maarja10222111 at hotmail.com  Sun Nov 16 19:02:52 2014
From: maarja10222111 at hotmail.com (Laurie Maarja)
Date: Sun, 16 Nov 2014 20:02:52 +0100
Subject: [Pkg-clamav-devel] Dear Beloved,
Message-ID: <SNT147-W370F3868ED528D7BD11074D98A0@phx.gbl>

Dear Beloved,
My name is Maarja Laurie.
I am addressing you this message through the work of God Almighty that made me to chose you amongst several lists of emails in order to hand these great responsibilities (?2,000,000 - Two million euros) which I am certain you will handle it carefully being the gift that came from a woman with a sincere and genuine heart towards the orphans and less privileged.
It is certain that I do not know you, which I asked God Almighty to grant you the strength to handle these projects with a sincere and transparent heart. I am presently suffering greatly each day that passes by as I am not sure if I will survive, which was as a result of different surgical operations that I had. Beloved, I am afraid to die, but nobody is beyond death. Each day I keep praying to God Almighty for His help thereby directing me toward's somebody that will handle this project so that I can die peacefully.
The most important help that I need from you is to always be in constant prayers with me as I am sure that you have a sincere and open heart towards the poor and orphans. I do not want to leave this world without knowing that my funds are wisely used to help the orphans and poor.
I do not know how to thank you, but be sure that God Almighty will bless you for accepting to handle these projects so as to help the orphans and poor. I will be very happy to read from you so as to put you in contact with the institute where the money is presently as I am sure that you will properly make use of it.
My God Almighty bless you and your entire family
Well wishes,
Mrs.Maarja Laurie 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141116/e740aa96/attachment.html>

From debian at kitterman.com  Tue Nov 18 05:01:25 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Tue, 18 Nov 2014 00:01:25 -0500
Subject: [Pkg-clamav-devel] Progress on clamav bugs
Message-ID: <7617331.6P2XoTLNPT@kitterman-optiplex-9020m>

I just noticed https://qa.debian.org/data/bts/graphs/c/clamav.png

Andreas and Sebastian: That downward slope is to your credit.  Thanks for your 
work.

Scott K


From informationen at sparkasse.de  Wed Nov 19 14:36:37 2014
From: informationen at sparkasse.de (Sparkasse)
Date: Thu, 20 Nov 2014 01:36:37 +1100 (AEDT)
Subject: [Pkg-clamav-devel] Aktualisieren Sie Ihr Konto
	Sicherheits-informationen
Message-ID: <20141119143637.9C9B0E19CF4@ds01144.snspreview.com.au>

An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141120/07c2bf18/attachment.html>

From dekelrachel at outlook.com  Wed Nov 19 12:59:10 2014
From: dekelrachel at outlook.com (Rachel Dekel)
Date: Wed, 19 Nov 2014 12:59:10 +0000
Subject: [Pkg-clamav-devel] I am waiting to hear from you
Message-ID: <SNT148-W16A3DAEC559DD9C3AE4FD7AE890@phx.gbl>

Hello,I'm glad to get back to you and also to know what
the problem is that i have not received a response from you after my
previous mail to this address,please respond to me because there are very
important topics that I want to
discuss with you.i will be waiting to read from your reply soon,
Regards,Rachel. 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141119/2042d1f8/attachment.html>

From noreply at release.debian.org  Wed Nov 19 16:39:14 2014
From: noreply at release.debian.org (Debian testing watch)
Date: Wed, 19 Nov 2014 16:39:14 +0000
Subject: [Pkg-clamav-devel] clamav 0.98.5~rc1+dfsg-4 MIGRATED to testing
Message-ID: <E1Xr8Hi-0003oy-K4@franck.debian.org>

FYI: The status of the clamav source package
in Debian's testing distribution has changed.

  Previous version: 0.98.5~rc1+dfsg-3
  Current version:  0.98.5~rc1+dfsg-4

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From sebastian at breakpoint.cc  Wed Nov 19 22:27:46 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Wed, 19 Nov 2014 23:27:46 +0100
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
Message-ID: <20141119222746.GA6956@breakpoint.cc>

packaged & pushed to git. Built on sid-i386.

Andreas: The whole nonsense about static linking against llvm. "We" have
it fixed in Debian and I added another patch to keep in working.
Did you open a bug in clamav for "hardcode-LLVM-linker-flag-because-
llvm-config-return"? I remember that I wanted to fix llvm not to print the
individual libs but it clearly didn't happen :) Should I try to get it
done first or could that go upstream as-is?

Sebastian


From wilson_willa at yahoo.in  Wed Nov 19 22:02:48 2014
From: wilson_willa at yahoo.in (Mr Wilson Willa)
Date: Thu, 20 Nov 2014 04:02:48 +0600 (BDT)
Subject: [Pkg-clamav-devel] THE FIRST $5000.00 WAS SENT TODAY
Message-ID: <26004.196.46.245.134.1416434568.squirrel@mail.promotex-bd.com>

Attn: Good day

Your fund of $2.500, 000.00 has been released and the transfer began today
through western union money transfer. So, contact Western Union Director
Dr Kevin Anthony, with your full information to enable them give you
Sender Name, Question and Answer to pick up your First Payment MTCN=
8845-115-202 and ask him what you need to do to enable them activate your
account and renew of your file so that you will be able to pick up your
first payment $5000 per day until total funds 2.5millions is finish.

Your Receiver name--------------
You?re Country--------------------
You?re City-----------------------
Your Tell-----------------------
You?re Id-------------------------
you're Age-----------------------

Forward the information here ( union.western at barid.com ) Or Call Dr Kevin
Anthony
On tel phone: +229-67377275

Thanks
Mr Wilson Willa



From ftpmaster at ftp-master.debian.org  Thu Nov 20 06:29:21 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 20 Nov 2014 06:29:21 +0000
Subject: [Pkg-clamav-devel] Processing of clamav_0.98.5+dfsg-1_amd64.changes
Message-ID: <E1XrLF3-0001ri-VA@franck.debian.org>

clamav_0.98.5+dfsg-1_amd64.changes uploaded successfully to localhost
along with the files:
  clamav_0.98.5+dfsg-1.dsc
  clamav_0.98.5+dfsg.orig.tar.xz
  clamav_0.98.5+dfsg-1.debian.tar.xz
  clamav-base_0.98.5+dfsg-1_all.deb
  clamav-docs_0.98.5+dfsg-1_all.deb
  clamav-dbg_0.98.5+dfsg-1_amd64.deb
  clamav_0.98.5+dfsg-1_amd64.deb
  libclamav-dev_0.98.5+dfsg-1_amd64.deb
  libclamav6_0.98.5+dfsg-1_amd64.deb
  clamav-daemon_0.98.5+dfsg-1_amd64.deb
  clamdscan_0.98.5+dfsg-1_amd64.deb
  clamav-testfiles_0.98.5+dfsg-1_all.deb
  clamav-freshclam_0.98.5+dfsg-1_amd64.deb
  clamav-milter_0.98.5+dfsg-1_amd64.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Thu Nov 20 06:34:16 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 20 Nov 2014 06:34:16 +0000
Subject: [Pkg-clamav-devel] clamav_0.98.5+dfsg-1_amd64.changes ACCEPTED into
	unstable
Message-ID: <E1XrLJo-0002X9-LN@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 19 Nov 2014 22:28:22 +0100
Source: clamav
Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamdscan clamav-testfiles clamav-freshclam clamav-milter
Architecture: source all amd64
Version: 0.98.5+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Description:
 clamav     - anti-virus utility for Unix - command-line interface
 clamav-base - anti-virus utility for Unix - base package
 clamav-daemon - anti-virus utility for Unix - scanner daemon
 clamav-dbg - debug symbols for ClamAV
 clamav-docs - anti-virus utility for Unix - documentation
 clamav-freshclam - anti-virus utility for Unix - virus database update utility
 clamav-milter - anti-virus utility for Unix - sendmail integration
 clamav-testfiles - anti-virus utility for Unix - test files
 clamdscan  - anti-virus utility for Unix - scanner client
 libclamav-dev - anti-virus utility for Unix - development files
 libclamav6 - anti-virus utility for Unix - library
Closes: 763300
Changes:
 clamav (0.98.5+dfsg-1) unstable; urgency=medium
 .
   [ Sebastian Andrzej Siewior ]
   * import new upsstream version, refresh patches:
     dropped:
      - LLVM-3.5-version-check-update.patch
      - add-support-for-LLVM-3.5.patch
      - fix-test-failure-on-powerpc-again.patch
     updated:
      - hardcode-LLVM-linker-flag-because-llvm-config-return
      - added "bb-10731-Allow-to-specificy-a-group-for-the-socket-o" as
        dependecy for "clamav-milter-add-additinal-SMFIF_-flags-before-invo"
     (Closes: #763300)
   * Add "Bump-.so-version-number", likely the RPM version of 769384.
   * Add "llvm-don-t-use-system-libs", since we don't link against .a libs, we
     don't need the deps either.
 .
   [ Scott Kitterman ]
   * Update libclamav6: embedded-library lintian override for new libclamav6 so
     version
Checksums-Sha1:
 b0c1939a1020779f4e8499d94ebb5ddb63c7f675 3092 clamav_0.98.5+dfsg-1.dsc
 e7df5b8654c165afa4a299cb914c2d6afcf05788 5286536 clamav_0.98.5+dfsg.orig.tar.xz
 4c9d3364f30d7c08cf808e31fa489b1d41005094 540148 clamav_0.98.5+dfsg-1.debian.tar.xz
 83cb3d7000cf4ef66461e06e9b90b9b305bb2a60 278274 clamav-base_0.98.5+dfsg-1_all.deb
 85fbaf1de52d7504e10a10c909287b6937bd0075 914762 clamav-docs_0.98.5+dfsg-1_all.deb
 b834f30263249d614d07b90bec79ada3135eb6c2 2417118 clamav-dbg_0.98.5+dfsg-1_amd64.deb
 3ff0ca0e225bfb73ccb9eddfc8e116423c742078 320856 clamav_0.98.5+dfsg-1_amd64.deb
 8c5f8c656258957f3874caec0d503a98e443cbf0 240408 libclamav-dev_0.98.5+dfsg-1_amd64.deb
 6b69e5a90880311dd15a2841f2352ca713397288 918080 libclamav6_0.98.5+dfsg-1_amd64.deb
 a069d8d0540637d0827ab7df8e5dd3d98cfd3003 415128 clamav-daemon_0.98.5+dfsg-1_amd64.deb
 0d0bfe9f4184609e5e73746aba645d6049f64023 293476 clamdscan_0.98.5+dfsg-1_amd64.deb
 fe6494541431afa97142ec90dbb85b269e4159dd 3093476 clamav-testfiles_0.98.5+dfsg-1_all.deb
 6b5844b09792bb8b488e9cbefadfb697cd6ed23c 344030 clamav-freshclam_0.98.5+dfsg-1_amd64.deb
 d8acc1832d96090b6193cb7d4b00d1e667ae2528 383394 clamav-milter_0.98.5+dfsg-1_amd64.deb
Checksums-Sha256:
 b1ffd0d59d9809a58bd46ecd72d8426e142fae0144eabd9e44c4411b0f398057 3092 clamav_0.98.5+dfsg-1.dsc
 0e353f646a0add17ca42e75ccfc7edf4f8b7c1acc972a86c317543f6b365db2d 5286536 clamav_0.98.5+dfsg.orig.tar.xz
 e61469e5895243959543ae83bb1b6b961db8e21bd4158f2a0a49153542847ee2 540148 clamav_0.98.5+dfsg-1.debian.tar.xz
 d559906ee82e6292a75f2f2767be69c8f0922af9f9a6aa39c171436c991f92ee 278274 clamav-base_0.98.5+dfsg-1_all.deb
 81410f3e56563ad5b253f4c5dc5ddbbe0ab6881a7dab268a9a49191d15f47f1e 914762 clamav-docs_0.98.5+dfsg-1_all.deb
 1f4b1c7e6884219f2a0ea0c663fd0a242f8b4e3824f7825f3627befc5a1b8606 2417118 clamav-dbg_0.98.5+dfsg-1_amd64.deb
 1ebf07940e0220a79cb21f286a293235cc3ccaae8698ed9695934445a85287a5 320856 clamav_0.98.5+dfsg-1_amd64.deb
 1e1201a408df776b10ac94b41dc05f9d1dd38923447c25c499aebfa38783a87a 240408 libclamav-dev_0.98.5+dfsg-1_amd64.deb
 88afe92ea08912c486bb62c117514b7d0afa467515e0b9959d0135cc1e66be9f 918080 libclamav6_0.98.5+dfsg-1_amd64.deb
 3d6d5cd034e0b7ece517602bf2a5d6ea0553ac7387f66b31cdf412a7c42b0b8b 415128 clamav-daemon_0.98.5+dfsg-1_amd64.deb
 48932b640752794d86c67eab863f6416cb258b240b8a1704f8b2d617c8ecc273 293476 clamdscan_0.98.5+dfsg-1_amd64.deb
 22b40843c67e172da05650c96b136861bdd2f7ab058d6b130306f0a13d1a2870 3093476 clamav-testfiles_0.98.5+dfsg-1_all.deb
 ca37a1fc036daa87c0d5dcb905a4c8aa3706344a00fd70751d036ef785365d21 344030 clamav-freshclam_0.98.5+dfsg-1_amd64.deb
 16f27d2a946e4842fd4d8ede6c415da6a65348beab16cd38be87732966cfaa4b 383394 clamav-milter_0.98.5+dfsg-1_amd64.deb
Files:
 773a9c376f80fcdd05118f0bc5925407 3092 utils optional clamav_0.98.5+dfsg-1.dsc
 34d5e8698e57ce45c4a8c3c2cb211cf3 5286536 utils optional clamav_0.98.5+dfsg.orig.tar.xz
 4e7667374d1d197746bde270911ec981 540148 utils optional clamav_0.98.5+dfsg-1.debian.tar.xz
 fc358e4918b7b799b0d39132fe6dfe17 278274 utils optional clamav-base_0.98.5+dfsg-1_all.deb
 8b80bd8793ce90f04bc12569ced66d6a 914762 doc optional clamav-docs_0.98.5+dfsg-1_all.deb
 8434aa76bb4e056408e57ff7b48293f3 2417118 debug extra clamav-dbg_0.98.5+dfsg-1_amd64.deb
 ae51248ec7e743574e936aa4a3633848 320856 utils optional clamav_0.98.5+dfsg-1_amd64.deb
 9f71d8434d2dfe9094ce6543cf5b44b6 240408 libdevel optional libclamav-dev_0.98.5+dfsg-1_amd64.deb
 e056ff11d0b6fbcded7670a1b40cd581 918080 libs optional libclamav6_0.98.5+dfsg-1_amd64.deb
 a83e1ef12f9e39107c8905af41046b25 415128 utils optional clamav-daemon_0.98.5+dfsg-1_amd64.deb
 43cc1fa8410395efc0c2a4408b9addb1 293476 utils optional clamdscan_0.98.5+dfsg-1_amd64.deb
 37a9217d3f78a047769e6405e515d410 3093476 utils optional clamav-testfiles_0.98.5+dfsg-1_all.deb
 05a20c846ea5affc9a6b572ba556f0af 344030 utils optional clamav-freshclam_0.98.5+dfsg-1_amd64.deb
 48cc47cf68e29352b1f8dc6820d67117 383394 utils extra clamav-milter_0.98.5+dfsg-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=9bEB
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From owner at bugs.debian.org  Thu Nov 20 06:39:14 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 20 Nov 2014 06:39:14 +0000
Subject: [Pkg-clamav-devel] Bug#763300: marked as done ("clamscan -a -i -r
 -z --remove" causes a segfault)
References: <E1XrLJo-0002XJ-Nd@franck.debian.org>
 <20140928235334.4105.55870.reportbug@pc-0.com>
Message-ID: <handler.763300.D763300.14164652619790.ackdone@bugs.debian.org>

Your message dated Thu, 20 Nov 2014 06:34:16 +0000
with message-id <E1XrLJo-0002XJ-Nd at franck.debian.org>
and subject line Bug#763300: fixed in clamav 0.98.5+dfsg-1
has caused the Debian Bug report #763300,
regarding "clamscan -a -i -r -z --remove" causes a segfault
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
763300: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763300
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Joe Gumbosky <joegum at joegum.com>
Subject: no subject
Date: Sun, 28 Sep 2014 19:53:34 -0400
Size: 3942
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141120/d05a45eb/attachment-0002.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Subject: Bug#763300: fixed in clamav 0.98.5+dfsg-1
Date: Thu, 20 Nov 2014 06:34:16 +0000
Size: 9742
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141120/d05a45eb/attachment-0003.mht>

From andreas.cadhalpun at googlemail.com  Thu Nov 20 18:49:23 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Thu, 20 Nov 2014 19:49:23 +0100
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
In-Reply-To: <20141119222746.GA6956@breakpoint.cc>
References: <20141119222746.GA6956@breakpoint.cc>
Message-ID: <546E37B3.4080308@googlemail.com>

Hi,

On 19.11.2014 23:27, Sebastian Andrzej Siewior wrote:
> packaged & pushed to git. Built on sid-i386.

Great.

> Andreas: The whole nonsense about static linking against llvm. "We" have
> it fixed in Debian and I added another patch to keep in working.
> Did you open a bug in clamav for "hardcode-LLVM-linker-flag-because-
> llvm-config-return"?

I hadn't forwarded it until it was too late, see bb#11146 [1]. :(

> I remember that I wanted to fix llvm not to print the
> individual libs but it clearly didn't happen :) Should I try to get it
> done first or could that go upstream as-is?

In the long term I think LLVM should use pkg-config.
Until then the this patch should go upstream.

This reminds me, that we have a rather large number of Debian patches:
  * 0001-Change-paths-in-sample-conf-file-to-match-Debian.patch:
    Debian specific
  * 0002-Add-an-additional-n-after-the-number-in-the-pidfile.patch:
    bb#10907, status?
  * 0003-unit_tests-increment-test-timeout-from-40secs-to-5mi.patch:
    This should go upstream, possibly with even longer timeout.
    (It still timed out for me using qemu to emulate powerpc.)
  * 0004-Fix-compiling-on-Hurd.patch:
    This should now go upstream.
  * 0005-Workaround-a-bug-in-libc-on-Hurd.patch:
    This can now be dropped, because #752237 got fixed.
  * 0006-remove-unnecessary-harmful-flags-from-libclamav.pc.patch:
    This should also go upstream.
  * 0007-libclamav-use-libmspack.patch:
    bb#11062, targeted for 0.98.6
  * 0008-Add-upstream-systemd-support-for-clamav-daemon-and-c.patch:
    bb#10568, targeted for 0.99
  * 0009-fix-ssize_t-size_t-off_t-printf-modifier.patch:
    bb#11092, status?
  * 0010-hardcode-LLVM-linker-flag-because-llvm-config-return.patch:
    Should go upstream, see bb#11146.
  * 0011-Add-libmspack-library-from-upstream-without-unnecess.patch:
    see bb#11062, targeted for 0.98.6
  * 0012-allow-to-use-internal-libmspack-if-the-external-is-n.patch:
    see bb#11062, targeted for 0.98.6
  * 0013-fix-autoreconf-with-embedded-libmspack.patch:
    see bb#11062, targeted for 0.98.6
  * 0014-remove-AC_CONFIG_SRCDIR-llvm-configure-from-libclama.patch:
    This should go upstream, as configure.ac doesn't use LLVM's
    configure anymore.
  * 0015-bb-10731-Allow-to-specificy-a-group-for-the-socket-o.patch:
    bb#10731, targeted for 0.98.6
  * 0016-clamav-milter-add-additinal-SMFIF_-flags-before-invo.patch:
    bb#10731, targeted for 0.98.6
  * 0017-Bump-.so-version-number.patch:
    backported from upstream/master
  * 0018-llvm-don-t-use-system-libs.patch:
    Should go upstream together with 0010.

Due to the current freeze, I'm wondering if I should push changes like 
dropping 0005-Workaround-a-bug-in-libc-on-Hurd.patch to the unstable 
branch, or create a new one (experimental?).

Best regards,
Andreas

1: https://bugzilla.clamav.net/show_bug.cgi?id=11146


From debian at kitterman.com  Thu Nov 20 19:56:55 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Thu, 20 Nov 2014 14:56:55 -0500
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
In-Reply-To: <546E37B3.4080308@googlemail.com>
References: <20141119222746.GA6956@breakpoint.cc>
 <546E37B3.4080308@googlemail.com>
Message-ID: <1793674.vOe1q5aBlC@kitterman-optiplex-9020m>

On Thursday, November 20, 2014 07:49:23 PM Andreas Cadhalpun wrote:
> Hi,
> 
> On 19.11.2014 23:27, Sebastian Andrzej Siewior wrote:
> > packaged & pushed to git. Built on sid-i386.
> 
> Great.
> 
> > Andreas: The whole nonsense about static linking against llvm. "We" have
> > it fixed in Debian and I added another patch to keep in working.
> > Did you open a bug in clamav for "hardcode-LLVM-linker-flag-because-
> > llvm-config-return"?
> 
> I hadn't forwarded it until it was too late, see bb#11146 [1]. :(
> 
> > I remember that I wanted to fix llvm not to print the
> > individual libs but it clearly didn't happen :) Should I try to get it
> > done first or could that go upstream as-is?
> 
> In the long term I think LLVM should use pkg-config.
> Until then the this patch should go upstream.
> 
> This reminds me, that we have a rather large number of Debian patches:
>   * 0001-Change-paths-in-sample-conf-file-to-match-Debian.patch:
>     Debian specific
>   * 0002-Add-an-additional-n-after-the-number-in-the-pidfile.patch:
>     bb#10907, status?
>   * 0003-unit_tests-increment-test-timeout-from-40secs-to-5mi.patch:
>     This should go upstream, possibly with even longer timeout.
>     (It still timed out for me using qemu to emulate powerpc.)
>   * 0004-Fix-compiling-on-Hurd.patch:
>     This should now go upstream.
>   * 0005-Workaround-a-bug-in-libc-on-Hurd.patch:
>     This can now be dropped, because #752237 got fixed.
>   * 0006-remove-unnecessary-harmful-flags-from-libclamav.pc.patch:
>     This should also go upstream.
>   * 0007-libclamav-use-libmspack.patch:
>     bb#11062, targeted for 0.98.6
>   * 0008-Add-upstream-systemd-support-for-clamav-daemon-and-c.patch:
>     bb#10568, targeted for 0.99
>   * 0009-fix-ssize_t-size_t-off_t-printf-modifier.patch:
>     bb#11092, status?
>   * 0010-hardcode-LLVM-linker-flag-because-llvm-config-return.patch:
>     Should go upstream, see bb#11146.
>   * 0011-Add-libmspack-library-from-upstream-without-unnecess.patch:
>     see bb#11062, targeted for 0.98.6
>   * 0012-allow-to-use-internal-libmspack-if-the-external-is-n.patch:
>     see bb#11062, targeted for 0.98.6
>   * 0013-fix-autoreconf-with-embedded-libmspack.patch:
>     see bb#11062, targeted for 0.98.6
>   * 0014-remove-AC_CONFIG_SRCDIR-llvm-configure-from-libclama.patch:
>     This should go upstream, as configure.ac doesn't use LLVM's
>     configure anymore.
>   * 0015-bb-10731-Allow-to-specificy-a-group-for-the-socket-o.patch:
>     bb#10731, targeted for 0.98.6
>   * 0016-clamav-milter-add-additinal-SMFIF_-flags-before-invo.patch:
>     bb#10731, targeted for 0.98.6
>   * 0017-Bump-.so-version-number.patch:
>     backported from upstream/master
>   * 0018-llvm-don-t-use-system-libs.patch:
>     Should go upstream together with 0010.
> 
> Due to the current freeze, I'm wondering if I should push changes like
> dropping 0005-Workaround-a-bug-in-libc-on-Hurd.patch to the unstable
> branch, or create a new one (experimental?).

Since the hurd patch is already in Jessie, we want to keep it.  The goal now 
should be minimal churn.

Scott K



From haixing_xuan at highrock.com.cn  Thu Nov 20 19:02:58 2014
From: haixing_xuan at highrock.com.cn (=?utf-8?B?5ZGo5pS/?=)
Date: Fri, 21 Nov 2014 03:02:58 +0800
Subject: [Pkg-clamav-devel] (no subject)
Message-ID: <20141121030305657466@highrock.com.cn>

     ===?umgnysh3x?===
              suppern.?????
         ===????==  6b7lvk  ==????==

??????????????
?????????????????????????

????????????????????????????????????????????  17.???

 TEL? 13723404057    ??Q?1720595790   ???

                             ???????
                                    ???????
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141121/39a433bb/attachment.html>

From sebastian at breakpoint.cc  Thu Nov 20 22:01:10 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Thu, 20 Nov 2014 23:01:10 +0100
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
In-Reply-To: <20141119222746.GA6956@breakpoint.cc>
References: <20141119222746.GA6956@breakpoint.cc>
Message-ID: <20141120220110.GA14636@breakpoint.cc>

On 2014-11-19 23:27:46 [+0100], Sebastian Andrzej Siewior wrote:
> packaged & pushed to git. Built on sid-i386.
I packaged the Wheezy edition:
- dropped systemd support
  I don't really feel comfortable pushing this into wheezy at this point.
  We have it since -beta1 which was exp only the -rc1 was the only one
  thing that made it in Sid and Jessie. I am not sure how much testing
  it received and this makes a little nervous. This got increased today
  after reading in IRC "TCP: No tcp AF_INET SOCK_STREAM socket received
  from systemd.". While this problem deserves to be properly reported and
  fixed, it represents the little things that makes me not wanting to
  push this into Wheezy at this point. And there that thing where
  systemd does not parse freshclam's \r the way one would expect.

- I dropped the libmspack dep and we use the intree copy. I've been
  playing with multiple source tar files but didn't get it done (yet).
  
libclamav now depends on libllvm3.0 (for the first time in Wheezy).
Thankfully we have freshclam's dependeny fixed :)

I pushed this again into the wheezy branch. I think we should keep it
so we don't have conflicts in future (or stupid me for killing it the
last time). Should you have a wheezy branch locally, please remove it
via
	git branch -D wheezy

and after the next pull please checkout the wheezy branch via
	git checkout wheezy

which should checkout out the proper branch and add remote tracking for
it. The HEAD right now is f1c88fb0f74 (for double checking).

I've build it on i386 + amd64 and have the amd64 version running and it
seems to be fine?

Sebastian


From andreas.cadhalpun at googlemail.com  Thu Nov 20 22:25:55 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Thu, 20 Nov 2014 23:25:55 +0100
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
In-Reply-To: <1793674.vOe1q5aBlC@kitterman-optiplex-9020m>
References: <20141119222746.GA6956@breakpoint.cc>
 <546E37B3.4080308@googlemail.com>
 <1793674.vOe1q5aBlC@kitterman-optiplex-9020m>
Message-ID: <546E6A73.5020301@googlemail.com>

Hi,

On 20.11.2014 20:56, Scott Kitterman wrote:
> On Thursday, November 20, 2014 07:49:23 PM Andreas Cadhalpun wrote:
>> Due to the current freeze, I'm wondering if I should push changes like
>> dropping 0005-Workaround-a-bug-in-libc-on-Hurd.patch to the unstable
>> branch, or create a new one (experimental?).
>
> Since the hurd patch is already in Jessie, we want to keep it.  The goal now
> should be minimal churn.

Yes, but at some point it should be removed and I could already do that 
in a separate branch. Or should I wait until after the jessie release?

Best regards,
Andreas


From andreas.cadhalpun at googlemail.com  Thu Nov 20 22:49:28 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Thu, 20 Nov 2014 23:49:28 +0100
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
In-Reply-To: <20141120220110.GA14636@breakpoint.cc>
References: <20141119222746.GA6956@breakpoint.cc>
 <20141120220110.GA14636@breakpoint.cc>
Message-ID: <546E6FF8.10001@googlemail.com>

Hi Sebastian,

On 20.11.2014 23:01, Sebastian Andrzej Siewior wrote:
> On 2014-11-19 23:27:46 [+0100], Sebastian Andrzej Siewior wrote:
>> packaged & pushed to git. Built on sid-i386.
> I packaged the Wheezy edition:
> - dropped systemd support

Not a big deal, as I doubt that many wheezy users have systemd installed.

>    I don't really feel comfortable pushing this into wheezy at this point.
>    We have it since -beta1 which was exp only the -rc1 was the only one
>    thing that made it in Sid and Jessie. I am not sure how much testing
>    it received and this makes a little nervous.

Well, I'm using it since around March on jessie, but I haven't tested it 
with wheezy's systemd. (Running that is anyway not really supported, as 
it requires removing the essential sysvinit package.)

>    This got increased today
>    after reading in IRC "TCP: No tcp AF_INET SOCK_STREAM socket received
>    from systemd.". While this problem deserves to be properly reported and
>    fixed, it represents the little things that makes me not wanting to
>    push this into Wheezy at this point.

This is just an informational message, not even a warning. It is 
expected in the default Debian configuration, because no TCP socket is 
defined by default. As long as the next line says 'LOCAL: Received 
AF_UNIX SOCK_STREAM socket from systemd.' everything is fine.

If you think this message confuses people, it could also be demoted to a 
debug message, only shown with LogVerbose or even Debug.

>    And there that thing where
>    systemd does not parse freshclam's \r the way one would expect.

I just looked at that bug again and realized that I had missed the last 
comments. It seems we should fix this in clamav.
But this is really only a cosmetic issue.

> - I dropped the libmspack dep and we use the intree copy. I've been
>    playing with multiple source tar files but didn't get it done (yet).
>
> libclamav now depends on libllvm3.0 (for the first time in Wheezy).
> Thankfully we have freshclam's dependeny fixed :)

Yes, it's now as it should be. :)

> I pushed this again into the wheezy branch. I think we should keep it
> so we don't have conflicts in future (or stupid me for killing it the
> last time). Should you have a wheezy branch locally, please remove it
> via
> 	git branch -D wheezy
>
> and after the next pull please checkout the wheezy branch via
> 	git checkout wheezy
>
> which should checkout out the proper branch and add remote tracking for
> it. The HEAD right now is f1c88fb0f74 (for double checking).

That worked for me.

> I've build it on i386 + amd64 and have the amd64 version running and it
> seems to be fine?

Ok.

Best regards,
Andreas



From bigeasy at breakpoint.cc  Thu Nov 20 22:59:16 2014
From: bigeasy at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Thu, 20 Nov 2014 23:59:16 +0100
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
In-Reply-To: <546E37B3.4080308@googlemail.com>
References: <20141119222746.GA6956@breakpoint.cc>
 <546E37B3.4080308@googlemail.com>
Message-ID: <20141120225916.GB14636@breakpoint.cc>

On 2014-11-20 19:49:23 [+0100], Andreas Cadhalpun wrote:
> Hi,
Hi Andreas,

> >I remember that I wanted to fix llvm not to print the
> >individual libs but it clearly didn't happen :) Should I try to get it
> >done first or could that go upstream as-is?
> 
> In the long term I think LLVM should use pkg-config.
> Until then the this patch should go upstream.

okay, as written later, I will drop Kevin an Email and ask how he wishes
to proceed.

> This reminds me, that we have a rather large number of Debian patches:
>  * 0001-Change-paths-in-sample-conf-file-to-match-Debian.patch:
>    Debian specific
>  * 0002-Add-an-additional-n-after-the-number-in-the-pidfile.patch:
>    bb#10907, status?
merged, part of 0.98.6

>  * 0003-unit_tests-increment-test-timeout-from-40secs-to-5mi.patch:
>    This should go upstream, possibly with even longer timeout.
>    (It still timed out for me using qemu to emulate powerpc.)

we can increase it to 30min or even more. The -rc1 failed on SH4 due to
a timeout. But now I recall that upstream had the same problem and they
wanted to deal with it somehow. But this did not happen. So let me
forward it with 30min delay upstream and see what they say.

>  * 0004-Fix-compiling-on-Hurd.patch:
>    This should now go upstream.
okay.

>  * 0005-Workaround-a-bug-in-libc-on-Hurd.patch:
>    This can now be dropped, because #752237 got fixed.
?

>  * 0006-remove-unnecessary-harmful-flags-from-libclamav.pc.patch:
>    This should also go upstream.
I guess you forward those two (and #4) on your own or do you want me to
do it?

>  * 0007-libclamav-use-libmspack.patch:
>    bb#11062, targeted for 0.98.6
>  * 0008-Add-upstream-systemd-support-for-clamav-daemon-and-c.patch:
>    bb#10568, targeted for 0.99
>  * 0009-fix-ssize_t-size_t-off_t-printf-modifier.patch:
>    bb#11092, status?
I don't know anything in particular. But if they take patch #8 they have
to apply, too.

>  * 0010-hardcode-LLVM-linker-flag-because-llvm-config-return.patch:
>    Should go upstream, see bb#11146.

I try to drop Kevin later an Email an Cc you.

>  * 0011-Add-libmspack-library-from-upstream-without-unnecess.patch:
>    see bb#11062, targeted for 0.98.6
>  * 0012-allow-to-use-internal-libmspack-if-the-external-is-n.patch:
>    see bb#11062, targeted for 0.98.6
>  * 0013-fix-autoreconf-with-embedded-libmspack.patch:
>    see bb#11062, targeted for 0.98.6

lets hope that :)

>  * 0014-remove-AC_CONFIG_SRCDIR-llvm-configure-from-libclama.patch:
>    This should go upstream, as configure.ac doesn't use LLVM's
>    configure anymore.
>  * 0015-bb-10731-Allow-to-specificy-a-group-for-the-socket-o.patch:
>    bb#10731, targeted for 0.98.6
>  * 0016-clamav-milter-add-additinal-SMFIF_-flags-before-invo.patch:
>    bb#10731, targeted for 0.98.6
>  * 0017-Bump-.so-version-number.patch:
>    backported from upstream/master
>  * 0018-llvm-don-t-use-system-libs.patch:
>    Should go upstream together with 0010.

All in all it does not look that bad. Most things should get in for next
.6. But then, they wanted to make a "quick" .6 due to patch #17.

> Due to the current freeze, I'm wondering if I should push changes like
> dropping 0005-Workaround-a-bug-in-libc-on-Hurd.patch to the unstable branch,
> or create a new one (experimental?).

Say you create a branch "after-freeze". Can you simply merge it into the
unstable branch once the freeze is over? I doubt this will work due to
the way git-dpm works. So a mental note (or a written one somewhere) would
be better. In case of this #5 patch, if we can't (or should not) drop it
I think nobody would mind if you add this "mental note" to the patch
description.

> Best regards,
> Andreas

Sebastian


From bankofficemail77 at yahoo.pt  Thu Nov 20 23:25:54 2014
From: bankofficemail77 at yahoo.pt (Sarmi Nasri)
Date: Thu, 20 Nov 2014 23:25:54 +0000 (UTC)
Subject: [Pkg-clamav-devel] =?utf-8?q?PR=C3=8DSNE_MEZI_MNOU_A_TEBOU?=
Message-ID: <83988269.918269.1416525954070.JavaMail.yahoo@jws11119.mail.ir2.yahoo.com>

?Zdrav?m!


Po hodne uva?ov?n? na toto t?ma, rozhodl jsem se v?s kontaktovat, jmenuji se Sarmi Nasri, ??d?m o v?? souhlas k v?m jako dal?? pr?buzn? na zemrel?ho z?kazn?ka na?? banky, kter? zemrel lety bez stanoven?ch dedicu tak, ?e banka nebude zabavit jeho vklad (EU ? 2.9M) a vr?tit jej vl?de Benin.

Tak? si v?imnete, ?e zemrel? vklad m? otevrenou pr?jemce a ka?d? cizinec mu?e d?t n?rok pres fondu bez ohledu na Va?e kmene, jm?na a n?bo?enstv? za predpokladu, ?e m?te tajn? informace o zabezpecen? souboru pl??te zesnul?ho n?nosu, kter? jsem se vybavit, aby v?s na po??d?n? org?ny m? banky.
?
J? jsem jen kontaktovat v?s jako cizinec, proto?e tyto prostredky nemohou b?t schv?len do m?stn? banky zde ale mu?e b?t schv?len pouze na zahranicn? bankovn? ?cet, proto?e pen?ze jsou na ?ctu EU euro a b?val? majitel ?ctu Late pan Fernando R. Olmos, je z va?eho regionu pr?li?. M?m c?lem je, aby zdroj na poctiv? a duveryhodn? osoba, kter? mohu sverit tyto financn? prostredky a kdo bude pusobit jako spr?vce do doby, ne? muj pr?jezd ve va?? zemi, proto?e m? doby uvolnen? ze slu?by je bl?zko.
?
V?ce informac? bude v?m d?no, jakmile odpoved na muj soukrom? e-mail
?
pozdravy
Sarmi Nasri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141120/d825f9c4/attachment.html>

From olaf.meeuwissen at avasys.jp  Thu Nov 20 23:59:43 2014
From: olaf.meeuwissen at avasys.jp (Olaf Meeuwissen)
Date: Fri, 21 Nov 2014 08:59:43 +0900
Subject: [Pkg-clamav-devel] Bug#770403: clamav-freshclam: Don't log progress
	indication to syslog
Message-ID: <874mttxw28.fsf@helix.nebula.avasys.jp>

Package: clamav-freshclam
Version: 0.98.5~rc1+dfsg-3
Severity: normal

Dear Maintainer,

Since upgrading from 0.98.4+dfsg-2+b1 to 0.98.5~rc1+dfsg-2 on
2014-10-30, freshclam has been sending progress indication messages to
syslog.  The last time I made any changes below /etc/clamav was on
2014-06-10.

For a download of daily.cvd that results in many, many long lines like
this one (truncated! for brevity):

  Nov 21 03:53:18 localhost freshclam[16839]: Downloading daily.cvd [  0%]#015Downloading daily.cvd [  0%]#015Downloading daily.cvd [  0%]#015Downloading daily.cvd [  0%]#015Downloading daily.cvd [  0%]#015Downloading daily.cvd [  0%]#015Downloading daily.cvd [  0%]#015Downloading daily.cvd [  0%]

While a single message for the download may be syslog material, I don't
think that real-time progress indication is something that should be
logged.  That kind of information is only useful when running the
program interactively.

Please disable progress logging by default (for non-interactive use).

-- Package-specific info:
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141121/e7aaa3a7/attachment.ksh>
-------------- next part --------------

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-updates'), (500, 'stable-updates'), (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages clamav-freshclam depends on:
ii  clamav-base            0.98.5~rc1+dfsg-3
ii  debconf [debconf-2.0]  1.5.53
ii  dpkg                   1.17.21
ii  init-system-helpers    1.21
ii  libc6                  2.19-13
ii  libclamav6             0.98.5~rc1+dfsg-3
ii  libssl1.0.0            1.0.1j-1
ii  logrotate              3.8.7-1+b1
ii  lsb-base               4.1+Debian13+nmu1
ii  procps                 2:3.3.9-8
ii  ucf                    3.0030
ii  zlib1g                 1:1.2.8.dfsg-2

clamav-freshclam recommends no packages.

Versions of packages clamav-freshclam suggests:
pn  apparmor     <none>
pn  clamav-docs  <none>

-- debconf information:
  clamav-freshclam/Bytecode: true
* clamav-freshclam/update_interval: 24
* clamav-freshclam/PrivateMirror:
  clamav-freshclam/SafeBrowsing: false
* clamav-freshclam/proxy_user:
* clamav-freshclam/autoupdate_freshclam: daemon
  clamav-freshclam/LogRotate: true
* clamav-freshclam/http_proxy: http://127.0.0.1:3128/
* clamav-freshclam/local_mirror: db.local.clamav.net
  clamav-freshclam/internet_interface:
* clamav-freshclam/NotifyClamd: true

-- 
Olaf Meeuwissen, LPIC-2           FLOSS Engineer -- AVASYS CORPORATION
FSF Associate Member #1962               Help support software freedom
                 http://www.fsf.org/jf?referrer=1962

From ftpmaster at ftp-master.debian.org  Fri Nov 21 17:34:12 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 21 Nov 2014 17:34:12 +0000
Subject: [Pkg-clamav-devel] Processing of
	clamav_0.98.5+dfsg-0+deb7u1_amd64.changes
Message-ID: <E1Xrs60-0007R4-AK@franck.debian.org>

clamav_0.98.5+dfsg-0+deb7u1_amd64.changes uploaded successfully to localhost
along with the files:
  clamav_0.98.5+dfsg-0+deb7u1.dsc
  clamav_0.98.5+dfsg.orig.tar.xz
  clamav_0.98.5+dfsg-0+deb7u1.debian.tar.gz
  clamav-base_0.98.5+dfsg-0+deb7u1_all.deb
  clamav-docs_0.98.5+dfsg-0+deb7u1_all.deb
  clamav-dbg_0.98.5+dfsg-0+deb7u1_amd64.deb
  clamav_0.98.5+dfsg-0+deb7u1_amd64.deb
  libclamav-dev_0.98.5+dfsg-0+deb7u1_amd64.deb
  libclamav6_0.98.5+dfsg-0+deb7u1_amd64.deb
  clamav-daemon_0.98.5+dfsg-0+deb7u1_amd64.deb
  clamav-testfiles_0.98.5+dfsg-0+deb7u1_all.deb
  clamav-freshclam_0.98.5+dfsg-0+deb7u1_amd64.deb
  clamav-milter_0.98.5+dfsg-0+deb7u1_amd64.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Fri Nov 21 17:48:48 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 21 Nov 2014 17:48:48 +0000
Subject: [Pkg-clamav-devel] clamav_0.98.5+dfsg-0+deb7u1_amd64.changes
	ACCEPTED into proposed-updates->stable-new
Message-ID: <E1XrsK8-0000CM-9X@franck.debian.org>

Mapping stable to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 21 Nov 2014 08:42:58 -0500
Source: clamav
Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamav-testfiles clamav-freshclam clamav-milter
Architecture: source all amd64
Version: 0.98.5+dfsg-0+deb7u1
Distribution: stable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Scott Kitterman <scott at kitterman.com>
Description: 
 clamav     - anti-virus utility for Unix - command-line interface
 clamav-base - anti-virus utility for Unix - base package
 clamav-daemon - anti-virus utility for Unix - scanner daemon
 clamav-dbg - debug symbols for ClamAV
 clamav-docs - anti-virus utility for Unix - documentation
 clamav-freshclam - anti-virus utility for Unix - virus database update utility
 clamav-milter - anti-virus utility for Unix - sendmail integration
 clamav-testfiles - anti-virus utility for Unix - test files
 libclamav-dev - anti-virus utility for Unix - development files
 libclamav6 - anti-virus utility for Unix - library
Closes: 636877 636881 753973 763300 763634 769384
Changes: 
 clamav (0.98.5+dfsg-0+deb7u1) stable; urgency=medium
 .
   [ Sebastian Andrzej Siewior ]
   * import new upsstream version, refresh patches (Closes: #763300):
     updated:
      - hardcode-LLVM-linker-flag-because-llvm-config-return
   * Add fix-ssize_t-size_t-off_t-printf-modifier.patch. This in conjunction
     with _FILE_OFFSET_BITS=64 should fix test suite failures due to wrong
     printf format modifier.
   * Add "Bump-.so-version-number", likely the RPM version of 769384.
   * Add "llvm-don-t-use-system-libs", since we don't link against .a libs, we
     don't need the deps either.
   * Add "clamav-milter-add-additinal-SMFIF_-flags-before-invo" to make sure
     clamav-milter is able to add/replace X-Virus-Status + X-Virus-Scanned
     header flags.
   * Add bb-10731-Allow-to-specificy-a-group-for-the-socket-o.patch as a
     prepation to allow running clamav-milter in a group of which the user is
     not part of.
   * Init milter socket before dropping root permissions (Closes: #636881).
   * Drop SOCKET_RWGROUP and start milter as root and let it drop permissions
     later. Now there is no need for /etc/default/clamav-milter.
     (Closes: #636877)
   * Add "bb-10731-Allow-to-specificy-a-group-for-the-socket-o" as dependecy
     for "clamav-milter-add-additinal-SMFIF_-flags-before-invo"
   * Update embedded copy of libmspack to be used as fallback, when libmspack-dev
     is not available.
   * Convert debian/copyright to DEP-5 copyright format 1.0.
   * Ignore test failures on hurd, because sockets don't work in the build
     chroot on the buildd.
   * Fix implicit declaration warnings.
   * Switch Vcs-Browser to the cgit interface.
   * Compile with large file support to avoid incompatibility with libmspack.
 .
   [ Scott Kitterman ]
   * Update libclamav6: embedded-library lintian override for new libclamav6 so
     version
   * Fix hyphen-used-as-minus-sign in sigtool.1 and clamsubmit.1
   * Add source:Version minimum version requirements for freshclam to clamav,
     clamav-daemon, and clamav-milter
   * Run wrap-and-sort to improve readability of debian/control and other
     packaging files
   * Consolidate unstable/experimental changelog entries
   * Adjust revision number to ensure smooth upgrades to jessie
 .
   [ Andreas Cadhalpun ]
   * Bump the version requirement for the cl_retflevel symbol to 0.98.5~rc1,
     because the CL_FLEVEL, which this function returns, increased in that
     version the last time.
     This ensures that the functionality level of libclamav is always new
     enough. (Closes: #769384)
   * Add 4 new symbols to libclamav6.symbols.
   * Fix debian/copyright.
   * Update lintian overrides.
   * Update Standards-Version to 3.9.6 (no changes needed).
   * Remove unnecessary shlibs:Depends from clamav-dbg.
   * Add patches to support LLVM 3.5.
   * Add hardcode-LLVM-linker-flag-because-llvm-config-return.patch to make
     clamav link to LLVM dynamically, which considerably decreases the size
     of libclamav.
   * Drop explicit po2debconf handling from debian/rules. It has been unused,
     because the templates are nowadays handled by dh_installdebconf.
   * Remove superfluous debian/*.dirs files and unneeded directories from the
     remaining debian/*.dirs files.
   * Don't mention non-existant file libclamav/crypto.h in debian/copyright.
   * Add lintian overrides for false positive tags:
      - space-in-std-shortname-in-dep5-copyright
      - wildcard-matches-nothing-in-dep5-copyright
      - package-contains-timestamped-gzip
   * Fix the watch file to correctly mangle beta version numbers.
   * Switch back to the sourceforge.net redirector, since #752384 got fixed.
   * Don't suggest daemon on hurd, as it doesn't build there.
   * Let debian/script include /etc/clamav/clamav-milter.conf in bug reports,
     even if clamconf from clamav-daemon is not available.
   * Install all documentation PDFs, including phishsigs_howto.pdf.
   * Remove unused function wait_for_socket from clamav-milter.init.in.
   * Simplify libclamav6.install file by using a wildcard.
   * Improve comments in debian/rules.
   * Stop ignoring test failures on hurd, because hurd's libc got fixed.
   * Don't use '--with systemd' on wheezy, where dh_systemd is not available.
   * Depend on libjson0-dev and enable libjson
 .
   [ Frans Spiesschaert ]
   * Updated Dutch Debconf template translation (Closes: #763634)
 .
   [ Joe Dalton ]
   * Updated Danish Debconf template translation (Closes: #753973)
Checksums-Sha1: 
 4a7c9953ec610d0e8a327fb484a19110301b50b7 2906 clamav_0.98.5+dfsg-0+deb7u1.dsc
 e7df5b8654c165afa4a299cb914c2d6afcf05788 5286536 clamav_0.98.5+dfsg.orig.tar.xz
 0948892788e1c283baef93bdcbd224cdd41b64bf 842503 clamav_0.98.5+dfsg-0+deb7u1.debian.tar.gz
 d9807b059c856eb7cedd3b6a5c31f29e5431932e 277246 clamav-base_0.98.5+dfsg-0+deb7u1_all.deb
 851b274a166c3be510fdf202c416839b7ec9069e 927638 clamav-docs_0.98.5+dfsg-0+deb7u1_all.deb
 c99a5fd61de4aaf2c6f234ada59688f49a4ab250 3876278 clamav-dbg_0.98.5+dfsg-0+deb7u1_amd64.deb
 4763a78b120cd275c244300be3e8b1b6a41c2df6 403170 clamav_0.98.5+dfsg-0+deb7u1_amd64.deb
 f9e497419b0537cdb77120109d7d34748e8fa24b 241012 libclamav-dev_0.98.5+dfsg-0+deb7u1_amd64.deb
 8c210ecbeaa6b06d795bd3f528379f3d1dcfc3f4 1086272 libclamav6_0.98.5+dfsg-0+deb7u1_amd64.deb
 aff5ab48e698b935d9496471e29359699f1bf498 539850 clamav-daemon_0.98.5+dfsg-0+deb7u1_amd64.deb
 e6047a37102723a506a11bbc2a3adde9033bd5ed 5281140 clamav-testfiles_0.98.5+dfsg-0+deb7u1_all.deb
 5eb73200ab14e8b3c0f2537d724bb578ad259402 349500 clamav-freshclam_0.98.5+dfsg-0+deb7u1_amd64.deb
 43cd1f7bd3b5f77cef0e77420915380d8ff6abbc 386158 clamav-milter_0.98.5+dfsg-0+deb7u1_amd64.deb
Checksums-Sha256: 
 6ea6a121e8c94ff2d3bdf4d363dd48b36ccc02cb99a30c9f1614253f68beca4f 2906 clamav_0.98.5+dfsg-0+deb7u1.dsc
 0e353f646a0add17ca42e75ccfc7edf4f8b7c1acc972a86c317543f6b365db2d 5286536 clamav_0.98.5+dfsg.orig.tar.xz
 6d55db4545792ef99a729f6e6740a7acc66875665018203395bcedd977e57df5 842503 clamav_0.98.5+dfsg-0+deb7u1.debian.tar.gz
 279be71e8ea51b45b283c924b0eeeee97544746434a0c2ee580781a7def4a80d 277246 clamav-base_0.98.5+dfsg-0+deb7u1_all.deb
 17cb302e4e5f57ca6dd1fcefc132214f84fde59b20a2196eb206bc597395cf78 927638 clamav-docs_0.98.5+dfsg-0+deb7u1_all.deb
 17be7604144b6239c73587bd4a3ef40a7d1d2f700749997c9dc3c96804251d46 3876278 clamav-dbg_0.98.5+dfsg-0+deb7u1_amd64.deb
 492e282e9473fec1be17d8a5db2cb66adf2f3515975e3b3890157ac5807a0a71 403170 clamav_0.98.5+dfsg-0+deb7u1_amd64.deb
 e7f40d36fae80b5df1422c08143de56c741f1eb483d78f6593a01b1ef8821d38 241012 libclamav-dev_0.98.5+dfsg-0+deb7u1_amd64.deb
 c6c60fa8916ac6b0b87682e3fb0728097dd43d354c4121975de266f3eb01980e 1086272 libclamav6_0.98.5+dfsg-0+deb7u1_amd64.deb
 cfe65e260f4fe18f6a9637308a823d85a03bbf81c138ac3f9d5f17a08a972f3d 539850 clamav-daemon_0.98.5+dfsg-0+deb7u1_amd64.deb
 9701aaa7ebd395c5efc75e4d0cff7292b9e98b919f1a1ab21a1df5e012e7ffec 5281140 clamav-testfiles_0.98.5+dfsg-0+deb7u1_all.deb
 4305c6eff70ddec929c6d0493540112eb72c5f58a05513904199339e2b8cdaca 349500 clamav-freshclam_0.98.5+dfsg-0+deb7u1_amd64.deb
 9c881f97605bf707c66abfba91a789f3ea0065f910f869f4b5a9a93c7e099fc9 386158 clamav-milter_0.98.5+dfsg-0+deb7u1_amd64.deb
Files: 
 2a4b6749508e03b136024c008f093703 2906 utils optional clamav_0.98.5+dfsg-0+deb7u1.dsc
 34d5e8698e57ce45c4a8c3c2cb211cf3 5286536 utils optional clamav_0.98.5+dfsg.orig.tar.xz
 41310c4f5deefe2e975d1b2ef31b585f 842503 utils optional clamav_0.98.5+dfsg-0+deb7u1.debian.tar.gz
 13bb7655e90493fd623513c29e38af62 277246 utils optional clamav-base_0.98.5+dfsg-0+deb7u1_all.deb
 abefaf429b73b61c53f326233c676add 927638 doc optional clamav-docs_0.98.5+dfsg-0+deb7u1_all.deb
 dc26e608810f666958a08beb07c1e07e 3876278 debug extra clamav-dbg_0.98.5+dfsg-0+deb7u1_amd64.deb
 736a4ecb8e1ed50ccae7b6b54e6341ff 403170 utils optional clamav_0.98.5+dfsg-0+deb7u1_amd64.deb
 004218cb8f691be81000a920cc8bc1f5 241012 libdevel optional libclamav-dev_0.98.5+dfsg-0+deb7u1_amd64.deb
 83522ce3207031df8dfdb0076508aa0f 1086272 libs optional libclamav6_0.98.5+dfsg-0+deb7u1_amd64.deb
 704580604ace571b196d875dc2ba01ce 539850 utils optional clamav-daemon_0.98.5+dfsg-0+deb7u1_amd64.deb
 e97170c1160669807cf205b0bb287490 5281140 utils optional clamav-testfiles_0.98.5+dfsg-0+deb7u1_all.deb
 845f9aeb5295251deefaa91f3f41d87b 349500 utils optional clamav-freshclam_0.98.5+dfsg-0+deb7u1_amd64.deb
 84f275bf199acff3243910489312c20d 386158 utils extra clamav-milter_0.98.5+dfsg-0+deb7u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=rtnu
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From luv2charitys at gmail.com  Fri Nov 21 19:15:24 2014
From: luv2charitys at gmail.com (luv2charitys at gmail.com)
Date: Fri, 21 Nov 2014 13:15:24 -0600
Subject: [Pkg-clamav-devel] Charity Work
Message-ID: <HO-SRV2aVPU5G7VUR8t00018ea6@office.horkans.com>

Hello,this is Mr Paul N,i sent you an email on charity work but i am yet to hear fom you,do reply with this code CHA-2015 to my email address paulcharity at qq.com  i Look forward to hearing from you this time,God bless  Brother Paul


From sebastian at breakpoint.cc  Fri Nov 21 21:08:41 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Fri, 21 Nov 2014 22:08:41 +0100
Subject: [Pkg-clamav-devel] Bug#770403: Bug#770403: clamav-freshclam: Don't
	log progress indication to syslog
In-Reply-To: <874mttxw28.fsf@helix.nebula.avasys.jp>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
Message-ID: <20141121210841.GA20956@breakpoint.cc>

On 2014-11-21 08:59:43 [+0900], Olaf Meeuwissen wrote:
> Dear Maintainer,
Hi Olaf,

> Since upgrading from 0.98.4+dfsg-2+b1 to 0.98.5~rc1+dfsg-2 on
> 2014-10-30, freshclam has been sending progress indication messages to
> syslog.  The last time I made any changes below /etc/clamav was on
> 2014-06-10.

Do you have systemd enabled by any chance?

Sebastian


From andreas.cadhalpun at googlemail.com  Fri Nov 21 23:42:46 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Sat, 22 Nov 2014 00:42:46 +0100
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 packaged
In-Reply-To: <20141120225916.GB14636@breakpoint.cc>
References: <20141119222746.GA6956@breakpoint.cc>
 <546E37B3.4080308@googlemail.com> <20141120225916.GB14636@breakpoint.cc>
Message-ID: <546FCDF6.9000400@googlemail.com>

Hi Sebastian,

On 20.11.2014 23:59, Sebastian Andrzej Siewior wrote:
> On 2014-11-20 19:49:23 [+0100], Andreas Cadhalpun wrote:
>> In the long term I think LLVM should use pkg-config.
>> Until then the this patch should go upstream.
>
> okay, as written later, I will drop Kevin an Email and ask how he wishes
> to proceed.

Thanks.

>> This reminds me, that we have a rather large number of Debian patches:
>>   * 0001-Change-paths-in-sample-conf-file-to-match-Debian.patch:
>>     Debian specific
>>   * 0002-Add-an-additional-n-after-the-number-in-the-pidfile.patch:
>>     bb#10907, status?
> merged, part of 0.98.6

Good. :)

>>   * 0003-unit_tests-increment-test-timeout-from-40secs-to-5mi.patch:
>>     This should go upstream, possibly with even longer timeout.
>>     (It still timed out for me using qemu to emulate powerpc.)
>
> we can increase it to 30min or even more. The -rc1 failed on SH4 due to
> a timeout. But now I recall that upstream had the same problem and they
> wanted to deal with it somehow. But this did not happen. So let me
> forward it with 30min delay upstream and see what they say.

OK.

>>   * 0004-Fix-compiling-on-Hurd.patch:
>>     This should now go upstream.
> okay.

Forwarded: bb#11200

>>   * 0005-Workaround-a-bug-in-libc-on-Hurd.patch:
>>     This can now be dropped, because #752237 got fixed.
> ?
>
>>   * 0006-remove-unnecessary-harmful-flags-from-libclamav.pc.patch:
>>     This should also go upstream.

Forwarded to: bb#11201

> I guess you forward those two (and #4) on your own or do you want me to
> do it?

I've forwarded them myself after verifying that #4 works without #5 now 
and amending #6 by moving @LIBCLAMAV_LIBS@ to Libs.private instead of 
completely removing it, because it is necessary for linking statically.

>>   * 0007-libclamav-use-libmspack.patch:
>>     bb#11062, targeted for 0.98.6
>>   * 0008-Add-upstream-systemd-support-for-clamav-daemon-and-c.patch:
>>     bb#10568, targeted for 0.99
>>   * 0009-fix-ssize_t-size_t-off_t-printf-modifier.patch:
>>     bb#11092, status?
> I don't know anything in particular. But if they take patch #8 they have
> to apply, too.

I see.

>>   * 0010-hardcode-LLVM-linker-flag-because-llvm-config-return.patch:
>>     Should go upstream, see bb#11146.
>
> I try to drop Kevin later an Email an Cc you.

OK.

>>   * 0011-Add-libmspack-library-from-upstream-without-unnecess.patch:
>>     see bb#11062, targeted for 0.98.6
>>   * 0012-allow-to-use-internal-libmspack-if-the-external-is-n.patch:
>>     see bb#11062, targeted for 0.98.6
>>   * 0013-fix-autoreconf-with-embedded-libmspack.patch:
>>     see bb#11062, targeted for 0.98.6
>
> lets hope that :)

Yes. :)

>>   * 0014-remove-AC_CONFIG_SRCDIR-llvm-configure-from-libclama.patch:
>>     This should go upstream, as configure.ac doesn't use LLVM's
>>     configure anymore.

Forwarded to: bb#11202

>>   * 0015-bb-10731-Allow-to-specificy-a-group-for-the-socket-o.patch:
>>     bb#10731, targeted for 0.98.6
>>   * 0016-clamav-milter-add-additinal-SMFIF_-flags-before-invo.patch:
>>     bb#10731, targeted for 0.98.6
>>   * 0017-Bump-.so-version-number.patch:
>>     backported from upstream/master
>>   * 0018-llvm-don-t-use-system-libs.patch:
>>     Should go upstream together with 0010.
>
> All in all it does not look that bad. Most things should get in for next
> .6. But then, they wanted to make a "quick" .6 due to patch #17.

I really think they should use the version numbers better to distinguish 
feature releases from bugfix releases...

>> Due to the current freeze, I'm wondering if I should push changes like
>> dropping 0005-Workaround-a-bug-in-libc-on-Hurd.patch to the unstable branch,
>> or create a new one (experimental?).
>
> Say you create a branch "after-freeze". Can you simply merge it into the
> unstable branch once the freeze is over? I doubt this will work due to
> the way git-dpm works.

It might work, if there were no other changes to the patches in the 
meantime. But we probably shouldn't bet on that.

> So a mental note (or a written one somewhere) would
> be better. In case of this #5 patch, if we can't (or should not) drop it
> I think nobody would mind if you add this "mental note" to the patch
> description.

I've now added a note about removing this patch after the release to my 
TODO list.

Best regards,
Andreas


From xypron.glpk at gmx.de  Sat Nov 22 11:30:14 2014
From: xypron.glpk at gmx.de (Heinrich Schuchardt)
Date: Sat, 22 Nov 2014 12:30:14 +0100
Subject: [Pkg-clamav-devel] Bug#770581: freshclam: Can't save PID to file
	/var/run/clamav/freshclam.pid: No such file or directory
Message-ID: <547073C6.4000702@gmx.de>

Package: clamav-freshclam
Version: 0.98.5~rc1+dfsg-4
Severity: normal

Dear Maintainer,

after a fresh install I found the following in the clamav-freshclam log:

ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such 
file or directory

I suggest the directory /var/run/clamav should be created by the 
preinstall procedure of clamav-freshclam. The new directory should be 
owned by user clamav.

Best regards

Heinrich Schuchardt

-- Package-specific info:
--- configuration ---
# Automatically created by the clamav-freshclam postinst
# Comments will get lost when you reconfigure the clamav-freshclam package

DatabaseOwner clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogVerbose false
LogSyslog false
LogFacility LOG_LOCAL6
LogFileMaxSize 0
LogRotate true
LogTime true
Foreground false
Debug false
MaxAttempts 5
DatabaseDirectory /var/lib/clamav
DNSDatabaseInfo current.cvd.clamav.net
AllowSupplementaryGroups false
PidFile /var/run/clamav/freshclam.pid
ConnectTimeout 30
ReceiveTimeout 30
TestDatabases yes
ScriptedUpdates yes
CompressLocalDatabase no
SafeBrowsing false
Bytecode true
NotifyClamd /etc/clamav/clamd.conf
# Check for new database 24 times a day
Checks 24
DatabaseMirror db.local.clamav.net
DatabaseMirror database.clamav.net

--- data dir ---
total 8
drwxr-xr-x 2 clamav clamav 4096 Nov 22 08:19 
clamav-72c34e83f41533b537d20f4349ed7998.tmp
-rw------- 1 clamav clamav   52 Nov 22 08:19 mirrors.dat

-- System Information:
Debian Release: jessie/sid
   APT prefers testing-updates
   APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: mips (mips64)

Kernel: Linux 3.18.0-rc4+ (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) (ignored: 
LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages clamav-freshclam depends on:
ii  clamav-base            0.98.5~rc1+dfsg-4
ii  debconf [debconf-2.0]  1.5.53
ii  dpkg                   1.17.21
ii  init-system-helpers    1.21
ii  libc6                  2.19-12
ii  libclamav6             0.98.5~rc1+dfsg-3
ii  libssl1.0.0            1.0.1j-1
ii  logrotate              3.8.7-1+b1
ii  lsb-base               4.1+Debian13+nmu1
ii  procps                 2:3.3.9-8
ii  ucf                    3.0030
ii  zlib1g                 1:1.2.8.dfsg-2

clamav-freshclam recommends no packages.

Versions of packages clamav-freshclam suggests:
pn  apparmor     <none>
pn  clamav-docs  <none>

-- debconf information:
   clamav-freshclam/local_mirror: db.local.clamav.net
   clamav-freshclam/proxy_user:
   clamav-freshclam/internet_interface:
   clamav-freshclam/LogRotate: true
   clamav-freshclam/PrivateMirror:
   clamav-freshclam/http_proxy:
   clamav-freshclam/NotifyClamd: true
   clamav-freshclam/update_interval: 24
   clamav-freshclam/Bytecode: true
   clamav-freshclam/autoupdate_freshclam: daemon
   clamav-freshclam/SafeBrowsing: false


From owner at bugs.debian.org  Sat Nov 22 14:57:09 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 22 Nov 2014 14:57:09 +0000
Subject: [Pkg-clamav-devel] Processed: Re: Bug#767350: journald: does not
	respect carriage return
References: <5470A37A.8070104@googlemail.com>
 <alpine.DEB.2.11.1410301309060.5263@cantor.unex.es>
Message-ID: <handler.s.B767350.141666803515022.transcript@bugs.debian.org>

Processing control commands:

> reassign -1 clamav-freshclam 0.98.5~rc1+dfsg-2
Bug #767350 [systemd] journald: does not respect carriage return
Bug reassigned from package 'systemd' to 'clamav-freshclam'.
No longer marked as found in versions systemd/215-5.
Ignoring request to alter fixed versions of bug #767350 to the same values previously set
Bug #767350 [clamav-freshclam] journald: does not respect carriage return
Marked as found in versions clamav/0.98.5~rc1+dfsg-2.
> retitle -1 freshclam: use progress messages only on ttys
Bug #767350 [clamav-freshclam] journald: does not respect carriage return
Changed Bug title to 'freshclam: use progress messages only on ttys' from 'journald: does not respect carriage return'
> tags -1 pending
Bug #767350 [clamav-freshclam] freshclam: use progress messages only on ttys
Added tag(s) pending.

-- 
767350: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767350
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From andreas.cadhalpun at googlemail.com  Sat Nov 22 15:04:23 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Sat, 22 Nov 2014 16:04:23 +0100
Subject: [Pkg-clamav-devel] Bug#770403: clamav-freshclam: Don't log progress
	indication to syslog
In-Reply-To: <874mttxw28.fsf@helix.nebula.avasys.jp>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
Message-ID: <5470A5F7.2090004@googlemail.com>

Control: merge 767350 -1

Hi Olaf,

On 21.11.2014 00:59, Olaf Meeuwissen wrote:
> Since upgrading from 0.98.4+dfsg-2+b1 to 0.98.5~rc1+dfsg-2 on
> 2014-10-30, freshclam has been sending progress indication messages to
> syslog.  The last time I made any changes below /etc/clamav was on
> 2014-06-10.

This is a duplicate of #767350, thus I'm merging the bugs.

> While a single message for the download may be syslog material, I don't
> think that real-time progress indication is something that should be
> logged.  That kind of information is only useful when running the
> program interactively.
>
> Please disable progress logging by default (for non-interactive use).

The fix I just pushed to git ensures that real-time progress indication 
only goes to ttys and only the last message to the journal/syslog.

Best regards,
Andreas


From owner at bugs.debian.org  Sat Nov 22 15:06:20 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 22 Nov 2014 15:06:20 +0000
Subject: [Pkg-clamav-devel] Processed: Re: Bug#770403: clamav-freshclam:
 Don't log progress indication to syslog
References: <5470A5F7.2090004@googlemail.com>
 <874mttxw28.fsf@helix.nebula.avasys.jp>
Message-ID: <handler.s.B770403.141666867318850.transcript@bugs.debian.org>

Processing control commands:

> merge 767350 -1
Bug #767350 [clamav-freshclam] freshclam: use progress messages only on ttys
Bug #770403 [clamav-freshclam] clamav-freshclam: Don't log progress indication to syslog
Marked as found in versions clamav/0.98.5~rc1+dfsg-2.
Added tag(s) pending.
Bug #767350 [clamav-freshclam] freshclam: use progress messages only on ttys
Marked as found in versions clamav/0.98.5~rc1+dfsg-3.
Merged 767350 770403

-- 
767350: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767350
770403: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770403
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From owner at bugs.debian.org  Sat Nov 22 15:18:09 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 22 Nov 2014 15:18:09 +0000
Subject: [Pkg-clamav-devel] Processed (with 1 errors): Re: Bug#770581:
 freshclam: Can't save PID to file /var/run/clamav/freshclam.pid: No such
 file or directory
References: <5470A869.4090309@googlemail.com> <547073C6.4000702@gmx.de>
Message-ID: <handler.s.B770581.141666929923226.transcript@bugs.debian.org>

Processing control commands:

> forcemerge 767353 -1
Bug #767353 [clamav] clamav: ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory
Unable to merge bugs because:
package of #770581 is 'clamav-freshclam' not 'clamav'
Failed to forcibly merge 767353: Did not alter merged bugs


-- 
767353: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767353
770581: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770581
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From andreas.cadhalpun at googlemail.com  Sat Nov 22 15:14:49 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Sat, 22 Nov 2014 16:14:49 +0100
Subject: [Pkg-clamav-devel] Bug#770581: freshclam: Can't save PID to file
	/var/run/clamav/freshclam.pid: No such file or directory
In-Reply-To: <547073C6.4000702@gmx.de>
References: <547073C6.4000702@gmx.de>
Message-ID: <5470A869.4090309@googlemail.com>

Control: forcemerge 767353 -1

Hi Heinrich,

this is a duplicate of 767353, thus I'm merging them.

On 22.11.2014 12:30, Heinrich Schuchardt wrote:
> after a fresh install I found the following in the clamav-freshclam log:
>
> ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such
> file or directory

You're using systemd as init, which does not need the PID file.

> I suggest the directory /var/run/clamav should be created by the
> preinstall procedure of clamav-freshclam. The new directory should be
> owned by user clamav.

I think the correct fix would be to move the PIDFile setting from the 
configuration files to the sysvinit init script and to use the --pid 
option there, because it is not needed, when using systemd.

Best regards,
Andreas


From owner at bugs.debian.org  Sat Nov 22 15:24:16 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 22 Nov 2014 15:24:16 +0000
Subject: [Pkg-clamav-devel] Processed (with 1 errors): merging #770581 into
	#767353
References: <5470A9EF.5030603@googlemail.com>
Message-ID: <handler.s.C.141666968925237.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> reassign 770581 clamav-freshclam
Bug #770581 [clamav-freshclam] freshclam: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory
Ignoring request to reassign bug #770581 to the same package
> forcemerge 767353 770581
Bug #767353 [clamav] clamav: ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory
Unable to merge bugs because:
package of #770581 is 'clamav-freshclam' not 'clamav'
Failed to forcibly merge 767353: Did not alter merged bugs

> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
767353: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767353
770581: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770581
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From owner at bugs.debian.org  Sat Nov 22 15:30:15 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 22 Nov 2014 15:30:15 +0000
Subject: [Pkg-clamav-devel] Processed: merging #770581 into #767353
References: <5470AB2D.7060403@googlemail.com>
Message-ID: <handler.s.C.141667000727850.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> reassign 767353 clamav-freshclam
Bug #767353 [clamav] clamav: ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory
Bug reassigned from package 'clamav' to 'clamav-freshclam'.
No longer marked as found in versions clamav/0.98.5~rc1+dfsg-2.
Ignoring request to alter fixed versions of bug #767353 to the same values previously set
> forcemerge 767353 770581
Bug #767353 [clamav-freshclam] clamav: ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory
Bug #767353 [clamav-freshclam] clamav: ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory
Marked as found in versions clamav/0.98.5~rc1+dfsg-4.
Bug #770581 [clamav-freshclam] freshclam: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory
Merged 767353 770581
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
767353: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767353
770581: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770581
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From selecao.recrutamento at literatus.edu.br  Sat Nov 22 09:51:36 2014
From: selecao.recrutamento at literatus.edu.br (KRAUSE Arno)
Date: Sat, 22 Nov 2014 04:51:36 -0500
Subject: [Pkg-clamav-devel] Darlehen angebot
Message-ID: <47afebe302bec62277e1ea53cfb80c35@literatus.edu.br>



-- 
Hallo,
Haben Sie Interesse an einer finanziellen Darlehen zu 3%?
kontaktieren Sie mich f?r Details und Bedingungen.
meine mail: krause.arno at att.net
danke


From sebastian at breakpoint.cc  Sat Nov 22 21:53:50 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Sat, 22 Nov 2014 22:53:50 +0100
Subject: [Pkg-clamav-devel] Bug#770647: double free in libclamunrar_iface +
	memory leak in read_block()
Message-ID: <20141122215350.GA2386@breakpoint.cc>

Package: libclamunrar
Version: 0.96.4-1
Severity: serious
Tags: security pending

The debian security tracker references a problem ("clamav: double-free
error libclamunrar_iface/unrar_iface.c") which it learned from
http://www.openwall.com/lists/oss-security/2013/11/29/6
This got marked as fixed in Debian because the Clamav version we use a
high enough version. However the file / part of code is not used from
the clamav package but from the libclamunrar package instead. It is
split into another package due to the non-free license of the unrar code.

To double check, the report mentions the file unrar_iface.c. If you
check the buildlog of the clamav package you won't find it together with
gcc. If you check libclamunrar's buildlog then you will see it. Also if
you check libclamunrar_iface.so.6.1.20 you will find the function named
libclamunrar_iface_LTX_unrar_extract_next_prepare which is part of the
libclamunrar package.

To conclude: this problem as such is still not fixed in Wheezy.
The only clamunrar related change between 0.98.1-1 and 0.98.5-1 is a
memory leak fix in read_block(). For that reason and to keep it in sync
with the clamav package I would prefer to have the 0.98.5 version in Wheezy.

Sebastian


From ftpmaster at ftp-master.debian.org  Sun Nov 23 05:07:05 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 23 Nov 2014 05:07:05 +0000
Subject: [Pkg-clamav-devel] Processing of libclamunrar_0.98.5-1_i386.changes
Message-ID: <E1XsPO5-00028g-9k@franck.debian.org>

libclamunrar_0.98.5-1_i386.changes uploaded successfully to localhost
along with the files:
  libclamunrar_0.98.5-1.dsc
  libclamunrar_0.98.5.orig.tar.xz
  libclamunrar_0.98.5-1.debian.tar.xz
  libclamunrar6_0.98.5-1_i386.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From debian at kitterman.com  Sun Nov 23 05:08:30 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Sun, 23 Nov 2014 00:08:30 -0500
Subject: [Pkg-clamav-devel] Bug#770664: unblock: libclamunrar/0.98.5-1
Message-ID: <20141123050830.22292.83029.reportbug@Scott-Latitude-E6320>

Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock

Please unblock package libclamunrar

Fixes RC security bug.  Also aligns how the package is built to clamav (from
which this is split for licensing issues).  This should reduce the risk of
problems between the two packages.

unblock libclamunrar/0.98.5-1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libclamunrar.debdiff
Type: text/x-diff
Size: 13927 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141123/6a69b1ed/attachment.diff>

From ftpmaster at ftp-master.debian.org  Sun Nov 23 05:18:46 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 23 Nov 2014 05:18:46 +0000
Subject: [Pkg-clamav-devel] libclamunrar_0.98.5-1_i386.changes ACCEPTED into
	unstable
Message-ID: <E1XsPZO-00038p-Ra@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 22 Nov 2014 22:25:35 +0100
Source: libclamunrar
Binary: libclamunrar6
Architecture: source i386
Version: 0.98.5-1
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Description:
 libclamunrar6 - anti-virus utility for Unix - unrar support
Closes: 770647
Changes:
 libclamunrar (0.98.5-1) unstable; urgency=medium
 .
   [ Sebastian Andrzej Siewior ]
   * Update to new upstream version.
     - Finaly address "double-free error exists within the
       unrar_extract_next_prepare()" (Closes: #770647)
   * Drop automake workaround, the bug was fixed.
   * Fix LFS support using the same approach as clamav for compatibility and
     correctness
 .
   [ Scott Kitterman ]
   * Add build-dep on libssl-dev, needed for configure even if not used
     in libclamunrar
   * Update debian/copyright to add openssl exception per COPYING
Checksums-Sha1:
 e838e38e561a3138ab232591247d37cb1b81f1c6 2124 libclamunrar_0.98.5-1.dsc
 6d4a3441e142002ffdaa76ad313bc018985e1999 304828 libclamunrar_0.98.5.orig.tar.xz
 66ac3c83ff3fe33d471862f399f5d1e96c09d749 4676 libclamunrar_0.98.5-1.debian.tar.xz
 451fd25e0b73e90d002b61b1fbd02f698379217d 33906 libclamunrar6_0.98.5-1_i386.deb
Checksums-Sha256:
 2bc9a40a08dcad1c2a45964165cf4d41685d89fba817836a0eb0750a483eb595 2124 libclamunrar_0.98.5-1.dsc
 3d957d584bee260f11c7b5b211899c4cacfffffc3849b1d0485b3f21eb2d4aac 304828 libclamunrar_0.98.5.orig.tar.xz
 ad8fe1d1b895d2779ce0be4c469d971ec66fce0876ccad31a8a13af44cd01553 4676 libclamunrar_0.98.5-1.debian.tar.xz
 7c8641cb9bb064fea19e59a5a3dd68a1ead0a1c013d18d020c3a8eb3ca91b326 33906 libclamunrar6_0.98.5-1_i386.deb
Files:
 f9df12c8f3adf55a228da6b856d13c28 2124 non-free/libs extra libclamunrar_0.98.5-1.dsc
 ecd3acdec22118338d3d5fbe41fba011 304828 non-free/libs extra libclamunrar_0.98.5.orig.tar.xz
 82f622806aff1d1b07d02afd7be9fad0 4676 non-free/libs extra libclamunrar_0.98.5-1.debian.tar.xz
 7ecd162969323c59d7bde3b9ee374b5b 33906 non-free/libs extra libclamunrar6_0.98.5-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=diug
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From owner at bugs.debian.org  Sun Nov 23 05:21:14 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sun, 23 Nov 2014 05:21:14 +0000
Subject: [Pkg-clamav-devel] Bug#770647: marked as done (double free in
 libclamunrar_iface + memory leak in read_block())
References: <E1XsPZO-000390-UN@franck.debian.org>
 <20141122215350.GA2386@breakpoint.cc>
Message-ID: <handler.770647.D770647.141671992910436.ackdone@bugs.debian.org>

Your message dated Sun, 23 Nov 2014 05:18:46 +0000
with message-id <E1XsPZO-000390-UN at franck.debian.org>
and subject line Bug#770647: fixed in libclamunrar 0.98.5-1
has caused the Debian Bug report #770647,
regarding double free in libclamunrar_iface + memory leak in read_block()
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
770647: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770647
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Subject: double free in libclamunrar_iface + memory leak in read_block()
Date: Sat, 22 Nov 2014 22:53:50 +0100
Size: 2855
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141123/cab13487/attachment.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Subject: Bug#770647: fixed in libclamunrar 0.98.5-1
Date: Sun, 23 Nov 2014 05:18:46 +0000
Size: 5907
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141123/cab13487/attachment-0001.mht>

From owner at bugs.debian.org  Sun Nov 23 20:36:05 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sun, 23 Nov 2014 20:36:05 +0000
Subject: [Pkg-clamav-devel] Processed: tagging 770647
References: <1416774788-1446-bts-carnil@debian.org>
Message-ID: <handler.s.C.141677479632536.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> tags 770647 + upstream fixed-upstream
Bug #770647 {Done: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>} [libclamunrar] double free in libclamunrar_iface + memory leak in read_block()
Added tag(s) upstream and fixed-upstream.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
770647: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770647
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From olaf.meeuwissen at avasys.jp  Mon Nov 24 23:22:00 2014
From: olaf.meeuwissen at avasys.jp (Olaf Meeuwissen)
Date: Tue, 25 Nov 2014 08:22:00 +0900
Subject: [Pkg-clamav-devel] Bug#770403: Bug#770403: clamav-freshclam: Don't
	log progress indication to syslog
In-Reply-To: <20141121210841.GA20956@breakpoint.cc>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
 <20141121210841.GA20956@breakpoint.cc>
Message-ID: <87wq6kkwvb.fsf@xeno.avasys.jp>

Sebastian Andrzej Siewior writes:

> On 2014-11-21 08:59:43 [+0900], Olaf Meeuwissen wrote:
>> Dear Maintainer,
> Hi Olaf,
>
>> Since upgrading from 0.98.4+dfsg-2+b1 to 0.98.5~rc1+dfsg-2 on
>> 2014-10-30, freshclam has been sending progress indication messages to
>> syslog.  The last time I made any changes below /etc/clamav was on
>> 2014-06-10.
>
> Do you have systemd enabled by any chance?

Yes.  It's the default init these days, not?

Anyway, Andreas has already notified my that my report was a duplicate.

Thanks anyway,
-- 
Olaf Meeuwissen, LPIC-2           FLOSS Engineer -- AVASYS CORPORATION
FSF Associate Member #1962               Help support software freedom
                 http://www.fsf.org/jf?referrer=1962


From olaf.meeuwissen at avasys.jp  Mon Nov 24 23:20:10 2014
From: olaf.meeuwissen at avasys.jp (Olaf Meeuwissen)
Date: Tue, 25 Nov 2014 08:20:10 +0900
Subject: [Pkg-clamav-devel] Bug#770403: clamav-freshclam: Don't log progress
	indication to syslog
In-Reply-To: <5470A5F7.2090004@googlemail.com>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
 <5470A5F7.2090004@googlemail.com>
Message-ID: <87y4r0kwyd.fsf@xeno.avasys.jp>

Andreas Cadhalpun writes:

> Control: merge 767350 -1
>
> Hi Olaf,
>
> On 21.11.2014 00:59, Olaf Meeuwissen wrote:
>> Since upgrading from 0.98.4+dfsg-2+b1 to 0.98.5~rc1+dfsg-2 on
>> 2014-10-30, freshclam has been sending progress indication messages to
>> syslog.  The last time I made any changes below /etc/clamav was on
>> 2014-06-10.
>
> This is a duplicate of #767350, thus I'm merging the bugs.

Must have missed that.  I did check for similar bug reports.

>> While a single message for the download may be syslog material, I don't
>> think that real-time progress indication is something that should be
>> logged.  That kind of information is only useful when running the
>> program interactively.
>>
>> Please disable progress logging by default (for non-interactive use).
>
> The fix I just pushed to git ensures that real-time progress indication 
> only goes to ttys and only the last message to the journal/syslog.

Thanks and sorry for the noise.
-- 
Olaf Meeuwissen, LPIC-2           FLOSS Engineer -- AVASYS CORPORATION
FSF Associate Member #1962               Help support software freedom
                 http://www.fsf.org/jf?referrer=1962


From debian at kitterman.com  Mon Nov 24 23:35:39 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Mon, 24 Nov 2014 18:35:39 -0500
Subject: [Pkg-clamav-devel] Bug#770403: Bug#770403: clamav-freshclam: Don't
	log progress indication to syslog
In-Reply-To: <5470A5F7.2090004@googlemail.com>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
 <5470A5F7.2090004@googlemail.com>
Message-ID: <3608733.ZOJHL2Mpt6@scott-latitude-e6320>

On Saturday, November 22, 2014 16:04:23 Andreas Cadhalpun wrote:
> Control: merge 767350 -1
> 
> Hi Olaf,
> 
> On 21.11.2014 00:59, Olaf Meeuwissen wrote:
> > Since upgrading from 0.98.4+dfsg-2+b1 to 0.98.5~rc1+dfsg-2 on
> > 2014-10-30, freshclam has been sending progress indication messages to
> > syslog.  The last time I made any changes below /etc/clamav was on
> > 2014-06-10.
> 
> This is a duplicate of #767350, thus I'm merging the bugs.
> 
> > While a single message for the download may be syslog material, I don't
> > think that real-time progress indication is something that should be
> > logged.  That kind of information is only useful when running the
> > program interactively.
> > 
> > Please disable progress logging by default (for non-interactive use).
> 
> The fix I just pushed to git ensures that real-time progress indication
> only goes to ttys and only the last message to the journal/syslog.

Isn't this just a workaround for a systemd bug?  Why not fix it there?

Scott K


From noreply at release.debian.org  Tue Nov 25 16:39:17 2014
From: noreply at release.debian.org (Debian testing watch)
Date: Tue, 25 Nov 2014 16:39:17 +0000
Subject: [Pkg-clamav-devel] clamav 0.98.5+dfsg-1 MIGRATED to testing
Message-ID: <E1XtJ93-0004vL-Lr@franck.debian.org>

FYI: The status of the clamav source package
in Debian's testing distribution has changed.

  Previous version: 0.98.5~rc1+dfsg-4
  Current version:  0.98.5+dfsg-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From ralf.hildebrandt at charite.de  Tue Nov 25 18:07:30 2014
From: ralf.hildebrandt at charite.de (Ralf Hildebrandt)
Date: Tue, 25 Nov 2014 19:07:30 +0100
Subject: [Pkg-clamav-devel] Bug#770985: clamav: heap buffer overflow when
	scanning a specially crafted y0da Crypter obfuscated PE file
Message-ID: <20141125180730.26827.7611.reportbug@humbaba>

Package: clamav
Version: 0.98.1+dfsg-1+deb6u3
Severity: important

Dear Maintainer,

A heap buffer overflow was reported in [1] in ClamAV when scanning a
specially crafted y0da Crypter obfuscated PE file.
Note that this is remotely exploitable when ClamAV is used as a mail
gateway scanner.

Upstream fix is available here: [2].
ClamAV 0.98.5 contains the above fix.

Additional references:
[1] https://bugzilla.clamav.net/show_bug.cgi?id=11155
[2] https://github.com/vrtadmin/clamav-devel/commit/fc3794a54d2affe5770c1f876484a871c783e91e

-- System Information:
Debian Release: jessie/sid
  APT prefers utopic-updates
  APT policy: (500, 'utopic-updates'), (500, 'utopic-security'), (500, 'utopic'), (100, 'utopic-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-24-generic (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


From owner at bugs.debian.org  Tue Nov 25 18:39:21 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Tue, 25 Nov 2014 18:39:21 +0000
Subject: [Pkg-clamav-devel] Processed: user debian-security@lists.debian.org,
 usertagging 770985, tagging 770985 ...
References: <1416940587-2674-bts-carnil@debian.org>
Message-ID: <handler.s.C.141694059624658.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> user debian-security at lists.debian.org
Setting user to debian-security at lists.debian.org (was carnil at debian.org).
> usertags 770985 + tracked
There were no usertags set.
Usertags are now: tracked.
> tags 770985 + upstream security fixed-upstream
Bug #770985 [clamav] clamav: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Added tag(s) upstream, security, and fixed-upstream.
> found 770985 0.98.1+dfsg-1
Bug #770985 [clamav] clamav: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Marked as found in versions clamav/0.98.1+dfsg-1.
> fixed 770985 0.98.5+dfsg-1
Bug #770985 [clamav] clamav: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Marked as fixed in versions clamav/0.98.5+dfsg-1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
770985: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770985
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From owner at bugs.debian.org  Tue Nov 25 18:42:10 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Tue, 25 Nov 2014 18:42:10 +0000
Subject: [Pkg-clamav-devel] Processed: retitle 770985 to clamav:
 CVE-2014-9050: heap buffer overflow when scanning a specially crafted y0da
 Crypter obfuscated PE file
References: <1416940704-3325-bts-carnil@debian.org>
Message-ID: <handler.s.C.141694071325235.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> retitle 770985 clamav: CVE-2014-9050: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Bug #770985 [clamav] clamav: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Changed Bug title to 'clamav: CVE-2014-9050: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file' from 'clamav: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file'
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
770985: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770985
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From owner at bugs.debian.org  Tue Nov 25 18:42:15 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Tue, 25 Nov 2014 18:42:15 +0000
Subject: [Pkg-clamav-devel] Processed: found 770985 in 0.97.8+dfsg-1
References: <1416940904-4184-bts-carnil@debian.org>
Message-ID: <handler.s.C.141694091326943.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> # mark as found in common anchestor
> found 770985 0.97.8+dfsg-1
Bug #770985 [clamav] clamav: CVE-2014-9050: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Marked as found in versions clamav/0.97.8+dfsg-1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
770985: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770985
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From sebastian at breakpoint.cc  Tue Nov 25 21:18:21 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Tue, 25 Nov 2014 22:18:21 +0100
Subject: [Pkg-clamav-devel] Bug#770985: Bug#770985: clamav: heap buffer
	overflow when scanning a specially crafted y0da Crypter
	obfuscated PE file
In-Reply-To: <20141125180730.26827.7611.reportbug@humbaba>
References: <20141125180730.26827.7611.reportbug@humbaba>
Message-ID: <20141125211821.GA2869@breakpoint.cc>

On Tue, Nov 25, 2014 at 07:07:30PM +0100, Ralf Hildebrandt wrote:
> Version: 0.98.1+dfsg-1+deb6u3

> A heap buffer overflow was reported in [1] in ClamAV when scanning a
> specially crafted y0da Crypter obfuscated PE file.
> Note that this is remotely exploitable when ClamAV is used as a mail
> gateway scanner.

we are aware of the situtation, a stable upload is already waiting. Please
note that there won't be an update for Squeeze unless the LTS team does so.

Sebastian


From debian at kitterman.com  Tue Nov 25 21:30:43 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Tue, 25 Nov 2014 16:30:43 -0500
Subject: [Pkg-clamav-devel] Bug#770985: Bug#770985: Bug#770985: clamav: heap
	buffer overflow when scanning a specially crafted y0da
	Crypter obfuscated PE file
In-Reply-To: <20141125211821.GA2869@breakpoint.cc>
References: <20141125180730.26827.7611.reportbug@humbaba>
 <20141125211821.GA2869@breakpoint.cc>
Message-ID: <1814843.2h89qCVlGl@kitterman-optiplex-9020m>

On Tuesday, November 25, 2014 10:18:21 PM Sebastian Andrzej Siewior wrote:
> On Tue, Nov 25, 2014 at 07:07:30PM +0100, Ralf Hildebrandt wrote:
> > Version: 0.98.1+dfsg-1+deb6u3
> > 
> > A heap buffer overflow was reported in [1] in ClamAV when scanning a
> > specially crafted y0da Crypter obfuscated PE file.
> > Note that this is remotely exploitable when ClamAV is used as a mail
> > gateway scanner.
> 
> we are aware of the situtation, a stable upload is already waiting. Please
> note that there won't be an update for Squeeze unless the LTS team does so.

I did add clamav to the list of packages needing an update for the LTS (and 
libclamunrar too), so the LTS team is aware of it.

Scott K


From ftpmaster at ftp-master.debian.org  Tue Nov 25 21:47:06 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Tue, 25 Nov 2014 21:47:06 +0000
Subject: [Pkg-clamav-devel] clamav_0.98.5+dfsg-0+deb7u1_amd64.changes
	ACCEPTED into proposed-updates->stable-new, proposed-updates
Message-ID: <E1XtNww-0008Py-Im@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 21 Nov 2014 08:42:58 -0500
Source: clamav
Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamav-testfiles clamav-freshclam clamav-milter
Architecture: source all amd64
Version: 0.98.5+dfsg-0+deb7u1
Distribution: stable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Scott Kitterman <scott at kitterman.com>
Description: 
 clamav     - anti-virus utility for Unix - command-line interface
 clamav-base - anti-virus utility for Unix - base package
 clamav-daemon - anti-virus utility for Unix - scanner daemon
 clamav-dbg - debug symbols for ClamAV
 clamav-docs - anti-virus utility for Unix - documentation
 clamav-freshclam - anti-virus utility for Unix - virus database update utility
 clamav-milter - anti-virus utility for Unix - sendmail integration
 clamav-testfiles - anti-virus utility for Unix - test files
 libclamav-dev - anti-virus utility for Unix - development files
 libclamav6 - anti-virus utility for Unix - library
Closes: 636877 636881 753973 763300 763634 769384
Changes: 
 clamav (0.98.5+dfsg-0+deb7u1) stable; urgency=medium
 .
   [ Sebastian Andrzej Siewior ]
   * import new upsstream version, refresh patches (Closes: #763300):
     updated:
      - hardcode-LLVM-linker-flag-because-llvm-config-return
   * Add fix-ssize_t-size_t-off_t-printf-modifier.patch. This in conjunction
     with _FILE_OFFSET_BITS=64 should fix test suite failures due to wrong
     printf format modifier.
   * Add "Bump-.so-version-number", likely the RPM version of 769384.
   * Add "llvm-don-t-use-system-libs", since we don't link against .a libs, we
     don't need the deps either.
   * Add "clamav-milter-add-additinal-SMFIF_-flags-before-invo" to make sure
     clamav-milter is able to add/replace X-Virus-Status + X-Virus-Scanned
     header flags.
   * Add bb-10731-Allow-to-specificy-a-group-for-the-socket-o.patch as a
     prepation to allow running clamav-milter in a group of which the user is
     not part of.
   * Init milter socket before dropping root permissions (Closes: #636881).
   * Drop SOCKET_RWGROUP and start milter as root and let it drop permissions
     later. Now there is no need for /etc/default/clamav-milter.
     (Closes: #636877)
   * Add "bb-10731-Allow-to-specificy-a-group-for-the-socket-o" as dependecy
     for "clamav-milter-add-additinal-SMFIF_-flags-before-invo"
   * Update embedded copy of libmspack to be used as fallback, when libmspack-dev
     is not available.
   * Convert debian/copyright to DEP-5 copyright format 1.0.
   * Ignore test failures on hurd, because sockets don't work in the build
     chroot on the buildd.
   * Fix implicit declaration warnings.
   * Switch Vcs-Browser to the cgit interface.
   * Compile with large file support to avoid incompatibility with libmspack.
 .
   [ Scott Kitterman ]
   * Update libclamav6: embedded-library lintian override for new libclamav6 so
     version
   * Fix hyphen-used-as-minus-sign in sigtool.1 and clamsubmit.1
   * Add source:Version minimum version requirements for freshclam to clamav,
     clamav-daemon, and clamav-milter
   * Run wrap-and-sort to improve readability of debian/control and other
     packaging files
   * Consolidate unstable/experimental changelog entries
   * Adjust revision number to ensure smooth upgrades to jessie
 .
   [ Andreas Cadhalpun ]
   * Bump the version requirement for the cl_retflevel symbol to 0.98.5~rc1,
     because the CL_FLEVEL, which this function returns, increased in that
     version the last time.
     This ensures that the functionality level of libclamav is always new
     enough. (Closes: #769384)
   * Add 4 new symbols to libclamav6.symbols.
   * Fix debian/copyright.
   * Update lintian overrides.
   * Update Standards-Version to 3.9.6 (no changes needed).
   * Remove unnecessary shlibs:Depends from clamav-dbg.
   * Add patches to support LLVM 3.5.
   * Add hardcode-LLVM-linker-flag-because-llvm-config-return.patch to make
     clamav link to LLVM dynamically, which considerably decreases the size
     of libclamav.
   * Drop explicit po2debconf handling from debian/rules. It has been unused,
     because the templates are nowadays handled by dh_installdebconf.
   * Remove superfluous debian/*.dirs files and unneeded directories from the
     remaining debian/*.dirs files.
   * Don't mention non-existant file libclamav/crypto.h in debian/copyright.
   * Add lintian overrides for false positive tags:
      - space-in-std-shortname-in-dep5-copyright
      - wildcard-matches-nothing-in-dep5-copyright
      - package-contains-timestamped-gzip
   * Fix the watch file to correctly mangle beta version numbers.
   * Switch back to the sourceforge.net redirector, since #752384 got fixed.
   * Don't suggest daemon on hurd, as it doesn't build there.
   * Let debian/script include /etc/clamav/clamav-milter.conf in bug reports,
     even if clamconf from clamav-daemon is not available.
   * Install all documentation PDFs, including phishsigs_howto.pdf.
   * Remove unused function wait_for_socket from clamav-milter.init.in.
   * Simplify libclamav6.install file by using a wildcard.
   * Improve comments in debian/rules.
   * Stop ignoring test failures on hurd, because hurd's libc got fixed.
   * Don't use '--with systemd' on wheezy, where dh_systemd is not available.
   * Depend on libjson0-dev and enable libjson
 .
   [ Frans Spiesschaert ]
   * Updated Dutch Debconf template translation (Closes: #763634)
 .
   [ Joe Dalton ]
   * Updated Danish Debconf template translation (Closes: #753973)
Checksums-Sha1: 
 4a7c9953ec610d0e8a327fb484a19110301b50b7 2906 clamav_0.98.5+dfsg-0+deb7u1.dsc
 e7df5b8654c165afa4a299cb914c2d6afcf05788 5286536 clamav_0.98.5+dfsg.orig.tar.xz
 0948892788e1c283baef93bdcbd224cdd41b64bf 842503 clamav_0.98.5+dfsg-0+deb7u1.debian.tar.gz
 d9807b059c856eb7cedd3b6a5c31f29e5431932e 277246 clamav-base_0.98.5+dfsg-0+deb7u1_all.deb
 851b274a166c3be510fdf202c416839b7ec9069e 927638 clamav-docs_0.98.5+dfsg-0+deb7u1_all.deb
 c99a5fd61de4aaf2c6f234ada59688f49a4ab250 3876278 clamav-dbg_0.98.5+dfsg-0+deb7u1_amd64.deb
 4763a78b120cd275c244300be3e8b1b6a41c2df6 403170 clamav_0.98.5+dfsg-0+deb7u1_amd64.deb
 f9e497419b0537cdb77120109d7d34748e8fa24b 241012 libclamav-dev_0.98.5+dfsg-0+deb7u1_amd64.deb
 8c210ecbeaa6b06d795bd3f528379f3d1dcfc3f4 1086272 libclamav6_0.98.5+dfsg-0+deb7u1_amd64.deb
 aff5ab48e698b935d9496471e29359699f1bf498 539850 clamav-daemon_0.98.5+dfsg-0+deb7u1_amd64.deb
 e6047a37102723a506a11bbc2a3adde9033bd5ed 5281140 clamav-testfiles_0.98.5+dfsg-0+deb7u1_all.deb
 5eb73200ab14e8b3c0f2537d724bb578ad259402 349500 clamav-freshclam_0.98.5+dfsg-0+deb7u1_amd64.deb
 43cd1f7bd3b5f77cef0e77420915380d8ff6abbc 386158 clamav-milter_0.98.5+dfsg-0+deb7u1_amd64.deb
Checksums-Sha256: 
 6ea6a121e8c94ff2d3bdf4d363dd48b36ccc02cb99a30c9f1614253f68beca4f 2906 clamav_0.98.5+dfsg-0+deb7u1.dsc
 0e353f646a0add17ca42e75ccfc7edf4f8b7c1acc972a86c317543f6b365db2d 5286536 clamav_0.98.5+dfsg.orig.tar.xz
 6d55db4545792ef99a729f6e6740a7acc66875665018203395bcedd977e57df5 842503 clamav_0.98.5+dfsg-0+deb7u1.debian.tar.gz
 279be71e8ea51b45b283c924b0eeeee97544746434a0c2ee580781a7def4a80d 277246 clamav-base_0.98.5+dfsg-0+deb7u1_all.deb
 17cb302e4e5f57ca6dd1fcefc132214f84fde59b20a2196eb206bc597395cf78 927638 clamav-docs_0.98.5+dfsg-0+deb7u1_all.deb
 17be7604144b6239c73587bd4a3ef40a7d1d2f700749997c9dc3c96804251d46 3876278 clamav-dbg_0.98.5+dfsg-0+deb7u1_amd64.deb
 492e282e9473fec1be17d8a5db2cb66adf2f3515975e3b3890157ac5807a0a71 403170 clamav_0.98.5+dfsg-0+deb7u1_amd64.deb
 e7f40d36fae80b5df1422c08143de56c741f1eb483d78f6593a01b1ef8821d38 241012 libclamav-dev_0.98.5+dfsg-0+deb7u1_amd64.deb
 c6c60fa8916ac6b0b87682e3fb0728097dd43d354c4121975de266f3eb01980e 1086272 libclamav6_0.98.5+dfsg-0+deb7u1_amd64.deb
 cfe65e260f4fe18f6a9637308a823d85a03bbf81c138ac3f9d5f17a08a972f3d 539850 clamav-daemon_0.98.5+dfsg-0+deb7u1_amd64.deb
 9701aaa7ebd395c5efc75e4d0cff7292b9e98b919f1a1ab21a1df5e012e7ffec 5281140 clamav-testfiles_0.98.5+dfsg-0+deb7u1_all.deb
 4305c6eff70ddec929c6d0493540112eb72c5f58a05513904199339e2b8cdaca 349500 clamav-freshclam_0.98.5+dfsg-0+deb7u1_amd64.deb
 9c881f97605bf707c66abfba91a789f3ea0065f910f869f4b5a9a93c7e099fc9 386158 clamav-milter_0.98.5+dfsg-0+deb7u1_amd64.deb
Files: 
 2a4b6749508e03b136024c008f093703 2906 utils optional clamav_0.98.5+dfsg-0+deb7u1.dsc
 34d5e8698e57ce45c4a8c3c2cb211cf3 5286536 utils optional clamav_0.98.5+dfsg.orig.tar.xz
 41310c4f5deefe2e975d1b2ef31b585f 842503 utils optional clamav_0.98.5+dfsg-0+deb7u1.debian.tar.gz
 13bb7655e90493fd623513c29e38af62 277246 utils optional clamav-base_0.98.5+dfsg-0+deb7u1_all.deb
 abefaf429b73b61c53f326233c676add 927638 doc optional clamav-docs_0.98.5+dfsg-0+deb7u1_all.deb
 dc26e608810f666958a08beb07c1e07e 3876278 debug extra clamav-dbg_0.98.5+dfsg-0+deb7u1_amd64.deb
 736a4ecb8e1ed50ccae7b6b54e6341ff 403170 utils optional clamav_0.98.5+dfsg-0+deb7u1_amd64.deb
 004218cb8f691be81000a920cc8bc1f5 241012 libdevel optional libclamav-dev_0.98.5+dfsg-0+deb7u1_amd64.deb
 83522ce3207031df8dfdb0076508aa0f 1086272 libs optional libclamav6_0.98.5+dfsg-0+deb7u1_amd64.deb
 704580604ace571b196d875dc2ba01ce 539850 utils optional clamav-daemon_0.98.5+dfsg-0+deb7u1_amd64.deb
 e97170c1160669807cf205b0bb287490 5281140 utils optional clamav-testfiles_0.98.5+dfsg-0+deb7u1_all.deb
 845f9aeb5295251deefaa91f3f41d87b 349500 utils optional clamav-freshclam_0.98.5+dfsg-0+deb7u1_amd64.deb
 84f275bf199acff3243910489312c20d 386158 utils extra clamav-milter_0.98.5+dfsg-0+deb7u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=rtnu
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From owner at bugs.debian.org  Tue Nov 25 21:51:17 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Tue, 25 Nov 2014 21:51:17 +0000
Subject: [Pkg-clamav-devel] Bug#763300: marked as done ("clamscan -a -i -r
 -z --remove" causes a segfault)
References: <E1XtNww-0008QS-OT@franck.debian.org>
 <20140928235334.4105.55870.reportbug@pc-0.com>
Message-ID: <handler.763300.D763300.14169520284118.ackdone@bugs.debian.org>

Your message dated Tue, 25 Nov 2014 21:47:06 +0000
with message-id <E1XtNww-0008QS-OT at franck.debian.org>
and subject line Bug#763300: fixed in clamav 0.98.5+dfsg-0+deb7u1
has caused the Debian Bug report #763300,
regarding "clamscan -a -i -r -z --remove" causes a segfault
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
763300: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763300
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Joe Gumbosky <joegum at joegum.com>
Subject: no subject
Date: Sun, 28 Sep 2014 19:53:34 -0400
Size: 3942
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141125/e96eef41/attachment.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Scott Kitterman <scott at kitterman.com>
Subject: Bug#763300: fixed in clamav 0.98.5+dfsg-0+deb7u1
Date: Tue, 25 Nov 2014 21:47:06 +0000
Size: 13354
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141125/e96eef41/attachment-0001.mht>

From owner at bugs.debian.org  Tue Nov 25 21:51:26 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Tue, 25 Nov 2014 21:51:26 +0000
Subject: [Pkg-clamav-devel] Bug#769384: marked as done (ERROR: This tool
 requires libclamav with functionality level 79 or higher (current f-level:
 77))
References: <E1XtNww-0008Qe-QH@franck.debian.org>
 <20141113081625.12380.55622.reportbug@dingles.opendreams.net>
Message-ID: <handler.769384.D769384.14169520304134.ackdone@bugs.debian.org>

Your message dated Tue, 25 Nov 2014 21:47:06 +0000
with message-id <E1XtNww-0008Qe-QH at franck.debian.org>
and subject line Bug#769384: fixed in clamav 0.98.5+dfsg-0+deb7u1
has caused the Debian Bug report #769384,
regarding ERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
769384: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769384
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Jesse Molina <jesse at opendreams.net>
Subject: ERROR: This tool requires libclamav with functionality level 79 or higher (current f-level: 77)
Date: Thu, 13 Nov 2014 01:16:25 -0700
Size: 4625
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141125/b66a0b51/attachment-0002.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Scott Kitterman <scott at kitterman.com>
Subject: Bug#769384: fixed in clamav 0.98.5+dfsg-0+deb7u1
Date: Tue, 25 Nov 2014 21:47:06 +0000
Size: 13379
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141125/b66a0b51/attachment-0003.mht>

From owner at bugs.debian.org  Tue Nov 25 22:27:15 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Tue, 25 Nov 2014 22:27:15 +0000
Subject: [Pkg-clamav-devel] Processed: fix in stable
References: <20141125221834.GA32649@kibibi>
Message-ID: <handler.s.C.141695420317298.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> fixed 770985 0.98.5+dfsg-0+deb7u1
Bug #770985 [clamav] clamav: CVE-2014-9050: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Marked as fixed in versions clamav/0.98.5+dfsg-0+deb7u1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
770985: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770985
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From ftpmaster at ftp-master.debian.org  Tue Nov 25 22:34:01 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Tue, 25 Nov 2014 22:34:01 +0000
Subject: [Pkg-clamav-devel] Processing of
	libclamunrar_0.98.5-0+deb7u1_amd64.changes
Message-ID: <E1XtOgL-0006za-HR@franck.debian.org>

libclamunrar_0.98.5-0+deb7u1_amd64.changes uploaded successfully to localhost
along with the files:
  libclamunrar_0.98.5-0+deb7u1.dsc
  libclamunrar_0.98.5.orig.tar.xz
  libclamunrar_0.98.5-0+deb7u1.debian.tar.gz
  libclamunrar6_0.98.5-0+deb7u1_amd64.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Tue Nov 25 22:49:02 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Tue, 25 Nov 2014 22:49:02 +0000
Subject: [Pkg-clamav-devel] libclamunrar_0.98.5-0+deb7u1_amd64.changes
	ACCEPTED into proposed-updates->stable-new
Message-ID: <E1XtOus-0000Ul-W2@franck.debian.org>

Mapping stable to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 25 Nov 2014 22:01:13 +0100
Source: libclamunrar
Binary: libclamunrar6
Architecture: source amd64
Version: 0.98.5-0+deb7u1
Distribution: stable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Description: 
 libclamunrar6 - anti-virus utility for Unix - unrar support
Closes: 727917 741080 770647
Changes: 
 libclamunrar (0.98.5-0+deb7u1) stable; urgency=medium
 .
   [ Sebastian Andrzej Siewior ]
   * Update to new upstream version.
     - Finaly address "double-free error exists within the
       unrar_extract_next_prepare()" (Closes: #770647)
   * redo rules files to something smaller like we do have in the clamav
     package.
   * Do autoreconf before configure (closes: #727917).
   * Enable hardened build flags (closes: #741080).
   * Remove all .la files (clamd works without them).
   * Add VCS-* tags.
   * Add myself as uploader.
   * Remove *.so files (lintian warning).
   * Add a symbol file.
   * Bumb standards version to 3.9.1 after made the required changes.
   * Drop automake workaround, the bug was fixed.
   * Fix LFS support using the same approach as clamav for compatibility and
     correctness
 .
   [ Scott Kitterman ]
   * Add build-dep on libssl-dev, needed for configure even if not used
     in libclamunrar
   * Update debian/copyright to add openssl exception per COPYING
Checksums-Sha1: 
 823ce7b6fc5a60542c99cbae87679e3d1733585a 2147 libclamunrar_0.98.5-0+deb7u1.dsc
 6d4a3441e142002ffdaa76ad313bc018985e1999 304828 libclamunrar_0.98.5.orig.tar.xz
 5fcac87cba7af54f5cfeb6885e078b8c0b2e59fd 4861 libclamunrar_0.98.5-0+deb7u1.debian.tar.gz
 f498b377a3d6e11e09394b9166c739bf4b820378 37528 libclamunrar6_0.98.5-0+deb7u1_amd64.deb
Checksums-Sha256: 
 a772861a6d5af5aa6a82c3067d151666da2ba03291397de121b2084672713cbc 2147 libclamunrar_0.98.5-0+deb7u1.dsc
 3d957d584bee260f11c7b5b211899c4cacfffffc3849b1d0485b3f21eb2d4aac 304828 libclamunrar_0.98.5.orig.tar.xz
 228bed62ed05e476d3fc60d1964329a484a20cdd53a9da555ed739545a109526 4861 libclamunrar_0.98.5-0+deb7u1.debian.tar.gz
 c1e0d6d8ce87537c69123f5aceee3e12199e4feac6f0d3b451849777452c2b7b 37528 libclamunrar6_0.98.5-0+deb7u1_amd64.deb
Files: 
 e608b1092012e0e14d5bd9096d395fd0 2147 non-free/libs extra libclamunrar_0.98.5-0+deb7u1.dsc
 ecd3acdec22118338d3d5fbe41fba011 304828 non-free/libs extra libclamunrar_0.98.5.orig.tar.xz
 2a20306cd7a65c453b38d8192b151604 4861 non-free/libs extra libclamunrar_0.98.5-0+deb7u1.debian.tar.gz
 9a742fd59ef81b2736e5b2080c220e7f 37528 non-free/libs extra libclamunrar6_0.98.5-0+deb7u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=twUb
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From eliza47eliz at hotmail.com  Wed Nov 26 13:29:42 2014
From: eliza47eliz at hotmail.com (eliza babe)
Date: Wed, 26 Nov 2014 13:29:42 +0000 (UTC)
Subject: [Pkg-clamav-devel] hi
Message-ID: <1043069447.1901516.1417008582785.JavaMail.yahoo@jws10602g.mail.bf1.yahoo.com>

Hello My Dear.
how are you, hope fine. My name is Eliza, am very glad to come across your email profile today, which i find interesting and wish to let you know that i will like to have a very good relationship with you, i hope you will welcome my friendship request? Please respond to my mail directly so that l will give you my pictures and tell you more about myself.
Miss Eliza




































-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141126/29996c8c/attachment.html>

From mary.bennett at ecolab.com  Wed Nov 26 19:21:14 2014
From: mary.bennett at ecolab.com (Bennett, Mary)
Date: Wed, 26 Nov 2014 13:21:14 -0600
Subject: [Pkg-clamav-devel] " F y i "
Message-ID: <1144ACA313795347BE2D1C81CA0C7AB67791B0E65E@useagan5501p.global.ecolab.corp>

You have been chosen to get a Personal Donation, and for claim details reply back.
Yours,
Mary Bennett
----------------------

CONFIDENTIALITY NOTICE: This e-mail communication and any attachments may contain proprietary and privileged information for the use of the designated recipients named above. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141126/0e0c2de9/attachment.html>

From andreas.cadhalpun at googlemail.com  Wed Nov 26 22:04:27 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Wed, 26 Nov 2014 23:04:27 +0100
Subject: [Pkg-clamav-devel] Bug#770403: clamav-freshclam: Don't log progress
	indication to syslog
In-Reply-To: <3608733.ZOJHL2Mpt6@scott-latitude-e6320>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
 <5470A5F7.2090004@googlemail.com> <3608733.ZOJHL2Mpt6@scott-latitude-e6320>
Message-ID: <54764E6B.2050800@googlemail.com>

Hi,

On 25.11.2014 00:35, Scott Kitterman wrote:
> Isn't this just a workaround for a systemd bug?  Why not fix it there?

That was my first intuition, but I have come around to a different 
opinion, mainly for two reasons:
  * It is desirable for the journal to keep the complete output in the
    log. Otherwise it might make debugging more difficult or even
    introduce security problems, if important messages can be removed
    from the journal.
  * The bug in clamav can be seen without systemd: Just redirect
    freshclam's output to a file and without this fix, you get the
    useless progress indication messages in your 'manual log'.

Thus fixing this in freshclam seems best.

Best regards,
Andreas


From debian at kitterman.com  Wed Nov 26 22:08:21 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Wed, 26 Nov 2014 17:08:21 -0500
Subject: [Pkg-clamav-devel] Bug#770403: clamav-freshclam: Don't log progress
	indication to syslog
In-Reply-To: <54764E6B.2050800@googlemail.com>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
 <3608733.ZOJHL2Mpt6@scott-latitude-e6320> <54764E6B.2050800@googlemail.com>
Message-ID: <2961215.jKsF452M8U@kitterman-optiplex-9020m>

On Wednesday, November 26, 2014 11:04:27 PM Andreas Cadhalpun wrote:
> Hi,
> 
> On 25.11.2014 00:35, Scott Kitterman wrote:
> > Isn't this just a workaround for a systemd bug?  Why not fix it there?
> 
> That was my first intuition, but I have come around to a different
> opinion, mainly for two reasons:
>   * It is desirable for the journal to keep the complete output in the
>     log. Otherwise it might make debugging more difficult or even
>     introduce security problems, if important messages can be removed
>     from the journal.
>   * The bug in clamav can be seen without systemd: Just redirect
>     freshclam's output to a file and without this fix, you get the
>     useless progress indication messages in your 'manual log'.
> 
> Thus fixing this in freshclam seems best.

OK.  Makes sense.  As with the other things, you've sent this upstream, right?

Scott K


From xypron.glpk at gmx.de  Thu Nov 27 00:05:43 2014
From: xypron.glpk at gmx.de (Heinrich Schuchardt)
Date: Thu, 27 Nov 2014 01:05:43 +0100
Subject: [Pkg-clamav-devel] Bug#770581: freshclam: Can't save PID to file
	/var/run/clamav/freshclam.pid: No such file or directory
In-Reply-To: <5470A869.4090309@googlemail.com>
References: <547073C6.4000702@gmx.de> <5470A869.4090309@googlemail.com>
Message-ID: <54766AD7.8070804@gmx.de>

On 22.11.2014 16:14, Andreas Cadhalpun wrote:
> Control: forcemerge 767353 -1
>
> Hi Heinrich,
>
> this is a duplicate of 767353, thus I'm merging them.
>
> On 22.11.2014 12:30, Heinrich Schuchardt wrote:
>> after a fresh install I found the following in the clamav-freshclam log:
>>
>> ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such
>> file or directory
>
> You're using systemd as init, which does not need the PID file.

I am using packages

systemd-shim
systemd-sysv

Are you sure I do not need a PID file?

Best regards

Heinrich Schuchardt

>
>> I suggest the directory /var/run/clamav should be created by the
>> preinstall procedure of clamav-freshclam. The new directory should be
>> owned by user clamav.
>
> I think the correct fix would be to move the PIDFile setting from the
> configuration files to the sysvinit init script and to use the --pid
> option there, because it is not needed, when using systemd.
>


From evgeni.golov at credativ.de  Thu Nov 27 08:38:08 2014
From: evgeni.golov at credativ.de (Evgeni Golov)
Date: Thu, 27 Nov 2014 09:38:08 +0100
Subject: [Pkg-clamav-devel] Bug#770985: Bug#770985: Bug#770985: clamav: heap
	buffer overflow when scanning a specially crafted y0da
	Crypter obfuscated PE file
In-Reply-To: <1814843.2h89qCVlGl@kitterman-optiplex-9020m>
References: <20141125180730.26827.7611.reportbug@humbaba>
 <20141125211821.GA2869@breakpoint.cc>
 <1814843.2h89qCVlGl@kitterman-optiplex-9020m>
Message-ID: <20141127083807.GA7463@nana.kerker.die-welt.net>

On Tue, Nov 25, 2014 at 04:30:43PM -0500, Scott Kitterman wrote:
> On Tuesday, November 25, 2014 10:18:21 PM Sebastian Andrzej Siewior wrote:
> > On Tue, Nov 25, 2014 at 07:07:30PM +0100, Ralf Hildebrandt wrote:
> > > Version: 0.98.1+dfsg-1+deb6u3
> > > 
> > > A heap buffer overflow was reported in [1] in ClamAV when scanning a
> > > specially crafted y0da Crypter obfuscated PE file.
> > > Note that this is remotely exploitable when ClamAV is used as a mail
> > > gateway scanner.
> > 
> > we are aware of the situtation, a stable upload is already waiting. Please
> > note that there won't be an update for Squeeze unless the LTS team does so.
> 
> I did add clamav to the list of packages needing an update for the LTS (and 
> libclamunrar too), so the LTS team is aware of it.

Thanks, working on the clamav one now for LTS.

Upstreams patch applies just fine on the version in Squeeze, so I guess 
it would be better to apply it, instead of pulling in the new upstream?

Greets
Evgeni


From evgeni.golov at credativ.de  Thu Nov 27 09:32:29 2014
From: evgeni.golov at credativ.de (Evgeni Golov)
Date: Thu, 27 Nov 2014 10:32:29 +0100
Subject: [Pkg-clamav-devel] Bug#770985: Bug#770985: Bug#770985: clamav: heap
	buffer overflow when scanning a specially crafted y0da
	Crypter obfuscated PE file
In-Reply-To: <20141127083807.GA7463@nana.kerker.die-welt.net>
References: <20141125180730.26827.7611.reportbug@humbaba>
 <20141125211821.GA2869@breakpoint.cc>
 <1814843.2h89qCVlGl@kitterman-optiplex-9020m>
 <20141127083807.GA7463@nana.kerker.die-welt.net>
Message-ID: <20141127093229.GA362@nana.kerker.die-welt.net>

On Thu, Nov 27, 2014 at 09:38:08AM +0100, Evgeni Golov wrote:
> On Tue, Nov 25, 2014 at 04:30:43PM -0500, Scott Kitterman wrote:
> > On Tuesday, November 25, 2014 10:18:21 PM Sebastian Andrzej Siewior wrote:
> > > On Tue, Nov 25, 2014 at 07:07:30PM +0100, Ralf Hildebrandt wrote:
> > > > Version: 0.98.1+dfsg-1+deb6u3
> > > > 
> > > > A heap buffer overflow was reported in [1] in ClamAV when scanning a
> > > > specially crafted y0da Crypter obfuscated PE file.
> > > > Note that this is remotely exploitable when ClamAV is used as a mail
> > > > gateway scanner.
> > > 
> > > we are aware of the situtation, a stable upload is already waiting. Please
> > > note that there won't be an update for Squeeze unless the LTS team does so.
> > 
> > I did add clamav to the list of packages needing an update for the LTS (and 
> > libclamunrar too), so the LTS team is aware of it.
> 
> Thanks, working on the clamav one now for LTS.
> 
> Upstreams patch applies just fine on the version in Squeeze, so I guess 
> it would be better to apply it, instead of pulling in the new upstream?

Sadly, the patch does not solve the issue itself. clamscan -a still 
segfaults for me after the patch.

I'll try to figure out what else is needed.


From debian at kitterman.com  Thu Nov 27 12:33:22 2014
From: debian at kitterman.com (Scott Kitterman)
Date: Thu, 27 Nov 2014 07:33:22 -0500
Subject: [Pkg-clamav-devel] Bug#770985: Bug#770985: Bug#770985: clamav: heap
	buffer overflow when scanning a specially crafted y0da
	Crypter obfuscated PE file
In-Reply-To: <20141127093229.GA362@nana.kerker.die-welt.net>
References: <20141125180730.26827.7611.reportbug@humbaba>
 <20141127083807.GA7463@nana.kerker.die-welt.net>
 <20141127093229.GA362@nana.kerker.die-welt.net>
Message-ID: <2681698.zdrUil9Osm@kitterman-optiplex-9020m>

On Thursday, November 27, 2014 10:32:29 AM Evgeni Golov wrote:
> On Thu, Nov 27, 2014 at 09:38:08AM +0100, Evgeni Golov wrote:
> > On Tue, Nov 25, 2014 at 04:30:43PM -0500, Scott Kitterman wrote:
> > > On Tuesday, November 25, 2014 10:18:21 PM Sebastian Andrzej Siewior 
wrote:
> > > > On Tue, Nov 25, 2014 at 07:07:30PM +0100, Ralf Hildebrandt wrote:
> > > > > Version: 0.98.1+dfsg-1+deb6u3
> > > > > 
> > > > > A heap buffer overflow was reported in [1] in ClamAV when scanning a
> > > > > specially crafted y0da Crypter obfuscated PE file.
> > > > > Note that this is remotely exploitable when ClamAV is used as a mail
> > > > > gateway scanner.
> > > > 
> > > > we are aware of the situtation, a stable upload is already waiting.
> > > > Please
> > > > note that there won't be an update for Squeeze unless the LTS team
> > > > does so.
> > > 
> > > I did add clamav to the list of packages needing an update for the LTS
> > > (and
> > > libclamunrar too), so the LTS team is aware of it.
> > 
> > Thanks, working on the clamav one now for LTS.
> > 
> > Upstreams patch applies just fine on the version in Squeeze, so I guess
> > it would be better to apply it, instead of pulling in the new upstream?
> 
> Sadly, the patch does not solve the issue itself. clamscan -a still
> segfaults for me after the patch.
> 
> I'll try to figure out what else is needed.

For clamav it's more trouble than it's worth to try and tease out specific 
changes, since you need the new capabilities just to stay even with the bad 
guys anyway.  If you want to update clamav for the LTS, the changes the Ubuntu 
Security team did for Ubuntu 12.04 as it's similar to Squeeze in the relevant 
areas (Note: the source for clamav is generally in sync between Ubuntu and 
Debian, so the changes between Stable/Jessie/Testing and the Ubuntu 12.04 
update are primarily the ones you'd likely want for Squeeze, but I didn't 
specifically test this).

https://launchpad.net/ubuntu/+archive/primary/+files/clamav_0.98.5%2Baddedllvm-0ubuntu0.12.04.1.dsc

Scott K


From ftpmaster at ftp-master.debian.org  Thu Nov 27 14:38:00 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 27 Nov 2014 14:38:00 +0000
Subject: [Pkg-clamav-devel] Processing of
	clamav_0.98.1+dfsg-1+deb6u4_amd64.changes
Message-ID: <E1Xu0Cm-0000kK-4g@franck.debian.org>

clamav_0.98.1+dfsg-1+deb6u4_amd64.changes uploaded successfully to localhost
along with the files:
  clamav_0.98.1+dfsg-1+deb6u4.dsc
  clamav_0.98.1+dfsg-1+deb6u4.diff.gz
  clamav-base_0.98.1+dfsg-1+deb6u4_all.deb
  clamav-testfiles_0.98.1+dfsg-1+deb6u4_all.deb
  clamav-docs_0.98.1+dfsg-1+deb6u4_all.deb
  libclamav6_0.98.1+dfsg-1+deb6u4_amd64.deb
  clamav_0.98.1+dfsg-1+deb6u4_amd64.deb
  clamav-daemon_0.98.1+dfsg-1+deb6u4_amd64.deb
  clamav-freshclam_0.98.1+dfsg-1+deb6u4_amd64.deb
  clamav-milter_0.98.1+dfsg-1+deb6u4_amd64.deb
  libclamav-dev_0.98.1+dfsg-1+deb6u4_amd64.deb
  clamav-dbg_0.98.1+dfsg-1+deb6u4_amd64.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Thu Nov 27 15:19:29 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 27 Nov 2014 15:19:29 +0000
Subject: [Pkg-clamav-devel] clamav_0.98.1+dfsg-1+deb6u4_amd64.changes
	ACCEPTED into squeeze-lts
Message-ID: <E1Xu0qv-00070g-AP@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2014 09:39:20 +0100
Source: clamav
Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamav-testfiles clamav-freshclam clamav-milter
Architecture: source all amd64
Version: 0.98.1+dfsg-1+deb6u4
Distribution: squeeze-lts
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Evgeni Golov <evgeni.golov at credativ.de>
Description: 
 clamav     - anti-virus utility for Unix - command-line interface
 clamav-base - anti-virus utility for Unix - base package
 clamav-daemon - anti-virus utility for Unix - scanner daemon
 clamav-dbg - debug symbols for ClamAV
 clamav-docs - anti-virus utility for Unix - documentation
 clamav-freshclam - anti-virus utility for Unix - virus database update utility
 clamav-milter - anti-virus utility for Unix - sendmail integration
 clamav-testfiles - anti-virus utility for Unix - test files
 libclamav-dev - anti-virus utility for Unix - development files
 libclamav6 - anti-virus utility for Unix - library
Closes: 770985
Changes: 
 clamav (0.98.1+dfsg-1+deb6u4) squeeze-lts; urgency=medium
 .
   * Security upload by the Debian LTS team.
   * Fix CVE-2014-9050: heap buffer overflow when scanning a specially crafted
     y0da Crypter obfuscated PE file. (Closes: #770985)
   * Also backport some memory fixes for clamscan.
Checksums-Sha1: 
 cc61e6e978ab86cdbcd75cbe8a6b0f94752e1eda 2291 clamav_0.98.1+dfsg-1+deb6u4.dsc
 0cfe8a49348178fadd36cbebfbcd4667bdce4187 334406 clamav_0.98.1+dfsg-1+deb6u4.diff.gz
 3c6fa806b059fc116bcd994d43ad7c57f858d0f7 321478 clamav-base_0.98.1+dfsg-1+deb6u4_all.deb
 58d103a31d2b2f4071cf2d0c00ff3cb6deb3883f 5275262 clamav-testfiles_0.98.1+dfsg-1+deb6u4_all.deb
 2d9a6f2c23fa471135e5751763eef3cf13c0c864 1267616 clamav-docs_0.98.1+dfsg-1+deb6u4_all.deb
 ca002b12dc5d1b76829bd3a9355bb21a51674692 4353530 libclamav6_0.98.1+dfsg-1+deb6u4_amd64.deb
 366c7ff20037cb0834b48add0fa5d94f71bc2449 358926 clamav_0.98.1+dfsg-1+deb6u4_amd64.deb
 377f164a1230d1c86c5d2e2f570301b5edf4da58 448796 clamav-daemon_0.98.1+dfsg-1+deb6u4_amd64.deb
 2d2233d8649d8a205a0d286e5f15851e56e72f25 335988 clamav-freshclam_0.98.1+dfsg-1+deb6u4_amd64.deb
 1781f745992ab654f1cc51b44d8a49f80094b994 372538 clamav-milter_0.98.1+dfsg-1+deb6u4_amd64.deb
 866e5d4d6b25140627d9be5dc5a8b02903bc2078 233686 libclamav-dev_0.98.1+dfsg-1+deb6u4_amd64.deb
 998065b1a28479454d7886ba494cfd2fca450546 24476716 clamav-dbg_0.98.1+dfsg-1+deb6u4_amd64.deb
Checksums-Sha256: 
 42e8786288b36c091611176f29b350f9a5325f199be5cfb6f908c961701b8ce8 2291 clamav_0.98.1+dfsg-1+deb6u4.dsc
 c09428ada1fa8bc11a3bf14f8a40adf05fb1927b506c668ac4962e7b2fc365e6 334406 clamav_0.98.1+dfsg-1+deb6u4.diff.gz
 3a01301c6c3ca4d489e684efbf98da5c3ce9a23a77db035526bb366acb227c83 321478 clamav-base_0.98.1+dfsg-1+deb6u4_all.deb
 1568e9d72dcc6eb3070722701a2d64f92bf60a61f5cfdba355d605c860e7cc75 5275262 clamav-testfiles_0.98.1+dfsg-1+deb6u4_all.deb
 fa958c9f6a62d8df7625b03457f5ec159c48eb8b052a2e5bfadf1008bf66c933 1267616 clamav-docs_0.98.1+dfsg-1+deb6u4_all.deb
 7d51ff70ce0fb9e69655d664e69c0f2116b370483413b0dc2a980209528f5ae4 4353530 libclamav6_0.98.1+dfsg-1+deb6u4_amd64.deb
 4bd09b9a67e9e063347bf184617ecc2e06ca5986020f6354ba10259751ed9324 358926 clamav_0.98.1+dfsg-1+deb6u4_amd64.deb
 dcab9f3cf04a016a6bdb0165280f742e49d0be51466cf1af9a93d136fa550cca 448796 clamav-daemon_0.98.1+dfsg-1+deb6u4_amd64.deb
 c2986d7b412629a3becd45a0d4253b6fe91d7728abc1657243b9f98c72d03208 335988 clamav-freshclam_0.98.1+dfsg-1+deb6u4_amd64.deb
 8cde3900439f4c911937572fc33d084e8eb6612b6466955f4d2d41d9d6339be0 372538 clamav-milter_0.98.1+dfsg-1+deb6u4_amd64.deb
 d66092e87d228bb61c8db7076055e43c2e3ed844231b86f1830b4ab7c10cdfca 233686 libclamav-dev_0.98.1+dfsg-1+deb6u4_amd64.deb
 471551155772782fb75d54ca6c43c9dd2bcc174bb90e20f093c7a4d97bb933b2 24476716 clamav-dbg_0.98.1+dfsg-1+deb6u4_amd64.deb
Files: 
 1325f2d13f500bbcb46d39e5c3c711d5 2291 utils optional clamav_0.98.1+dfsg-1+deb6u4.dsc
 45ad6411d5a4d2852375cdc68f3df73e 334406 utils optional clamav_0.98.1+dfsg-1+deb6u4.diff.gz
 59281939573a9b64f19034baa3271aab 321478 utils optional clamav-base_0.98.1+dfsg-1+deb6u4_all.deb
 cbcb94955370b6aac96fe01b2a4d2c54 5275262 utils optional clamav-testfiles_0.98.1+dfsg-1+deb6u4_all.deb
 69021299dfbdae5ddde4f732a70d6058 1267616 doc optional clamav-docs_0.98.1+dfsg-1+deb6u4_all.deb
 22b909766c04108245e0be572fcbd591 4353530 libs optional libclamav6_0.98.1+dfsg-1+deb6u4_amd64.deb
 e36aeedd6f74ef9c80ae07df0e3f3875 358926 utils optional clamav_0.98.1+dfsg-1+deb6u4_amd64.deb
 88a54552b057c20c6e68053fd01009d4 448796 utils optional clamav-daemon_0.98.1+dfsg-1+deb6u4_amd64.deb
 ab70a4571c15b70940fe55cdbf1c9450 335988 utils optional clamav-freshclam_0.98.1+dfsg-1+deb6u4_amd64.deb
 9d8f1805fcf412778f493788dcdc4e78 372538 utils extra clamav-milter_0.98.1+dfsg-1+deb6u4_amd64.deb
 ec2daf4da68badd0d5bcf4e991b26176 233686 libdevel optional libclamav-dev_0.98.1+dfsg-1+deb6u4_amd64.deb
 b8e422f2bbdc61d03b8b1ac292723caf 24476716 debug extra clamav-dbg_0.98.1+dfsg-1+deb6u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=cCsD
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From owner at bugs.debian.org  Thu Nov 27 15:21:13 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 27 Nov 2014 15:21:13 +0000
Subject: [Pkg-clamav-devel] Bug#770985: marked as done (clamav:
 CVE-2014-9050: heap buffer overflow when scanning a specially crafted y0da
 Crypter obfuscated PE file)
References: <E1Xu0qv-00070s-J1@franck.debian.org>
 <20141125180730.26827.7611.reportbug@humbaba>
Message-ID: <handler.770985.D770985.141710157117366.ackdone@bugs.debian.org>

Your message dated Thu, 27 Nov 2014 15:19:29 +0000
with message-id <E1Xu0qv-00070s-J1 at franck.debian.org>
and subject line Bug#770985: fixed in clamav 0.98.1+dfsg-1+deb6u4
has caused the Debian Bug report #770985,
regarding clamav: CVE-2014-9050: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
770985: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770985
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Ralf Hildebrandt <ralf.hildebrandt at charite.de>
Subject: clamav: heap buffer overflow when scanning a specially crafted y0da Crypter obfuscated PE file
Date: Tue, 25 Nov 2014 19:07:30 +0100
Size: 2614
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141127/1111c07e/attachment.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Evgeni Golov <evgeni.golov at credativ.de>
Subject: Bug#770985: fixed in clamav 0.98.1+dfsg-1+deb6u4
Date: Thu, 27 Nov 2014 15:19:29 +0000
Size: 8792
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141127/1111c07e/attachment-0001.mht>

From owner at bugs.debian.org  Thu Nov 27 23:06:13 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 27 Nov 2014 23:06:13 +0000
Subject: [Pkg-clamav-devel] Processed: Re: Bug#770403: clamav-freshclam:
 Don't log progress indication to syslog
References: <5477ADEF.3020508@googlemail.com>
 <874mttxw28.fsf@helix.nebula.avasys.jp>
Message-ID: <handler.s.B770403.1417129464407.transcript@bugs.debian.org>

Processing control commands:

> forwarded -1 https://bugzilla.clamav.net/show_bug.cgi?id=11204
Bug #770403 [clamav-freshclam] clamav-freshclam: Don't log progress indication to syslog
Bug #767350 [clamav-freshclam] freshclam: use progress messages only on ttys
Set Bug forwarded-to-address to 'https://bugzilla.clamav.net/show_bug.cgi?id=11204'.
Set Bug forwarded-to-address to 'https://bugzilla.clamav.net/show_bug.cgi?id=11204'.

-- 
767350: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767350
770403: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770403
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From andreas.cadhalpun at googlemail.com  Thu Nov 27 23:04:15 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Fri, 28 Nov 2014 00:04:15 +0100
Subject: [Pkg-clamav-devel] Bug#770403: clamav-freshclam: Don't log progress
	indication to syslog
In-Reply-To: <2961215.jKsF452M8U@kitterman-optiplex-9020m>
References: <874mttxw28.fsf@helix.nebula.avasys.jp>
 <3608733.ZOJHL2Mpt6@scott-latitude-e6320> <54764E6B.2050800@googlemail.com>
 <2961215.jKsF452M8U@kitterman-optiplex-9020m>
Message-ID: <5477ADEF.3020508@googlemail.com>

Control: forwarded -1 https://bugzilla.clamav.net/show_bug.cgi?id=11204

Hi,

On 26.11.2014 23:08, Scott Kitterman wrote:
> OK.  Makes sense.  As with the other things, you've sent this upstream, right?

Yes, it's bb#11204, which is public by now.

Best regards,
Andreas


From andreas.cadhalpun at googlemail.com  Thu Nov 27 23:13:03 2014
From: andreas.cadhalpun at googlemail.com (Andreas Cadhalpun)
Date: Fri, 28 Nov 2014 00:13:03 +0100
Subject: [Pkg-clamav-devel] Bug#770581: freshclam: Can't save PID to file
	/var/run/clamav/freshclam.pid: No such file or directory
In-Reply-To: <54766AD7.8070804@gmx.de>
References: <547073C6.4000702@gmx.de> <5470A869.4090309@googlemail.com>
 <54766AD7.8070804@gmx.de>
Message-ID: <5477AFFF.8040404@googlemail.com>

Hi Heinrich,

On 27.11.2014 01:05, Heinrich Schuchardt wrote:
> I am using packages
>
> systemd-shim
> systemd-sysv

You might have both installed, but I don't think it's possible to use 
both at the same time, because systemd-shim is supposed to do nothing, 
if systemd is PID 1.

> Are you sure I do not need a PID file?

The sysv init script uses the PID file to track the freshclam daemon. 
Under systemd, freshclam is run in foreground mode and thus systemd 
doesn't need a PID file to track freshclam.

Best regards,
Andreas


From noreply at release.debian.org  Fri Nov 28 16:39:14 2014
From: noreply at release.debian.org (Debian testing watch)
Date: Fri, 28 Nov 2014 16:39:14 +0000
Subject: [Pkg-clamav-devel] libclamunrar 0.98.5-1 MIGRATED to testing
Message-ID: <E1XuOZe-0000AQ-H7@franck.debian.org>

FYI: The status of the libclamunrar source package
in Debian's testing distribution has changed.

  Previous version: 0.98.1-1
  Current version:  0.98.5-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From ciechanow at ctw-energy.com  Sat Nov 29 09:17:16 2014
From: ciechanow at ctw-energy.com (Faris Deeb)
Date: Sat, 29 Nov 2014 03:17:16 -0600
Subject: [Pkg-clamav-devel] Guaranteed 3%
Message-ID: <6801805548953@server>

Good Day

I am the Head of Finance at Sullah Finance FZE here in Abu Dhabi, UAE.

I am looking at investing over US$M900, 000,000.00 that has been placed for investments by a private owner.

If you are in need of funds to expand existing businesses or to start up a new project, then look no further as we would be more than delighted to work with you.

We are driven by a project's credibility to yield investment returns and should we ascertain your project as such, we will engage our funds at guaranteed 3% Fixed Interest Rate per annum but strictly in form of Loans.

Regards,

Faris Deeb
Sullah Finance Fze
Abu Dhabi-UAE.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141129/75165934/attachment.html>

From sebastian at breakpoint.cc  Sun Nov 30 21:08:19 2014
From: sebastian at breakpoint.cc (Sebastian Andrzej Siewior)
Date: Sun, 30 Nov 2014 22:08:19 +0100
Subject: [Pkg-clamav-devel] tommath
Message-ID: <20141130210819.GA26554@breakpoint.cc>

We pass --with-system-tommath to configure and build-depend on
libtommath-dev. And yet it fails to build on x32 due to a something in
tommath. I've been asking myself how can that be for a while now. And
today I found some time to look at it and well?

The argument we pass is pointless. libclamav is always built with the
internal copy of tommath. So I ripped it off, linked against the system
library and tried a build. It failed and complained about a missing
function, so I applied this:

--- a/libclamav/asn1.c
+++ b/libclamav/asn1.c
@@ -850,18 +850,14 @@ static int asn1_parse_mscat(fmap_t *map, size_t offset, unsigned int size, crtmg
             /* Dump the cert if requested before anything happens to it */
             if (engine->dconf->pe & PE_CONF_DUMPCERT) {
                 char issuer[SHA1_HASH_SIZE*2+1], subject[SHA1_HASH_SIZE*2+1], serial[SHA1_HASH_SIZE*2+1];
-                char mod[1024], exp[1024];
                 int j=1024;
 
-                fp_toradix_n(&x509->n, mod, 16, j);
-                fp_toradix_n(&x509->e, exp, 16, j);
                 for (j=0; j < SHA1_HASH_SIZE; j++) {
                     sprintf(&issuer[j*2], "%02x", x509->issuer[j]);
                     sprintf(&subject[j*2], "%02x", x509->subject[j]);
                     sprintf(&serial[j*2], "%02x", x509->serial[j]);
                 }
 
-                cli_dbgmsg_internal("cert subject:%s serial:%s pubkey:%s i:%s %lu->%lu %s %s %s\n", subject, serial, mod, issuer, (unsigned long)x509->not_before, (unsigned long)x509->not_after, x509->certSign ? "cert" : "", x509->codeSign ? "code" : "", x509->timeSign ? "time" : "");
             }
 
 		    if(parent) {


After that it built and the test-suite passed as well. One of mod + exp (the
output of fp_toradix_n() is only used in cli_dbgmsg_internal() so I
doubt that it is a big loss. And I am not sure that function does what
one expects it to do because the prototype is
 int fp_toradix_n(fp_int *a, char *str, int radix, int maxlen);

and x509 which is of type cli_crt which goes like this:
 typedef struct cli_crt_t {
?
     mp_int n;
     mp_int e;
     mp_int sig;
?
 } cli_crt;

The fp_ prefix is from tomfastmath while the other is tommath so it might
be a leftover.
I will open a bug with a patch where we really can use external
libtommath?

Sebastian


From ftpmaster at ftp-master.debian.org  Sun Nov 30 23:17:05 2014
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 30 Nov 2014 23:17:05 +0000
Subject: [Pkg-clamav-devel] libclamunrar_0.98.5-0+deb7u1_amd64.changes
	ACCEPTED into proposed-updates->stable-new, proposed-updates
Message-ID: <E1XvDjl-0007sS-EX@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 25 Nov 2014 22:01:13 +0100
Source: libclamunrar
Binary: libclamunrar6
Architecture: source amd64
Version: 0.98.5-0+deb7u1
Distribution: stable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel at lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Description: 
 libclamunrar6 - anti-virus utility for Unix - unrar support
Closes: 727917 741080 770647
Changes: 
 libclamunrar (0.98.5-0+deb7u1) stable; urgency=medium
 .
   [ Sebastian Andrzej Siewior ]
   * Update to new upstream version.
     - Finaly address "double-free error exists within the
       unrar_extract_next_prepare()" (Closes: #770647)
   * redo rules files to something smaller like we do have in the clamav
     package.
   * Do autoreconf before configure (closes: #727917).
   * Enable hardened build flags (closes: #741080).
   * Remove all .la files (clamd works without them).
   * Add VCS-* tags.
   * Add myself as uploader.
   * Remove *.so files (lintian warning).
   * Add a symbol file.
   * Bumb standards version to 3.9.1 after made the required changes.
   * Drop automake workaround, the bug was fixed.
   * Fix LFS support using the same approach as clamav for compatibility and
     correctness
 .
   [ Scott Kitterman ]
   * Add build-dep on libssl-dev, needed for configure even if not used
     in libclamunrar
   * Update debian/copyright to add openssl exception per COPYING
Checksums-Sha1: 
 823ce7b6fc5a60542c99cbae87679e3d1733585a 2147 libclamunrar_0.98.5-0+deb7u1.dsc
 6d4a3441e142002ffdaa76ad313bc018985e1999 304828 libclamunrar_0.98.5.orig.tar.xz
 5fcac87cba7af54f5cfeb6885e078b8c0b2e59fd 4861 libclamunrar_0.98.5-0+deb7u1.debian.tar.gz
 f498b377a3d6e11e09394b9166c739bf4b820378 37528 libclamunrar6_0.98.5-0+deb7u1_amd64.deb
Checksums-Sha256: 
 a772861a6d5af5aa6a82c3067d151666da2ba03291397de121b2084672713cbc 2147 libclamunrar_0.98.5-0+deb7u1.dsc
 3d957d584bee260f11c7b5b211899c4cacfffffc3849b1d0485b3f21eb2d4aac 304828 libclamunrar_0.98.5.orig.tar.xz
 228bed62ed05e476d3fc60d1964329a484a20cdd53a9da555ed739545a109526 4861 libclamunrar_0.98.5-0+deb7u1.debian.tar.gz
 c1e0d6d8ce87537c69123f5aceee3e12199e4feac6f0d3b451849777452c2b7b 37528 libclamunrar6_0.98.5-0+deb7u1_amd64.deb
Files: 
 e608b1092012e0e14d5bd9096d395fd0 2147 non-free/libs extra libclamunrar_0.98.5-0+deb7u1.dsc
 ecd3acdec22118338d3d5fbe41fba011 304828 non-free/libs extra libclamunrar_0.98.5.orig.tar.xz
 2a20306cd7a65c453b38d8192b151604 4861 non-free/libs extra libclamunrar_0.98.5-0+deb7u1.debian.tar.gz
 9a742fd59ef81b2736e5b2080c220e7f 37528 non-free/libs extra libclamunrar6_0.98.5-0+deb7u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=twUb
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From owner at bugs.debian.org  Sun Nov 30 23:21:32 2014
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sun, 30 Nov 2014 23:21:32 +0000
Subject: [Pkg-clamav-devel] Bug#770647: marked as done (double free in
 libclamunrar_iface + memory leak in read_block())
References: <E1XvDjl-0007so-Js@franck.debian.org>
 <20141122215350.GA2386@breakpoint.cc>
Message-ID: <handler.770647.D770647.141738942915098.ackdone@bugs.debian.org>

Your message dated Sun, 30 Nov 2014 23:17:05 +0000
with message-id <E1XvDjl-0007so-Js at franck.debian.org>
and subject line Bug#770647: fixed in libclamunrar 0.98.5-0+deb7u1
has caused the Debian Bug report #770647,
regarding double free in libclamunrar_iface + memory leak in read_block()
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
770647: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770647
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Subject: double free in libclamunrar_iface + memory leak in read_block()
Date: Sat, 22 Nov 2014 22:53:50 +0100
Size: 2855
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141130/85dfbf75/attachment.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Subject: Bug#770647: fixed in libclamunrar 0.98.5-0+deb7u1
Date: Sun, 30 Nov 2014 23:17:05 +0000
Size: 6432
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20141130/85dfbf75/attachment-0001.mht>