Your message dated Mon, 04 May 2015 10:02:41 +0000 with message-id <[email protected]> and subject line Bug#781088: fixed in clamav 0.98.7+dfsg-0+deb7u1 has caused the Debian Bug report #781088, regarding clamav-freshclam: illegal characters in init script to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 781088: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781088 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: clamav-freshclam Version: 0.98.6+dfsg-0+deb7u1 Severity: normal Dear Maintainer, Please check pathfind() function in /etc/init.d/clamav-freshclam. All double quotes (", ASCII 34, 0x22) are replaced by strange UTF-8 byte sequences e2 80 9d (U+201D, RIGHT DOUBLE QUOTATION MARK). I guess somebody copied this code from a web page... :-( The latest 0.98.6+dfsg-1 also suffers from this. Gabor -- Package-specific info: --- configuration --- Checking configuration files in /etc/clamav Config file: clamd.conf ----------------------- LogFile = "/var/log/clamav/clamav.log" StatsHostID = "auto" StatsEnabled disabled StatsPEDisabled = "yes" StatsTimeout = "10" LogFileUnlock disabled LogFileMaxSize = "4294967295" LogTime = "yes" LogClean disabled LogSyslog disabled LogFacility = "LOG_LOCAL6" LogVerbose disabled LogRotate = "yes" ExtendedDetectionInfo = "yes" PidFile = "/var/run/clamav/clamd.pid" TemporaryDirectory disabled DatabaseDirectory = "/var/lib/clamav" OfficialDatabaseOnly disabled LocalSocket = "/var/run/clamav/clamd.ctl" LocalSocketGroup = "clamav" LocalSocketMode = "666" FixStaleSocket = "yes" TCPSocket disabled TCPAddr disabled MaxConnectionQueueLength = "15" StreamMaxLength = "26214400" StreamMinPort = "1024" StreamMaxPort = "2048" MaxThreads = "12" ReadTimeout = "180" CommandReadTimeout = "5" SendBufTimeout = "200" MaxQueue = "100" IdleTimeout = "30" ExcludePath disabled MaxDirectoryRecursion = "15" FollowDirectorySymlinks disabled FollowFileSymlinks disabled CrossFilesystems = "yes" SelfCheck = "3600" DisableCache disabled VirusEvent disabled ExitOnOOM disabled AllowAllMatchScan = "yes" Foreground disabled Debug disabled LeaveTemporaryFiles disabled User = "clamav" AllowSupplementaryGroups = "yes" Bytecode = "yes" BytecodeSecurity = "TrustSigned" BytecodeTimeout = "60000" BytecodeUnsigned disabled BytecodeMode = "Auto" DetectPUA disabled ExcludePUA disabled IncludePUA disabled AlgorithmicDetection = "yes" ScanPE = "yes" ScanELF = "yes" DetectBrokenExecutables disabled ScanMail = "yes" ScanPartialMessages disabled PhishingSignatures = "yes" PhishingScanURLs = "yes" PhishingAlwaysBlockCloak disabled PhishingAlwaysBlockSSLMismatch disabled PartitionIntersection disabled HeuristicScanPrecedence disabled StructuredDataDetection disabled StructuredMinCreditCardCount = "3" StructuredMinSSNCount = "3" StructuredSSNFormatNormal = "yes" StructuredSSNFormatStripped disabled ScanHTML = "yes" ScanOLE2 = "yes" OLE2BlockMacros disabled ScanPDF = "yes" ScanSWF = "yes" ScanArchive = "yes" ArchiveBlockEncrypted disabled ForceToDisk disabled MaxScanSize = "104857600" MaxFileSize = "26214400" MaxRecursion = "10" MaxFiles = "10000" MaxEmbeddedPE = "10485760" MaxHTMLNormalize = "10485760" MaxHTMLNoTags = "2097152" MaxScriptNormalize = "5242880" MaxZipTypeRcg = "1048576" MaxPartitions = "50" MaxIconsPE = "100" ScanOnAccess disabled OnAccessIncludePath disabled OnAccessExcludePath disabled OnAccessExcludeUID disabled OnAccessMaxFileSize = "5242880" DevACOnly disabled DevACDepth disabled DevPerformance disabled DevLiblog disabled DisableCertCheck disabled Config file: freshclam.conf --------------------------- StatsHostID disabled StatsEnabled disabled StatsTimeout disabled LogFileMaxSize = "4294967295" LogTime = "yes" LogSyslog disabled LogFacility = "LOG_LOCAL6" LogVerbose disabled LogRotate = "yes" PidFile = "/var/run/clamav/freshclam.pid" DatabaseDirectory = "/var/lib/clamav" Foreground disabled Debug disabled AllowSupplementaryGroups disabled UpdateLogFile = "/var/log/clamav/freshclam.log" DatabaseOwner = "clamav" Checks = "24" DNSDatabaseInfo = "current.cvd.clamav.net" DatabaseMirror = "db.local.clamav.net", "database.clamav.net" PrivateMirror disabled MaxAttempts = "5" ScriptedUpdates = "yes" TestDatabases = "yes" CompressLocalDatabase disabled ExtraDatabase disabled DatabaseCustomURL disabled HTTPProxyServer disabled HTTPProxyPort disabled HTTPProxyUsername disabled HTTPProxyPassword disabled HTTPUserAgent disabled NotifyClamd = "/etc/clamav/clamd.conf" OnUpdateExecute disabled OnErrorExecute disabled OnOutdatedExecute disabled LocalIPAddress disabled ConnectTimeout = "30" ReceiveTimeout = "30" SubmitDetectionStats disabled DetectionStatsCountry disabled DetectionStatsHostID disabled SafeBrowsing disabled Bytecode = "yes" clamav-milter.conf not found Software settings ----------------- Version: 0.98.6 Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 LIBXML2 JSON JIT Database information -------------------- Database directory: /var/lib/clamav main.cvd: version 55, sigs: 2424225, built on Tue Sep 17 16:57:28 2013 [3rd Party] junk.ndb: 50233 sigs [3rd Party] jurlbl.ndb: 11133 sigs [3rd Party] phish.ndb: 24795 sigs [3rd Party] rogue.hdb: 691 sigs [3rd Party] sanesecurity.ftm: 159 sigs [3rd Party] scam.ndb: 12297 sigs [3rd Party] spamimg.hdb: 18 sigs [3rd Party] winnow_malware.hdb: 2097 sigs [3rd Party] winnow_malware_links.ndb: 7323 sigs [3rd Party] honeynet.hdb: 377 sigs [3rd Party] securiteinfobat.hdb: 2600 sigs [3rd Party] securiteinfodos.hdb: 4509 sigs [3rd Party] securiteinfoelf.hdb: 1256 sigs [3rd Party] securiteinfo.hdb: 389047 sigs [3rd Party] securiteinfohtml.hdb: 59549 sigs [3rd Party] securiteinfooffice.hdb: 4264 sigs [3rd Party] securiteinfopdf.hdb: 738 sigs [3rd Party] securiteinfosh.hdb: 404 sigs [3rd Party] mbl.ndb: 0 sig daily.cld: version 20231, sigs: 1357060, built on Tue Mar 24 05:48:29 2015 bytecode.cld: version 247, sigs: 41, built on Fri Feb 27 20:27:13 2015 Total number of signatures: 4352816 Platform information -------------------- uname: Linux 3.2.0-4-amd64 #1 SMP Debian 3.2.65-1+deb7u2 x86_64 OS: linux-gnu, ARCH: x86_64, CPU: x86_64 zlib version: 1.2.7 (1.2.7), compile flags: a9 Triple: x86_64-pc-linux-gnu CPU: i686, Little-endian platform id: 0x0a214f4f0804070201040702 Build information ----------------- GNU C: 4.7.2 (4.7.2) GNU C++: 4.7.2 (4.7.2) CPPFLAGS: -D_FORTIFY_SOURCE=2 CFLAGS: -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE CXXFLAGS: LDFLAGS: -Wl,-z,relro Configure: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=/usr/include' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=/usr/lib/clamav' '--disable-maintainer-mode' '--disable-dependency-tracking' 'CFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64' 'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall -D_FILE_OFFSET_BITS=64' 'LDFLAGS=-Wl,-z,relro' '--with-dbdir=/var/lib/clamav' '--sysconfdir=/etc/clamav' '--disable-clamav' '--disable-unrar' '--enable-milter' '--enable-dns-fix' '--with-libjson' '--with-gnu-ld' '-with-system-llvm=/usr/bin/llvm-config' 'build_alias=x86_64-linux-gnu' sizeof(void*) = 8 Engine flevel: 79, dconf: 79 --- data dir --- total 198068 -rw-r--r-- 1 clamav clamav 346624 Feb 27 20:58 bytecode.cld -rw-r--r-- 1 clamav clamav 86866432 Mar 24 06:27 daily.cld -rw-r--r-- 1 clamav clamav 22549 Feb 5 2013 honeynet.hdb -rw-r--r-- 1 clamav clamav 6295949 Mar 23 16:51 junk.ndb -rw-r--r-- 1 clamav clamav 1114733 Mar 24 09:50 jurlbl.ndb -rw-r--r-- 1 clamav clamav 64720632 Aug 27 2014 main.cvd -rw-r--r-- 1 clamav clamav 356 Jan 28 23:47 mbl.ndb -rw-r--r-- 1 clamav clamav 156 Mar 24 11:28 mirrors.dat -rw-r--r-- 1 clamav clamav 3690307 Mar 23 16:51 phish.ndb -rw-r--r-- 1 clamav clamav 53403 Mar 23 18:49 rogue.hdb -rw-r--r-- 1 clamav clamav 9952 Sep 3 2014 sanesecurity.ftm -rw-r--r-- 1 clamav clamav 1868685 Mar 20 12:51 scam.ndb -rw-r--r-- 1 clamav clamav 31057190 Mar 23 16:11 securiteinfo.hdb -rw-r--r-- 1 clamav clamav 200405 Feb 5 2013 securiteinfobat.hdb -rw-r--r-- 1 clamav clamav 391274 Nov 28 2013 securiteinfodos.hdb -rw-r--r-- 1 clamav clamav 75040 Jan 21 2014 securiteinfoelf.hdb -rw-r--r-- 1 clamav clamav 4676072 Mar 23 20:09 securiteinfohtml.hdb -rw-r--r-- 1 clamav clamav 264154 Feb 5 2013 securiteinfooffice.hdb -rw-r--r-- 1 clamav clamav 51819 Feb 25 13:51 securiteinfopdf.hdb -rw-r--r-- 1 clamav clamav 29520 Feb 5 2013 securiteinfosh.hdb -rw-r--r-- 1 clamav clamav 1148 Oct 28 17:51 spamimg.hdb -rw-r--r-- 1 clamav clamav 128566 Mar 22 20:45 winnow_malware.hdb -rw-r--r-- 1 clamav clamav 902923 Mar 24 02:46 winnow_malware_links.ndb -- System Information: Debian Release: 7.8 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/dash Versions of packages clamav-freshclam depends on: ii clamav-base 0.98.6+dfsg-0+deb7u1 ii debconf [debconf-2.0] 1.5.49 ii dpkg 1.16.15 ii libc6 2.13-38+deb7u8 ii libclamav6 0.98.6+dfsg-0+deb7u1 ii libssl1.0.0 1.0.1e-2+deb7u15 ii logrotate 3.8.1-4 ii lsb-base 4.1+Debian8+deb7u1 ii procps 1:3.3.3-3 ii ucf 3.0025+nmu3 ii zlib1g 1:1.2.7.dfsg-13 clamav-freshclam recommends no packages. Versions of packages clamav-freshclam suggests: pn apparmor <none> pn clamav-docs <none> -- Configuration Files: /etc/logcheck/ignore.d.server/clamav-freshclam [Errno 13] Permission denied: u'/etc/logcheck/ignore.d.server/clamav-freshclam' -- debconf information excluded
--- End Message ---
--- Begin Message ---Source: clamav Source-Version: 0.98.7+dfsg-0+deb7u1 We believe that the bug you reported is fixed in the latest version of clamav, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sebastian Andrzej Siewior <[email protected]> (supplier of updated clamav package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2015 22:35:37 +0200 Source: clamav Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamav-testfiles clamav-freshclam clamav-milter Architecture: source all Version: 0.98.7+dfsg-0+deb7u1 Distribution: oldstable Urgency: high Maintainer: ClamAV Team <[email protected]> Changed-By: Sebastian Andrzej Siewior <[email protected]> Description: clamav - anti-virus utility for Unix - command-line interface clamav-base - anti-virus utility for Unix - base package clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-dbg - debug symbols for ClamAV clamav-docs - anti-virus utility for Unix - documentation clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamav-testfiles - anti-virus utility for Unix - test files libclamav-dev - anti-virus utility for Unix - development files libclamav6 - anti-virus utility for Unix - library Closes: 778406 778445 781088 Changes: clamav (0.98.7+dfsg-0+deb7u1) oldstable; urgency=high . [ Andreas Cadhalpun ] * Fix variable name mismatch in clamav-milter.postinst in order to make preseeding work correctly. (Closes: #778445) * Drop 'XS-Testsuite: autopkgtest' from debian/control. Debhelper automatically adds the Testsuite field. This fixes the lintian warning xs-testsuite-header-in-debian-control. * Fix cleanup on purge in clamav-base.postrm. . [ Sebastian Andrzej Siewior ] * Replace ” with " in debian/common_functions (Closes: #781088) * Import new upstream: - Improvements to PDF processing: decryption, escape sequence handling, and file property collection. - Scanning/analysis of additional Microsoft Office 2003 XML format. - Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior. CVE-2015-2221. - Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2222. - Fix false negatives on files within iso9660 containers. This issue was reported by Minzhuan Gong. - Fix a couple crashes on crafted upack packed file. Identified and patches supplied by Sebastian Andrzej Siewior. - Fix a crash during algorithmic detection on crafted PE file. Identified and patch supplied by Sebastian Andrzej Siewior. - Fix an infinite loop condition on a crafted "xz" archive file. This was reported by Dimitri Kirchner and Goulven Guiheux. CVE-2015-2668. - Fix compilation error after ./configure --disable-pthreads. Reported and fix suggested by John E. Krokes. - Apply upstream patch for possible heap overflow in Henry Spencer's regex library. CVE-2015-2305 (Closes: #778406). - Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170. - Fix segfault scanning certain HTML files. Reported with sample by Kai Risku. - Improve detections within xar/pkg files. * update GPG key used to verify releases to get uscan/get_orig.sh working again. * update symbol version for cl_retflevel due to CL_FLEVEL change. Checksums-Sha1: 6b755bd27eb547946424c3055b4e431adb374d52 2883 clamav_0.98.7+dfsg-0+deb7u1.dsc d00df0b36ca5ef72518e891e5cb2bdf7ffbf9b9c 8322932 clamav_0.98.7+dfsg.orig.tar.xz 9e9ba6cb4f82cea7b259d5f679cfc9caeac2eab8 852764 clamav_0.98.7+dfsg-0+deb7u1.debian.tar.gz 0c597e1edb972459961683abbe9c32a75d06f4db 282498 clamav-base_0.98.7+dfsg-0+deb7u1_all.deb 0e5edb040faa54b26fcd789f2e6995a99fff7431 903890 clamav-docs_0.98.7+dfsg-0+deb7u1_all.deb 0c56e36ada43850a1ed74bf8d44657d1959fa28e 5286736 clamav-testfiles_0.98.7+dfsg-0+deb7u1_all.deb Checksums-Sha256: a109d8300ad94c0edf38533889555eb6c2ecdedd5b14d88b69f56ca260c8b7c1 2883 clamav_0.98.7+dfsg-0+deb7u1.dsc 3a153ccdde90702dc175bd251784b66f09431b517da4ca8c99407ecd3e295fa5 8322932 clamav_0.98.7+dfsg.orig.tar.xz a950749d6d13a893abef1d7c2e1594b418a762ed60e516b190152dc2a1ac24e1 852764 clamav_0.98.7+dfsg-0+deb7u1.debian.tar.gz 872b97d291939e68e4d6278dc2aa3033a5be6ce4f73a5e9f4867dc85f3ade045 282498 clamav-base_0.98.7+dfsg-0+deb7u1_all.deb 1e28adc8b7b1f3580acd20d5894658d0cf15db4ed26866546334372f90d83425 903890 clamav-docs_0.98.7+dfsg-0+deb7u1_all.deb d69b0b68fef69855580a430b91180e23c8c32de1c4a8c427ef8cbf7a9b4d5d6d 5286736 clamav-testfiles_0.98.7+dfsg-0+deb7u1_all.deb Files: 2794f43800109b40d94322b2e5824fc4 2883 utils optional clamav_0.98.7+dfsg-0+deb7u1.dsc 7a012088d4389bd3ac2ac35442b98d37 8322932 utils optional clamav_0.98.7+dfsg.orig.tar.xz 4b56dfef2016aab476b25556db565718 852764 utils optional clamav_0.98.7+dfsg-0+deb7u1.debian.tar.gz e8bb543cd777ab0cb06ce61ad4c2ef46 282498 utils optional clamav-base_0.98.7+dfsg-0+deb7u1_all.deb 0ff20570cb447079860ab76fae4674be 903890 doc optional clamav-docs_0.98.7+dfsg-0+deb7u1_all.deb 948da1e5ed025856943a6b2e6fdad5f0 5286736 utils optional clamav-testfiles_0.98.7+dfsg-0+deb7u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVRnkhAAoJEHuW6BYqjPXRh/oP/0ehbzhDdM/nky8nwcVo6qMp s6L5zf9ievFmqHKnlaA7faer6YP1Ip+NVYGAuKszPW7oVgsKRSC+IL41mN5LERk1 eoV7rszWXCnrMIg08pRnPTDFAH7Tn5x30nRNo/HyNBqh0N+js/kdN875dsjqV2n0 /KO90dp/UivUsZQY+jU0dXeXWCkFWDTKUKLie+pA6NOT4JEdmKV83NeN6oUqVZhZ mDzLy27VZp1o8Yrb8UvCAdWV6nz297DiLCJqHwuPSId/XukB5a2Y23bbHtbrGKcL DYJ7ACN6tpW74A54u3EuyObN6RDr/z0bFt4udKHWxBzL1eLDaDalDQwfqPstg6Fs 8JlZhqBpEa8+hgZkEyhcoixYcAK8pgu9cY8YMDSOgTNE89vvaAHd7JGWW+nJpHJf hDMBx5bNyPzuTaJd2RdTgYhXtZB66ry/5TXyv+wLyeU9qpsBFrImkpQa3Ap20FLi yTuW8wtPNifd8a4wgNILZ/CjNB+0GnJQhRJtL4HQ2cB/ry/ghR4Jwwo3a/Pjal6B QbwozEaxYgfw1gZm+onxmkRyMiWyQf3oDoCp+SjW37crHV65DQTdR8E5u9ZTe7dz 1/4mRUZGhfUNJYD9Ouiti9kV5aZtEuvJPPLdWCY0OWg36hOuyZq6mMwEApv8lCZA xMkiSiqZGDwbi/Uod3cj =bI4e -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ Pkg-clamav-devel mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
