Bug#1018904: bullseye-pu: package clamav/0.103.7+dfsg-0+deb11u1

2022-09-02 Thread Sebastian Andrzej Siewior
On 2022-09-02 17:02:38 [+0100], Adam D. Barratt wrote:
> Please go ahead, bearing in mind that the window for getting updates
> into 11.5 (and thus bullseye-updates prior to 11.5 being released)
> closes over this weekend.

just uploaded.

> Given that 11.5 is scheduled for a week tomorrow, would you still like
> us to make a stable-updates release sooner?

Nah, that is okay then. Thank you.

> Regards,
> 
> Adam

Sebastian



Processed: Re: Bug#1018904: bullseye-pu: package clamav/0.103.7+dfsg-0+deb11u1

2022-09-02 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #1018904 [release.debian.org] bullseye-pu: package 
clamav/0.103.7+dfsg-0+deb11u1
Added tag(s) confirmed.

-- 
1018904: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018904
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1018904: bullseye-pu: package clamav/0.103.7+dfsg-0+deb11u1

2022-09-02 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Thu, 2022-09-01 at 21:50 +0200, Sebastian Andrzej Siewior wrote:
> This is an long overdue update to the clamav package. It is a stable
> update provided by upstream. From their changelog:
> 
> - Fix logical signature "Intermediates" feature.
> 
> - Relax constraints on slightly malformed zip archives that contain
> overlapping
>   file entries.
> 
> 0.103.7 is the current LTS release.
> The code diff is eual vs the buster package.
> 

I assume you meant bullseye. :)

> It would be nice if this could become part of -updates.
> 

Please go ahead, bearing in mind that the window for getting updates
into 11.5 (and thus bullseye-updates prior to 11.5 being released)
closes over this weekend.

Given that 11.5 is scheduled for a week tomorrow, would you still like
us to make a stable-updates release sooner?

Regards,

Adam



Bug#1018904: bullseye-pu: package clamav/0.103.7+dfsg-0+deb11u1

2022-09-01 Thread Sebastian Andrzej Siewior
Package: release.debian.org
User: release.debian@packages.debian.org
Usertags: pu
Tags: bullseye
Severity: normal

This is an long overdue update to the clamav package. It is a stable
update provided by upstream. From their changelog:

- Fix logical signature "Intermediates" feature.

- Relax constraints on slightly malformed zip archives that contain overlapping
  file entries.

0.103.7 is the current LTS release.
The code diff is eual vs the buster package.

It would be nice if this could become part of -updates.

Sebastian
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 8d42d3c..b910470 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -15,7 +15,7 @@ string(TIMESTAMP TODAY "%Y%m%d")
 set(VERSION_SUFFIX "")
 
 project( ClamAV
- VERSION "0.103.6"
+ VERSION "0.103.7"
  DESCRIPTION "ClamAV open source email, web, and end-point anti-virus toolkit." )
 
 set(CMAKE_MODULE_PATH "${CMAKE_CURRENT_SOURCE_DIR}/cmake" ${CMAKE_MODULE_PATH})
diff --git a/NEWS.md b/NEWS.md
index 66570e7..4595141 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -3,6 +3,17 @@
 Note: This file refers to the source tarball. Things described here may differ
  slightly from the binary packages.
 
+## 0.103.7
+
+ClamAV 0.103.7 is a critical patch release with the following fixes:
+
+- Upgrade the vendored UnRAR library to version 6.1.7.
+
+- Fix logical signature "Intermediates" feature.
+
+- Relax constraints on slightly malformed zip archives that contain overlapping
+  file entries.
+
 ## 0.103.6
 
 ClamAV 0.103.6 is a critical patch release with the following fixes:
diff --git a/configure b/configure
index 59bf5dd..9f9a4f5 100755
--- a/configure
+++ b/configure
@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for ClamAV 0.103.6.
+# Generated by GNU Autoconf 2.69 for ClamAV 0.103.7.
 #
 # Report bugs to .
 #
@@ -592,8 +592,8 @@ MAKEFLAGS=
 # Identity of this package.
 PACKAGE_NAME='ClamAV'
 PACKAGE_TARNAME='clamav'
-PACKAGE_VERSION='0.103.6'
-PACKAGE_STRING='ClamAV 0.103.6'
+PACKAGE_VERSION='0.103.7'
+PACKAGE_STRING='ClamAV 0.103.7'
 PACKAGE_BUGREPORT='https://github.com/Cisco-Talos/clamav/issues'
 PACKAGE_URL='https://www.clamav.net/'
 
@@ -1606,7 +1606,7 @@ if test "$ac_init_help" = "long"; then
   # Omit some internal or obsolete options to make the list less imposing.
   # This message is too long to be a string in the A/UX 3.1 sh.
   cat <<_ACEOF
-\`configure' configures ClamAV 0.103.6 to adapt to many kinds of systems.
+\`configure' configures ClamAV 0.103.7 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1687,7 +1687,7 @@ fi
 
 if test -n "$ac_init_help"; then
   case $ac_init_help in
- short | recursive ) echo "Configuration of ClamAV 0.103.6:";;
+ short | recursive ) echo "Configuration of ClamAV 0.103.7:";;
esac
   cat <<\_ACEOF
   --enable-dependency-tracking
@@ -1922,7 +1922,7 @@ fi
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
   cat <<\_ACEOF
-ClamAV configure 0.103.6
+ClamAV configure 0.103.7
 generated by GNU Autoconf 2.69
 
 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -2550,7 +2550,7 @@ cat >config.log <<_ACEOF
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by ClamAV $as_me 0.103.6, which was
+It was created by ClamAV $as_me 0.103.7, which was
 generated by GNU Autoconf 2.69.  Invocation command line was
 
   $ $0 $@
@@ -4308,7 +4308,7 @@ fi
 
 # Define the identity of the package.
  PACKAGE='clamav'
- VERSION='0.103.6'
+ VERSION='0.103.7'
 
 
 # Some tools Automake needs.
@@ -6036,7 +6036,7 @@ esac
 $as_echo "#define PACKAGE PACKAGE_NAME" >>confdefs.h
 
 
-VERSION="0.103.6"
+VERSION="0.103.7"
 
 major=`echo $PACKAGE_VERSION |cut -d. -f1 | sed -e "s/^0-9//g"`
 minor=`echo $PACKAGE_VERSION |cut -d. -f2 | sed -e "s/^0-9//g"`
@@ -31896,7 +31896,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by ClamAV $as_me 0.103.6, which was
+This file was extended by ClamAV $as_me 0.103.7, which was
 generated by GNU Autoconf 2.69.  Invocation command line was
 
   CONFIG_FILES= $CONFIG_FILES
@@ -31963,7 +31963,7 @@ _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/&/g'`"
 ac_cs_version="\\
-ClamAV config.status 0.103.6
+ClamAV config.status 0.103.7
 configured by $0, generated by GNU Autoconf 2.69,
   with options \\"\$ac_cs_config\\"
 
@@ -34813,7 +34813,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by ClamAV $as_me 0.103.6, which was
+This file