Your message dated Sun, 22 Jul 2018 22:02:08 +0000
with message-id <[email protected]>
and subject line Bug#903896: fixed in clamav 0.100.1+dfsg-0+deb9u1
has caused the Debian Bug report #903896,
regarding freshclam: 0.100.1 to Stable ASAP: cron job complains about old
version
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
903896: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903896
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: clamav-freshclam
Version: 0.100.0+dfsg-0+deb9u2
Severity: important
clamav-freshclam has started complaining about an outdated version. This
complain is sent at regular intervals whenever the cron job tries to fetch
updates.
This seems to be due to upstream having started pushing data that is meant for
0.100.1 releases. It would thus be desiable for this to be pushed into
stable-updates.
Thanks!
Software settings
-----------------
Version: 0.100.0
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2
LIBXML2 PCRE ICONV JSON JIT
Database information
--------------------
Database directory: /var/lib/clamav
bytecode.cld: version 324, sigs: 89, built on Tue Jul 10 02:36:55 2018
main.cld: version 58, sigs: 4566249, built on Thu Jun 8 00:38:10 2017
daily.cld: version 24757, sigs: 2014720, built on Mon Jul 16 07:56:20 2018
Total number of signatures: 6581058
Platform information
--------------------
uname: Linux 4.9.0-7-amd64 #1 SMP Debian 4.9.110-1 (2018-07-05) x86_64
OS: linux-gnu, ARCH: x86_64, CPU: x86_64
Full OS version: Debian GNU/Linux 9.5 (stretch)
zlib version: 1.2.8 (1.2.8), compile flags: a9
Triple: x86_64-pc-linux-gnu
CPU: ivybridge, Little-endian
platform id: 0x0a215b5b0806030001060300
Build information
-----------------
GNU C: 6.3.0 20170516 (6.3.0)
GNU C++: 6.3.0 20170516 (6.3.0)
CPPFLAGS: -Wdate-time -D_FORTIFY_SOURCE=2
CFLAGS: -g -O2 -fdebug-prefix-map=/build/clamav-E1AVcn/clamav-0.100.0+dfsg=.
-fstack-protector-strong -Wformat -Werror=format-security -Wall
-D_FILE_OFFSET_BITS=64 -fno-strict-aliasing -D_LARGEFILE_SOURCE
-D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64
CXXFLAGS: -g -O2 -fdebug-prefix-map=/build/clamav-E1AVcn/clamav-0.100.0+dfsg=.
-fstack-protector-strong -Wformat -Werror=format-security -Wall
-D_FILE_OFFSET_BITS=64
LDFLAGS: -Wl,-z,relro -Wl,-z,now -Wl,--as-needed
Configure: '--build=x86_64-linux-gnu' '--prefix=/usr'
'--includedir=/usr/include' '--mandir=/usr/share/man'
'--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var'
'--disable-silent-rules' '--libdir=/usr/lib/x86_64-linux-gnu'
'--libexecdir=/usr/lib/x86_64-linux-gnu' '--disable-maintainer-mode'
'--disable-dependency-tracking' 'CFLAGS=-g -O2
-fdebug-prefix-map=/build/clamav-E1AVcn/clamav-0.100.0+dfsg=.
-fstack-protector-strong -Wformat -Werror=format-security -Wall
-D_FILE_OFFSET_BITS=64' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g
-O2 -fdebug-prefix-map=/build/clamav-E1AVcn/clamav-0.100.0+dfsg=.
-fstack-protector-strong -Wformat -Werror=format-security -Wall
-D_FILE_OFFSET_BITS=64' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -Wl,--as-needed'
'--with-dbdir=/var/lib/clamav' '--sysconfdir=/etc/clamav' '--disable-clamav'
'--disable-unrar' '--enable-milter' '--enable-dns-fix' '--with-libjson'
'--with-system-libmspack' '--with-libcurl=/usr' '--with-gnu-ld'
'-with-system-llvm
=/usr/bin/llvm-config' '--with-llvm-linking=dynamic'
'--with-systemdsystemunitdir=/lib/systemd/system' 'build_alias=x86_64-linux-gnu'
sizeof(void*) = 8
Engine flevel: 91, dconf: 91
--- data dir ---
total 442136
-rw-r--r-- 1 clamav clamav 944128 Jul 10 03:31 bytecode.cld
-rw-r--r-- 1 clamav clamav 144288768 Jul 16 08:36 daily.cld
-rw-r--r-- 1 clamav clamav 307499008 Jun 8 2017 main.cld
-rw------- 1 clamav clamav 156 Jul 16 12:36 mirrors.dat
-- System Information:
Debian Release: 9.5
APT prefers stable
APT policy: (900, 'stable'), (500, 'stable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-7-amd64 (SMP w/8 CPU cores)
Locale: LANG=fi_FI.utf8, LC_CTYPE=fi_FI.utf8 (charmap=UTF-8),
LANGUAGE=fi_FI.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages clamav-freshclam depends on:
ii clamav-base 0.100.0+dfsg-0+deb9u2
ii debconf [debconf-2.0] 1.5.61
ii dpkg 1.18.25
ii init-system-helpers 1.48
ii libc6 2.24-11+deb9u3
ii libclamav7 0.100.0+dfsg-0+deb9u2
ii libssl1.1 1.1.0f-3+deb9u2
ii logrotate 3.11.0-0.1
ii lsb-base 9.20161125
ii procps 2:3.3.12-3+deb9u1
ii ucf 3.0036
ii zlib1g 1:1.2.8.dfsg-5
clamav-freshclam recommends no packages.
Versions of packages clamav-freshclam suggests:
pn apparmor <none>
pn clamav-docs <none>
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Source: clamav
Source-Version: 0.100.1+dfsg-0+deb9u1
We believe that the bug you reported is fixed in the latest version of
clamav, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sebastian Andrzej Siewior <[email protected]> (supplier of updated clamav
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 21 Jul 2018 13:13:59 +0200
Source: clamav
Binary: clamav-base clamav-docs clamav libclamav-dev libclamav7 clamav-daemon
clamdscan clamav-testfiles clamav-freshclam clamav-milter
Architecture: source
Version: 0.100.1+dfsg-0+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: ClamAV Team <[email protected]>
Changed-By: Sebastian Andrzej Siewior <[email protected]>
Description:
clamav - anti-virus utility for Unix - command-line interface
clamav-base - anti-virus utility for Unix - base package
clamav-daemon - anti-virus utility for Unix - scanner daemon
clamav-docs - anti-virus utility for Unix - documentation
clamav-freshclam - anti-virus utility for Unix - virus database update utility
clamav-milter - anti-virus utility for Unix - sendmail integration
clamav-testfiles - anti-virus utility for Unix - test files
clamdscan - anti-virus utility for Unix - scanner client
libclamav-dev - anti-virus utility for Unix - development files
libclamav7 - anti-virus utility for Unix - library
Closes: 902601 903896
Changes:
clamav (0.100.1+dfsg-0+deb9u1) stretch; urgency=medium
.
[ Scott Kitterman ]
* Only create clamav user during clamav-base install if it does not exist
(LP: #121872)
- Thanks to Shane Williams for the patch
.
[ Sebastian Andrzej Siewior ]
* New upstrem relase (0.100.1) (Closes: #903896).
- CVE-2018-0360 (HWP integer overflow, infinite loop vulnerabi)
- CVE-2018-0361 (ClamAV PDF object length check, unreasonably long time to
parse relatively small file)
* Bump symbol version due to new version.
* Add read permission for freshclam on /var/log in the apparmor profile.
Thanks to Robie Basak (Closes: #902601).
Checksums-Sha1:
a3dba6523e8ff5e23e695b12bb991b3f54ef9d3e 3067 clamav_0.100.1+dfsg-0+deb9u1.dsc
b070d819823d049a49d09837beafe166da264c41 5476520
clamav_0.100.1+dfsg.orig.tar.xz
adc71ac6143deb379651a20b5fcdb8f9e8c62947 217848
clamav_0.100.1+dfsg-0+deb9u1.debian.tar.xz
9a687145d4b8fd478b6906cac1bd740b457c584e 6998
clamav_0.100.1+dfsg-0+deb9u1_source.buildinfo
Checksums-Sha256:
84ba212a51e72bb2b3494b39fe751adacf1ae374090a2c2a85cf480d6988b479 3067
clamav_0.100.1+dfsg-0+deb9u1.dsc
e345c44a0596075480eb04e9dd1a6ffa7901a455fe05bec188801e929380028a 5476520
clamav_0.100.1+dfsg.orig.tar.xz
60b8fe98b1c8729aabdc09f9982da0d32c8c90d8d09fc9534f2ffd9365162a7d 217848
clamav_0.100.1+dfsg-0+deb9u1.debian.tar.xz
9522626c81ce822c7cad0b2724e5348676772a3547f2c020584d299ff2d09cd7 6998
clamav_0.100.1+dfsg-0+deb9u1_source.buildinfo
Files:
fe08dbb390372bda869fd8d48cbe2726 3067 utils optional
clamav_0.100.1+dfsg-0+deb9u1.dsc
543aa0ec3bfb4e5e0340f0fe103b4c00 5476520 utils optional
clamav_0.100.1+dfsg.orig.tar.xz
79a7a9eb4f4173f68de8ac4d329e30de 217848 utils optional
clamav_0.100.1+dfsg-0+deb9u1.debian.tar.xz
473429b75c498e84362f5c3359a666b3 6998 utils optional
clamav_0.100.1+dfsg-0+deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=epE8
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-clamav-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-clamav-devel