FFe Request for Clamav 0.94.1 RC

[Scott Kitterman]

Binary package hint: clamav

Unfortunately clamav won't release 94.1 until 3 Nov so we miss the release. My proposal is to upload the RC and then put the final in updates/security rather than release with clamav out of date. Generally clamav is pretty good about compatiblity and avoiding regressions on .x releases. There is only one new feature in this release. Otherwise it's bug fixes. From clamav.org:

0.94.1RC1 has been released. There is one new feature in this release. This feature allows ClamAV users optionally to submit statistics to us about what they detect in the field. We will then use this data to determine what types of Malware/Viruses are the most detected in the field and in what geographic area they are.
 It closes the following bugs from http://bugs.clamav.net:
 684, 777, 828, 832, 954, 1046, 1085, 1092, 1098, 1135, 1137, 1145, 1150 , 1154, 1155, 1157, 1158, 1160, 1162, 1165, 1174, 1179, 1181, 1184, 1185, 1186, 1187, 1189, 1192, 1196, 1197, 1199, 1201, 1203, 1204, 1205, 1210 , 1211, 1212, 1213, 1216, 1217, 1219, 1221

I'm preparing test packages now.

[Scott Kitterman (kitterman)]

Painfully long debdiff attached.

[Scott Kitterman (kitterman)]

check-symbols output:

Checking: /usr/lib/libclamav.so
--- /tmp/libclamav.so.old 2008-10-19 23:34:16.000000000 -0400
+++ /tmp/libclamav.so.new 2008-10-19 23:35:01.000000000 -0400
@@ -88,6 +88,7 @@
 disasmbuf
 html_normalise_fd
 html_normalise_mem
+html_screnc_decode
 html_tag_arg_free
 init_domainlist
 init_regex_list

[Scott Kitterman (kitterman)]

I don't think we need to rebuild the rdepends since there are no changed/removed symbols. I verified that they all do build against the new clamav version, so it could be done if wanted. I also verified that Klamav works without rebuild with the new version. It's the riskiest since it is known to use internal interfaces in some cases.

Verified that all clamav packages install, that freshclam works, and that libclamav5 is compatible (based on Klamav tests). clamd installs and runs (clamd interface is stable (except for option changes, which this release doesn't lose any) back past Dapper, so shouldn't be a risk).

[Scott Kitterman (kitterman)]

I've also got it running now (successfully) with postfix via clamsmtp on my test mail server.

[Steve Langasek (vorlon)]

FFe approved; thanks for the thorough analysis/testing, Scott!