Your message dated Thu, 01 Jul 2021 22:33:28 +0000
with message-id <e1lz5fq-0006ia...@fasolo.debian.org>
and subject line Bug#988218: fixed in clamav 0.103.3+dfsg-1
has caused the Debian Bug report #988218,
regarding Regression: clamdscan segfaults with --fdpass --multipass and 
ExcludePath in clamd.conf
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
988218: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988218
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: clamav
Version: 0.103.2+dfsg-0+deb10u1
Severity: important

Dear Maintainer,

since the latest upgrade to 0.103.2+dfsg-0+deb10u1 clamdscan segfaults
immediately when called with both --fdpass and --multiscan and when the
ExcludePath option is used in clamd.conf. Ubuntu was hit by the same
regression, so I'm referencing the Ubuntu bug report for more details [1].
The issue is fixed upstream [2] and Ubuntu cherry-picked that fix already.
Please consider doing the same for Debian stable.

Thank you!

Regards,

Timo

[1] https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1926300
[2] 
https://github.com/Cisco-Talos/clamav-devel/commit/5adef25d8d0f4e5f3f2f9dc24c59beede72abf9a

-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav

Config file: clamd.conf
-----------------------
AlertExceedsMax disabled
PreludeEnable disabled
PreludeAnalyzerName = "ClamAV"
LogFile = "/var/log/clamav/clamav.log"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
ExtendedDetectionInfo = "yes"
PidFile disabled
TemporaryDirectory disabled
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "clamav"
LocalSocketMode = "660"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "200"
StreamMaxLength = "104857600"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "3"
ReadTimeout = "300"
CommandReadTimeout = "30"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath = "^/\.snapshots/", "^/dev/", "^/proc/", "^/run/", "^/sys/"
MaxDirectoryRecursion = "50"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "3600"
ConcurrentDatabaseReload = "yes"
DisableCache disabled
VirusEvent disabled
ExitOnOOM disabled
AllowAllMatchScan = "yes"
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = "clamav"
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "600000"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
ScanPE = "yes"
ScanELF = "yes"
ScanMail = "yes"
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
HeuristicAlerts = "yes"
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
AlertBrokenExecutables disabled
AlertBrokenMedia disabled
AlertEncrypted disabled
StructuredCCOnly disabled
AlertEncryptedArchive disabled
AlertEncryptedDoc disabled
AlertOLE2Macros disabled
AlertPhishingSSLMismatch disabled
AlertPhishingCloak disabled
AlertPartitionIntersection disabled
ScanPDF = "yes"
ScanSWF = "yes"
ScanXMLDOCS = "yes"
ScanHWP3 = "yes"
ScanArchive = "yes"
ForceToDisk disabled
MaxScanTime = "300000"
MaxScanSize = "2097152000"
MaxFileSize = "1048576000"
MaxRecursion = "16"
MaxFiles = "100000"
MaxEmbeddedPE = "26214400"
MaxHTMLNormalize = "10485760"
MaxHTMLNoTags = "2097152"
MaxScriptNormalize = "5242880"
MaxZipTypeRcg = "10485760"
MaxPartitions = "50"
MaxIconsPE = "100"
MaxRecHWP3 = "16"
PCREMatchLimit = "10000"
PCRERecMatchLimit = "5000"
PCREMaxFileSize = "104857600"
OnAccessMountPath disabled
OnAccessIncludePath disabled
OnAccessExcludePath disabled
OnAccessExcludeRootUID disabled
OnAccessExcludeUID disabled
OnAccessExcludeUname disabled
OnAccessMaxFileSize = "26214400"
OnAccessDisableDDD disabled
OnAccessPrevention disabled
OnAccessExtraScanning disabled
OnAccessCurlTimeout = "5000"
OnAccessMaxThreads = "5"
OnAccessRetryAttempts disabled
OnAccessDenyOnError disabled
DevACOnly disabled
DevACDepth disabled
DevPerformance disabled
DevLiblog disabled
DisableCertCheck disabled
AlgorithmicDetection = "yes"
BlockMax disabled
PhishingAlwaysBlockSSLMismatch disabled
PhishingAlwaysBlockCloak disabled
PartitionIntersection disabled
OLE2BlockMacros disabled
ArchiveBlockEncrypted disabled

Config file: freshclam.conf
---------------------------
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
PidFile disabled
DatabaseDirectory = "/var/lib/clamav"
Foreground disabled
Debug disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "6"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.de.clamav.net", "database.clamav.net"
PrivateMirror disabled
MaxAttempts = "5"
ScriptedUpdates = "yes"
TestDatabases = "yes"
CompressLocalDatabase disabled
ExtraDatabase disabled
ExcludeDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "300"
Bytecode = "yes"
*** SafeBrowsing is DEPRECATED ***

clamav-milter.conf not found

Software settings
-----------------
Version: 0.103.2
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 
LIBXML2 PCRE2 ICONV JSON RAR 
Database information
--------------------
Database directory: /var/lib/clamav
main.cvd: version 59, sigs: 4564902, built on Mon Nov 25 14:56:15 2019
bytecode.cld: version 333, sigs: 92, built on Mon Mar  8 16:21:51 2021
daily.cld: version 26162, sigs: 3977101, built on Thu May  6 13:11:07 2021
Total number of signatures: 8542095

Platform information
--------------------
uname: Linux 4.19.0-16-amd64 #1 SMP Debian 4.19.181-1 (2021-03-19) x86_64
OS: linux-gnu, ARCH: x86_64, CPU: x86_64
Full OS version: Debian GNU/Linux 10 (buster)
zlib version: 1.2.11 (1.2.11), compile flags: a9
platform id: 0x0a217b7b0800000000080300

Build information
-----------------
GNU C: 8.3.0 (8.3.0)
CPPFLAGS: -Wdate-time -D_FORTIFY_SOURCE=2
CFLAGS: -g -O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security -Wall 
-D_FILE_OFFSET_BITS=64  -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE 
-D_FILE_OFFSET_BITS=64
CXXFLAGS: -g -O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security -Wall 
-D_FILE_OFFSET_BITS=64
LDFLAGS: -Wl,-z,relro -Wl,-z,now -Wl,--as-needed
Configure: '--build=x86_64-linux-gnu' '--prefix=/usr' 
'--includedir=/usr/include' '--mandir=/usr/share/man' 
'--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var' 
'--disable-silent-rules' '--libdir=/usr/lib/x86_64-linux-gnu' 
'--libexecdir=/usr/lib/x86_64-linux-gnu' '--runstatedir=/run' 
'--disable-maintainer-mode' '--disable-dependency-tracking' 'CFLAGS=-g -O2 
-fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security -Wall 
-D_FILE_OFFSET_BITS=64' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g 
-O2 -fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security -Wall 
-D_FILE_OFFSET_BITS=64' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -Wl,--as-needed' 
'--with-dbdir=/var/lib/clamav' '--sysconfdir=/etc/clamav' '--disable-clamav' 
'--disable-unrar' '--enable-milter' '--enable-dns-fix' '--with-libjson' 
'--with-system-libmspack' '--with-libcurl=/usr' '--with-gnu-ld' 
'--with-systemdsystemunitdir=/lib/systemd/system' 
'build_alias=x86_64-linux-gnu' 'OBJCFLAGS=-g -O2 
-fdebug-prefix-map=/build/clamav-8IIwz9/clamav-0.103.2+dfsg=. 
-fstack-protector-strong -Wformat -Werror=format-security'
sizeof(void*) = 8
Engine flevel: 123, dconf: 123

--- data dir ---
total 432016
-rw-r--r-- 1 clamav clamav   1438720 Mar  8 20:00 bytecode.cld
-rw-r--r-- 1 clamav clamav 323073024 May  6 15:10 daily.cld
-rw-r--r-- 1 clamav clamav 117859675 Dec 25 00:55 main.cvd
-rw-r--r-- 1 clamav clamav        69 Apr 24 05:06 mirrors.dat

-- System Information:
Debian Release: 10.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (400, 
'proposed-updates')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-16-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) (ignored: LC_ALL set to 
en_US.UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages clamav depends on:
ii  clamav-freshclam [clamav-data]  0.103.2+dfsg-0+deb10u1
ii  libc6                           2.28-10
ii  libclamav9                      0.103.2+dfsg-0+deb10u1
ii  libcurl4                        7.64.0-4+deb10u2
ii  libjson-c3                      0.12.1+ds-2+deb10u1
ii  libssl1.1                       1.1.1d-0+deb10u6
ii  zlib1g                          1:1.2.11.dfsg-1

Versions of packages clamav recommends:
ii  clamav-base  0.103.2+dfsg-0+deb10u1

Versions of packages clamav suggests:
pn  clamav-docs   <none>
ii  libclamunrar  0.102.3-0+deb10u1

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: clamav
Source-Version: 0.103.3+dfsg-1
Done: Sebastian Andrzej Siewior <sebast...@breakpoint.cc>

We believe that the bug you reported is fixed in the latest version of
clamav, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 988...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastian Andrzej Siewior <sebast...@breakpoint.cc> (supplier of updated clamav 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 02 Jul 2021 00:06:16 +0200
Source: clamav
Architecture: source
Version: 0.103.3+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-de...@lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebast...@breakpoint.cc>
Closes: 987861 988218
Changes:
 clamav (0.103.3+dfsg-1) unstable; urgency=medium
 .
   * Import 0.103.2
     - Update symbol file.
     - Regression: clamdscan segfaults with --fdpass --multipass and
       ExcludePath (Closes: #988218).
   * Remove clamav user on purge (Closes: #987861).
   * Remove freshclam.dat on purge.
Checksums-Sha1:
 7a6af815e492cbb593200db53f1d5641ac98c439 2777 clamav_0.103.3+dfsg-1.dsc
 1c8ffd98a7bdeec6bc329218da5d4f8e1f912333 5124272 
clamav_0.103.3+dfsg.orig.tar.xz
 411a1263836e8a25e40b141c586599db419fdf00 220256 
clamav_0.103.3+dfsg-1.debian.tar.xz
Checksums-Sha256:
 470aaedb148d3079607d710f90629a8b0e35a8b81d3859f64afdb6a1d302d5ba 2777 
clamav_0.103.3+dfsg-1.dsc
 a4b2d0711dfdda03da63d5dffc4e7d6904a3cbfae860f8b2cdf4334930122838 5124272 
clamav_0.103.3+dfsg.orig.tar.xz
 4edb64e2c797c75c495ef2aa24814f23a8ed19dea2ab49a2a449ce99780c4193 220256 
clamav_0.103.3+dfsg-1.debian.tar.xz
Files:
 15868963ac010000f51729b2629a2fb2 2777 utils optional clamav_0.103.3+dfsg-1.dsc
 be769904ecaa7fc359fe42f5eacd2327 5124272 utils optional 
clamav_0.103.3+dfsg.orig.tar.xz
 b062ea913a60e12cc6598eaade00ad71 220256 utils optional 
clamav_0.103.3+dfsg-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=59fC
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-clamav-devel mailing list
Pkg-clamav-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-clamav-devel

Reply via email to