93754c1
#global prerelease  rc1
6151a28
53414b2
%global _hardened_build 1
53414b2
f9c00c3
## Fedora specific customization below...
d526a97
%bcond_without  clamonacc
9ef76ba
%bcond_without  tmpfiles
93754c1
%bcond_with     unrar
58b63a7
%ifnarch ppc64
58b63a7
%bcond_without  llvm
58b63a7
%else
58b63a7
%bcond_with     llvm
58b63a7
%endif
58b63a7
1f88102
%if 0%{?fedora} || 0%{?rhel} >= 8
53414b2
%bcond_with old_freshclam
53414b2
%else
53414b2
%bcond_without old_freshclam
53414b2
%endif
Enrico Scholz 6a1f662
Enrico Scholz c12c295
%ifnarch s390 s390x
93754c1
%global have_ocaml  1
Enrico Scholz c12c295
%else
93754c1
%global have_ocaml  0
Enrico Scholz c12c295
%endif
Enrico Scholz c12c295
e613e50
%{!?_rundir:%global _rundir /var/run}
86e162c
%{!?_unitdir:%global _unitdir /lib/systemd/system}
e613e50
93754c1
%global updateuser  clamupdate
93754c1
%global homedir     %_var/lib/clamav
2d3f9e8
%global freshclamlog    %_var/log/freshclam.log
93754c1
%global milteruser  clamilt
93754c1
%global milterlog   %_var/log/clamav-milter.log
e613e50
%global milterstatedir  %_rundir/clamav-milter
2d3f9e8
%global pkgdatadir  %_datadir/%name
7d22377
%global quarantinedir %_var/spool/quarantine
93754c1
%global scanuser    clamscan
e613e50
%global scanstatedir    %_rundir/clamd.scan
bd5909f
bd5909f
93754c1
Summary:    End-user tools for the Clam Antivirus scanner
93754c1
Name:       clamav
ba61c84
Version:    0.103.0
ba61c84
Release:    1%{?dist}
93754c1
License:    %{?with_unrar:proprietary}%{!?with_unrar:GPLv2}
7b491c4
URL:        https://www.clamav.net/
c6bcaca
%if %{with unrar}
7b491c4
Source0:    https://www.clamav.net/downloads/production/%name-%version%{?prerelease}.tar.gz
7b491c4
Source999:  https://www.clamav.net/downloads/production/%name-%version%{?prerelease}.tar.gz.sig
9ee1c30
%else
11ed44b
# Unfortunately, clamav includes support for RAR v3, derived from GPL
9ee1c30
# incompatible unrar from RARlabs. We have to pull this code out.
240e0e1
# tarball was created by
07c7f28
#  make clean-sources NAME=clamav VERSION=<version> TARBALL=clamav-<version>.tar.gz TARBALL_CLEAN=clamav-<version>-norar.tar.xz
93754c1
Source0:    %name-%version%{?prerelease}-norar.tar.xz
9ee1c30
%endif
b0dfdaf
#for server
b0dfdaf
Source3:    clamd.logrotate
b0dfdaf
Source5:    clamd-README
7b491c4
# To download the *.cvd, go to https://www.clamav.net and use the links
57cb746
# there (I renamed the files to add the -version suffix for verifying).
68d24dd
# Check the first line of the file for version or run file *cvd
68d24dd
# Attention file < 5.33-7 have bugs see https://bugzilla.redhat.com/show_bug.cgi?id=1539107
eac463f
#http://database.clamav.net/main.cvd
e3658c0
Source10:   main-59.cvd
eac463f
#http://database.clamav.net/daily.cvd
329e21f
Source11:   daily-25931.cvd
eac463f
#http://database.clamav.net/bytecode.cvd
911f051
Source12:   bytecode-331.cvd
2d3f9e8
#for update
2d3f9e8
Source200:  freshclam-sleep
2d3f9e8
Source201:  freshclam.sysconfig
2d3f9e8
Source202:  clamav-update.crond
2d3f9e8
Source203:  clamav-update.logrotate
b0dfdaf
#for milter
b0dfdaf
Source300:  README.fedora
b0dfdaf
#for clamav-milter.systemd
b0dfdaf
Source330:  clamav-milter.systemd
9833a06
#for scanner-systemd/server-systemd
b0dfdaf
Source530:  clamd@.service
Enrico Scholz 590f977
d526a97
# Restore some options removed in 0.100 as deprecated
d526a97
# Could be dropped in F32 with a note
d526a97
# https://bugzilla.redhat.com/show_bug.cgi?id=1565381#c1
d526a97
Patch0:     clamav-stats-deprecation.patch
d526a97
# Change default config locations for Fedora
d526a97
Patch1:     clamav-default_confs.patch
d526a97
# Fix pkg-config flags for static linking, multilib
d526a97
Patch2:     clamav-0.99-private.patch
f9c00c3
# Patch to use EL7 libcurl
f9c00c3
Patch3:     clamav-curl.patch
ba61c84
# Fix ck_assert_msg() call
ba61c84
# https://github.com/Cisco-Talos/clamav-devel/pull/138
ba61c84
Patch4:     clamav-check.patch
a201bc2
# Modify clamav-clamonacc.service for Fedora compatibility
a201bc2
Patch5:     clamav-clamonacc-service.patch
1d4f821
93754c1
BuildRequires:  autoconf automake gettext-devel libtool libtool-ltdl-devel
ef83863
BuildRequires:  gcc-c++
d526a97
BuildRequires:  bzip2-devel
d526a97
BuildRequires:  curl-devel
d526a97
BuildRequires:  gmp-devel
d526a97
BuildRequires:  json-c-devel
6217f0e
BuildRequires:  libprelude-devel
a201bc2
# libprelude-config --libs brings in gnutls, pcre
758d94b
# https://bugzilla.redhat.com/show_bug.cgi?id=1830473
a201bc2
BuildRequires:  gnutls-devel pcre-devel
d526a97
BuildRequires:  libxml2-devel
d526a97
BuildRequires:  ncurses-devel
d526a97
BuildRequires:  openssl-devel
9f23645
BuildRequires:  pcre2-devel
d526a97
BuildRequires:  zlib-devel
734f2ac
#BuildRequires:  %%_includedir/tcpd.h
a479f9c
BuildRequires:  bc
a479f9c
BuildRequires:  tcl
a479f9c
BuildRequires:  groff
a479f9c
BuildRequires:  graphviz
58b63a7
%{?have_ocaml:BuildRequires: ocaml}
734f2ac
# nc required for tests
a479f9c
BuildRequires:  nc
1d79f9a
%{?systemd_requires}
a479f9c
BuildRequires:  systemd-devel
b0dfdaf
#for milter
b0dfdaf
BuildRequires:  sendmail-devel
cvsextras 47272f4
4acee7c
Requires:   clamav-filesystem = %version-%release
93754c1
Requires:   clamav-lib = %version-%release
93754c1
Requires:   data(clamav)
298f77b
9ef76ba
%description
9ef76ba
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this
9ef76ba
software is the integration with mail servers (attachment scanning). The
9ef76ba
package provides a flexible and scalable multi-threaded daemon, a command
9ef76ba
line scanner, and a tool for automatic updating via Internet. The programs
9ef76ba
are based on a shared library distributed with the Clam AntiVirus package,
9ef76ba
which you can use with your own software. The virus database is based on
9ef76ba
the virus database from OpenAntiVirus, but contains additional signatures
9ef76ba
(including signatures for popular polymorphic viruses, too) and is KEPT UP
9ef76ba
TO DATE.
9ef76ba
36c1bd4
%package filesystem
93754c1
Summary:    Filesystem structure for clamav
36c1bd4
# Prevent version mix
93754c1
Conflicts:  %name < %version-%release
93754c1
Conflicts:  %name > %version-%release
93754c1
Requires(pre):  shadow-utils
a373eee
BuildArch:  noarch
36c1bd4
9ef76ba
%description filesystem
9ef76ba
This package provides the filesystem structure and contains the
9ef76ba
user-creation scripts required by clamav.
9ef76ba
9ef76ba
cvsextras 47272f4
%package lib
93754c1
Summary:    Dynamic libraries for the Clam Antivirus scanner
93754c1
Requires:   data(clamav)
7b491c4
Provides:   bundled(libmspack) = 0.5-0.1.alpha.modified_by_clamav
cvsextras 47272f4
9ef76ba
%description lib
9ef76ba
This package contains dynamic libraries shared between applications
9ef76ba
using the Clam Antivirus scanner.
9ef76ba
9ef76ba
cvsextras 47272f4
%package devel
93754c1
Summary:    Header files and libraries for the Clam Antivirus scanner
93754c1
Requires:   clamav-lib        = %version-%release
93754c1
Requires:   clamav-filesystem = %version-%release
93754c1
Requires:   openssl-devel
cvsextras 47272f4
9ef76ba
%description devel
9ef76ba
This package contains headerfiles and libraries which are needed to
9ef76ba
build applications using clamav.
9ef76ba
9ef76ba
cvsextras 47272f4
%package data
93754c1
Summary:    Virus signature data for the Clam Antivirus scanner
93754c1
Requires:   clamav-filesystem = %version-%release
15e5a2c
Provides:   data(clamav) = full
15e5a2c
Provides:   clamav-db = %{version}-%{release}
15e5a2c
Obsoletes:  clamav-db < %{version}-%{release}
a373eee
BuildArch:  noarch
36c1bd4
9ef76ba
%description data
9ef76ba
This package contains the virus-database needed by clamav. This
9ef76ba
database should be updated regularly; the 'clamav-update' package
2d3f9e8
ships a corresponding cron-job. Use this package when you want a
15e5a2c
working (but perhaps outdated) virus scanner immediately after package
15e5a2c
installation.
9ef76ba
9ef76ba
cvsextras 47272f4
%package update
93754c1
Summary:    Auto-updater for the Clam Antivirus scanner data-files
93754c1
Requires:   clamav-filesystem = %version-%release
53414b2
%if %{with old_freshclam}
2d3f9e8
Requires:   crontabs
2d3f9e8
Requires:   /etc/cron.d
53414b2
%endif
15e5a2c
Provides:   data(clamav) = empty
15e5a2c
Provides:   clamav-data-empty = %{version}-%{release}
15e5a2c
Obsoletes:  clamav-data-empty < %{version}-%{release}
cvsextras 47272f4
9ef76ba
%description update
9ef76ba
This package contains programs which can be used to update the clamav
9ef76ba
anti-virus database automatically. It uses the freshclam(1) utility for
2d3f9e8
this task. To activate it use, uncomment the entry in /etc/cron.d/clamav-update.
15e5a2c
Use this package when you go updating the virus database regulary and
c162cac
do not want to download a >160MB sized rpm-package with outdated virus
15e5a2c
definitions.
9ef76ba
9ef76ba
1977bdf
%package -n clamd
1977bdf
Summary: The Clam AntiVirus Daemon
93754c1
Requires:   data(clamav)
93754c1
Requires:   clamav-filesystem = %version-%release
93754c1
Requires:   clamav-lib        = %version-%release
c7796f6
Requires:   coreutils
ccea2e3
Requires(pre):  shadow-utils
1f88102
# This is still used by clamsmtp and exim-clamav
1f88102
Provides: clamav-server = %{version}-%{release}
d443ff4
Provides: clamav-scanner-systemd = %{version}-%{release}
d443ff4
Provides: clamav-server-systemd = %{version}-%{release}
1d6f132
Obsoletes: clamav-scanner-systemd < %{version}-%{release}
1d6f132
Obsoletes: clamav-server-systemd < %{version}-%{release}
Enrico Scholz 69c6c9f
1977bdf
%description -n clamd
1977bdf
The Clam AntiVirus Daemon
1977bdf
See the README file how this can be done with a minimum of effort.
5491d97
This package contains a generic system wide clamd service which is
5491d97
e.g. used by the clamav-milter package.
9ef76ba
ef587a6
e939bcc
%package milter
93754c1
Summary:    Milter module for the Clam Antivirus scanner
8c01499
# clamav-milter could work without clamd and without sendmail
ea823d8
#Requires: clamd = %%{version}-%%{release}
8c01499
#Requires: /usr/sbin/sendmail
ccea2e3
Requires:   clamav-filesystem = %version-%release
93754c1
Requires(post): coreutils
93754c1
Requires(pre):  shadow-utils
7a201cd
Requires(post): %__chown %__chmod
7a201cd
Provides: clamav-milter-systemd = %{version}-%{release}
1d6f132
Obsoletes: clamav-milter-systemd < %{version}-%{release}
5491d97
5491d97
%description milter
5491d97
This package contains files which are needed to run the clamav-milter.
Enrico Scholz 69c6c9f
cvsextras 47272f4
cvsextras 47272f4
%prep
Enrico Scholz c12c295
%setup -q -n %{name}-%{version}%{?prerelease}
a4a6d25
d526a97
# No longer support deprecated options in F32+ and EL8+
d526a97
%if (0%{?fedora} && 0%{?fedora} < 32) || (0%{?rhel} && 0%{?rhel} < 8)
d526a97
%patch0 -p1 -b .stats-deprecation
d526a97
%endif
629b8f1
%patch1 -p1 -b .default_confs
d526a97
%patch2 -p1 -b .private
f9c00c3
# Patch to use older libcurl
f9c00c3
%{?el7:%patch3 -p1 -b .curl}
ba61c84
%patch4 -p1 -b .check
a201bc2
%patch5 -p1 -b .clamonacc-service
93ac5ce
93ac5ce
install -p -m0644 %SOURCE300 clamav-milter/
93ac5ce
9ee1c30
mkdir -p libclamunrar{,_iface}
240e0e1
%{!?with_unrar:touch libclamunrar/{Makefile.in,all,install}}
cvsextras 47272f4
9a13698
cvsextras 47272f4
%build
9833a06
# add -Wl,--as-needed if not exist
9833a06
echo %{?__global_ldflags} | sed '/-Wl,--as-needed/!s/$/ -Wl,--as-needed/'
9833a06
export LDFLAGS=$(echo %{?__global_ldflags} | sed '/-Wl,--as-needed/!s/$/ -Wl,--as-needed/')
0e899af
# IPv6 check is buggy and does not work when there are no IPv6 interface on build machine
0e899af
export have_cv_ipv6=yes
298f77b
af0cb6b
rm -rf libltdl autom4te.cache Makefile.in
af0cb6b
autoreconf -i
9c067db
%configure \
1977bdf
    --enable-milter \
93754c1
    --disable-clamav \
1977bdf
    --disable-static \
1977bdf
    --disable-zlib-vcheck \
1977bdf
    %{!?with_unrar:--disable-unrar} \
083b73d
    --enable-id-check \
083b73d
    --enable-dns \
1977bdf
    --with-dbdir=%homedir \
93754c1
    --with-group=%updateuser \
1977bdf
    --with-user=%updateuser \
1977bdf
    --disable-rpath \
1977bdf
    --disable-silent-rules \
93754c1
    --enable-clamdtop \
6217f0e
    --enable-prelude \
d526a97
    %{!?with_clamonacc:--disable-clamonacc} \
58b63a7
    %{!?with_llvm:--disable-llvm}
93ac5ce
42e36a2
# TODO: check periodically that CLAMAVUSER is used for freshclam only
42e36a2
7a201cd
# disable rpath
93ac5ce
sed -i \
93754c1
    -e '/sys_lib_dlsearch_path_spec=\"\/lib \/usr\/lib /s!\"\/lib \/usr\/lib !/\"/%_lib /usr/%_lib !g'  \
93754c1
    libtool
6a05c58
c6bcaca
%make_build
cvsextras 47272f4
cvsextras 47272f4
cvsextras 47272f4
%install
26ce29c
rm -rf _doc*
c6bcaca
%make_install
cvsextras 47272f4
Enrico Scholz 69c6c9f
install -d -m 0755 \
2d3f9e8
    $RPM_BUILD_ROOT%_sysconfdir/{mail,clamd.d,logrotate.d} \
93754c1
    $RPM_BUILD_ROOT%_tmpfilesdir \
e613e50
    $RPM_BUILD_ROOT%_rundir \
e613e50
    $RPM_BUILD_ROOT%_var/log \
93754c1
    $RPM_BUILD_ROOT%milterstatedir \
93754c1
    $RPM_BUILD_ROOT%homedir \
7d22377
    $RPM_BUILD_ROOT%quarantinedir \
93754c1
    $RPM_BUILD_ROOT%scanstatedir
cvsextras 47272f4
7a201cd
rm -f $RPM_BUILD_ROOT%_libdir/*.la
6151a28
58b63a7
touch $RPM_BUILD_ROOT%homedir/{daily,main,bytecode}.cld
Orion Poplawski fd47d25
touch $RPM_BUILD_ROOT%homedir/mirrors.dat
93ac5ce
93754c1
install -D -m 0644 -p %SOURCE10     $RPM_BUILD_ROOT%homedir/main.cvd
93754c1
install -D -m 0644 -p %SOURCE11     $RPM_BUILD_ROOT%homedir/daily.cvd
58b63a7
install -D -m 0644 -p %SOURCE12     $RPM_BUILD_ROOT%homedir/bytecode.cvd
cvsextras 47272f4
7a201cd
## prepare the clamd-files
93754c1
install -D -m 0644 -p %SOURCE3      _doc_server/clamd.logrotate
93754c1
install -D -m 0644 -p %SOURCE5      _doc_server/README
50a490f
## Fixup URL for EPEL
50a490f
%{?epel:sed -i -e s/product=Fedora/product=Fedora%20EPEL/ _doc_server/README}
Enrico Scholz 69c6c9f
a201bc2
## For compatibility with 0.102.2-7
a201bc2
ln -s clamav-clamonacc.service      $RPM_BUILD_ROOT%_unitdir/clamonacc.service
4acee7c
a201bc2
install -D -p -m 0644 %SOURCE530    $RPM_BUILD_ROOT%_unitdir/clamd@.service
6151a28
2d3f9e8
## prepare the update-files
2d3f9e8
install -D -m 0644 -p %SOURCE203    $RPM_BUILD_ROOT%_sysconfdir/logrotate.d/clamav-update
2d3f9e8
touch $RPM_BUILD_ROOT%freshclamlog
2d3f9e8
81b58f6
%if %{with old_freshclam}
2d3f9e8
install -D -p -m 0755 %SOURCE200    $RPM_BUILD_ROOT%pkgdatadir/freshclam-sleep
2d3f9e8
install -D -p -m 0644 %SOURCE201    $RPM_BUILD_ROOT%_sysconfdir/sysconfig/freshclam
2d3f9e8
install -D -p -m 0600 %SOURCE202    $RPM_BUILD_ROOT%_sysconfdir/cron.d/clamav-update
53414b2
%endif
2d3f9e8
7a201cd
### The freshclam stuff
7a201cd
sed -ri \
7a201cd
    -e 's!^Example!#Example!' \
7a201cd
    -e 's!^#?(UpdateLogFile )!#\1!g;' \
7a201cd
    -e 's!(DatabaseOwner *)clamav$!\1%updateuser!g' $RPM_BUILD_ROOT%_sysconfdir/freshclam.conf.sample
cvsextras 47272f4
7a201cd
mv $RPM_BUILD_ROOT%_sysconfdir/freshclam.conf{.sample,}
31dd11c
# Can contain HTTPProxyPassword (bugz#1733112)
31dd11c
chmod 600 $RPM_BUILD_ROOT%_sysconfdir/freshclam.conf
6151a28
53414b2
%if %{with old_freshclam}
53414b2
function smartsubst() {
53414b2
    local tmp
53414b2
    local regexp=$1
53414b2
    shift
53414b2
53414b2
    tmp=$(mktemp /tmp/%name-subst.XXXXXX)
53414b2
    for i; do
53414b2
        sed -e "$regexp" "$i" >$tmp
53414b2
        cmp -s $tmp "$i" || cat $tmp >"$i"
53414b2
        rm -f $tmp
53414b2
    done
53414b2
}
53414b2
smartsubst 's!webmaster,clamav!webmaster,%updateuser!g;
53414b2
        s!/usr/share/clamav!%pkgdatadir!g;
53414b2
        s!/usr/bin!%_bindir!g;
53414b2
            s!/usr/sbin!%_sbindir!g;' \
53414b2
   $RPM_BUILD_ROOT%_sysconfdir/cron.d/clamav-update \
53414b2
   $RPM_BUILD_ROOT%pkgdatadir/freshclam-sleep
53414b2
%endif
53414b2
e939bcc
### The scanner stuff
7a201cd
sed -ri \
df27a18
    -e 's!^Example!#Example!' \
7a201cd
    -e 's!^#?(LogFile ).*!#\1/var/log/clamd.<SERVICE>!g' \
7a201cd
    -e 's!^#?(LocalSocket ).*!#\1%{_rundir}/clamd.<SERVICE>/clamd.sock!g' \
7a201cd
    -e 's!^(#?PidFile ).*!\1%{_rundir}/clamd.<SERVICE>/clamd.pid!g' \
7a201cd
    -e 's!^#?(User ).*!\1<USER>!g' \
7a201cd
    -e 's!^#?(AllowSupplementaryGroups|LogSyslog).*!\1 yes!g' \
7a201cd
    -e 's! /usr/local/share/clamav,! %homedir,!g' \
7a201cd
    $RPM_BUILD_ROOT%_sysconfdir/clamd.conf.sample
7a201cd
e939bcc
sed -e 's!<SERVICE>!scan!g;s!<USER>!%scanuser!g' \
7a201cd
    $RPM_BUILD_ROOT%_sysconfdir/clamd.conf.sample > $RPM_BUILD_ROOT%_sysconfdir/clamd.d/scan.conf
7a201cd
7a201cd
mv $RPM_BUILD_ROOT%_sysconfdir/clamd.conf.sample _doc_server/clamd.conf
e939bcc
daca419
cat << EOF > $RPM_BUILD_ROOT%_tmpfilesdir/clamd.scan.conf
f171361
d %scanstatedir 0710 %scanuser virusgroup
Enrico Scholz 69c6c9f
EOF
Enrico Scholz 69c6c9f
e939bcc
### The milter stuff
7a201cd
sed -ri \
e939bcc
    -e 's!^#?(User).*!\1 %milteruser!g' \
e939bcc
    -e 's!^#?(AllowSupplementaryGroups|LogSyslog) .*!\1 yes!g' \
e939bcc
    -e 's! /tmp/clamav-milter.socket! %milterstatedir/clamav-milter.socket!g' \
e939bcc
    -e 's! /var/run/clamav-milter.pid! %milterstatedir/clamav-milter.pid!g' \
Orion Poplawski 055ee19
    -e 's! /var/run/clamd/clamd.socket! %scanstatedir/clamd.sock!g' \
e939bcc
    -e 's! /tmp/clamav-milter.log! %milterlog!g' \
7a201cd
    $RPM_BUILD_ROOT%_sysconfdir/clamav-milter.conf.sample
7a201cd
7a201cd
mv $RPM_BUILD_ROOT%_sysconfdir/clamav-milter.conf.sample $RPM_BUILD_ROOT%_sysconfdir/mail/clamav-milter.conf
cvsextras 47272f4
Enrico Scholz 69c6c9f
install -D -p -m 0644 %SOURCE330 $RPM_BUILD_ROOT%_unitdir/clamav-milter.service
cvsextras 47272f4
daca419
cat << EOF > $RPM_BUILD_ROOT%_tmpfilesdir/clamav-milter.conf
Enrico Scholz 9fe7b84
d %milterstatedir 0710 %milteruser %milteruser
Enrico Scholz 69c6c9f
EOF
cvsextras 47272f4
daca419
%{!?with_tmpfiles: rm -rf $RPM_BUILD_ROOT%_tmpfilesdir}
6151a28
c162cac
# TODO: Evaluate using upstream's unit with clamav-daemon.socket
c162cac
rm $RPM_BUILD_ROOT%_unitdir/clamav-daemon.*
cvsextras 47272f4
cvsextras 47272f4
Enrico Scholz 35bfd9d
%check
Enrico Scholz 69c6c9f
make check
Enrico Scholz 35bfd9d
Enrico Scholz 35bfd9d
4acee7c
%post
a201bc2
%systemd_post clamav-clamonacc.service
4acee7c
4acee7c
%preun
a201bc2
%systemd_preun clamav-clamonacc.service
4acee7c
4acee7c
%postun
a201bc2
%systemd_postun_with_restart clamav-clamonacc.service
4acee7c
4acee7c
36c1bd4
%pre filesystem
Orion Poplawski 055ee19
getent group %{updateuser} >/dev/null || groupadd -r %{updateuser}
Orion Poplawski 055ee19
getent passwd %{updateuser} >/dev/null || \
Orion Poplawski 055ee19
    useradd -r -g %{updateuser} -d %{homedir} -s /sbin/nologin \
Orion Poplawski 055ee19
    -c "Clamav database update user" %{updateuser}
Orion Poplawski 055ee19
getent group virusgroup >/dev/null || groupadd -r virusgroup
Orion Poplawski 055ee19
usermod %{updateuser} -a -G virusgroup
d2c5bf5
exit 0
36c1bd4
36c1bd4
1977bdf
%pre -n clamd
Nick Bebout f3d1b8a
getent group %{scanuser} >/dev/null || groupadd -r %{scanuser}
d2c5bf5
getent passwd %{scanuser} >/dev/null || \
Nick Bebout f3d1b8a
    useradd -r -g %{scanuser} -d / -s /sbin/nologin \
d2c5bf5
    -c "Clamav scanner user" %{scanuser}
Orion Poplawski 055ee19
usermod %{scanuser} -a -G virusgroup
d2c5bf5
exit 0
d2c5bf5
1977bdf
%post -n clamd
234a5b8
# Point to the new service unit
234a5b8
[ -L /etc/systemd/system/multi-user.target.wants/clamd@scan.service ] &&
234a5b8
    ln -sf /usr/lib/systemd/system/clamd@.service /etc/systemd/system/multi-user.target.wants/clamd@scan.service || :
8f1ad71
%systemd_post clamd@scan.service
5491d97
%{?with_tmpfiles:/bin/systemd-tmpfiles --create %_tmpfilesdir/clamd.scan.conf || :}
5491d97
1977bdf
%preun -n clamd
8f1ad71
%systemd_preun clamd@scan.service
5491d97
1977bdf
%postun -n clamd
8f1ad71
%systemd_postun_with_restart clamd@scan.service
Enrico Scholz df4373d
e939bcc
42e36a2
%triggerin milter -- clamav-scanner
42e36a2
# Add the milteruser to the scanuser group; this is required when
42e36a2
# milter and clamd communicate through local sockets
Enrico Scholz 1b9c20a
/usr/sbin/groupmems -g %scanuser -a %milteruser &>/dev/null || :
42e36a2
e939bcc
%pre milter
Nick Bebout f3d1b8a
getent group %{milteruser} >/dev/null || groupadd -r %{milteruser}
d2c5bf5
getent passwd %{milteruser} >/dev/null || \
Nick Bebout f3d1b8a
    useradd -r -g %{milteruser} -d %{milterstatedir} -s /sbin/nologin \
d2c5bf5
    -c "Clamav Milter user" %{milteruser}
Orion Poplawski 055ee19
usermod %{milteruser} -a -G virusgroup
d2c5bf5
exit 0
d2c5bf5
e939bcc
%post milter
9a13698
test -e %milterlog || {
93754c1
    touch %milterlog
93754c1
    chmod 0620             %milterlog
93754c1
    chown root:%milteruser %milterlog
93754c1
    ! test -x /sbin/restorecon || /sbin/restorecon %milterlog
9a13698
}
1d6f132
%systemd_post clamav-milter.service
5491d97
%{?with_tmpfiles:/bin/systemd-tmpfiles --create %_tmpfilesdir/clamav-milter.conf || :}
5491d97
5491d97
%preun milter
5491d97
%systemd_preun clamav-milter.service
cvsextras 47272f4
5491d97
%postun milter
5491d97
%systemd_postun_with_restart clamav-milter.service
cbeb9f1
8f1ad71
%post update
53414b2
%if %{with old_freshclam}
2d3f9e8
test -e %freshclamlog || {
2d3f9e8
    touch %freshclamlog
2d3f9e8
    %__chmod 0664 %freshclamlog
2d3f9e8
    %__chown root:%updateuser %freshclamlog
2d3f9e8
    ! test -x /sbin/restorecon || /sbin/restorecon %freshclamlog
2d3f9e8
}
53414b2
%else
53414b2
if [ $1 -eq 2 ] ; then
53414b2
   echo "Warning: clamav-update package changed"
53414b2
   echo "Now we provide clamav-freshclam.service systemd unit instead old scripts and the cron.d entry."
53414b2
   echo "Unfortunately this may break existing unattended installations."
53414b2
   echo "Please run 'systemctl enable clamav-freshclam --now' to enable freshclam updates again."
53414b2
fi
53414b2
%endif
53414b2
%systemd_post clamav-freshclam.service
8f1ad71
8f1ad71
%preun update
8f1ad71
%systemd_preun clamav-freshclam.service
8f1ad71
8f1ad71
%postun update
a2e29ed
%systemd_postun_with_restart clamav-freshclam.service
8f1ad71
df7c817
%ldconfig_scriptlets   lib
cvsextras 47272f4
cvsextras 47272f4
cvsextras 47272f4
%files
26ce29c
%license COPYING
26ce29c
%doc NEWS.md README.md docs/html
26ce29c
%_bindir/clambc
26ce29c
%_bindir/clamconf
e14c7e3
%_bindir/clamdscan
e14c7e3
%_bindir/clamdtop
26ce29c
%_bindir/clamscan
26ce29c
%_bindir/clamsubmit
26ce29c
%_bindir/sigtool
2deba75
%if %{with clamonacc}
2deba75
%_sbindir/clamonacc
2deba75
%endif
e99b953
%_mandir/man[15]/*
a201bc2
%_mandir/man8/clamonacc.8*
ecfc3db
%exclude %_mandir/*/freshclam*
0b56d04
%exclude %_mandir/man5/clamd.conf.5*
4acee7c
%_unitdir/clamonacc.service
a201bc2
%_unitdir/clamav-clamonacc.service
7d22377
%attr(0750,root,root) %dir %quarantinedir
cvsextras 47272f4
cvsextras 47272f4
cvsextras 47272f4
%files lib
767676d
%_libdir/libclamav.so.9*
767676d
%_libdir/libclammspack.so.0*
36e0fae
%if %{with unrar}
36e0fae
%_libdir/libclamunrar*.so.9*
36e0fae
%endif
cvsextras 47272f4
cvsextras 47272f4
cvsextras 47272f4
%files devel
f294c9e
%_includedir/*
f294c9e
%_libdir/*.so
6151a28
%_libdir/pkgconfig/*
6151a28
%_bindir/clamav-config
cvsextras 47272f4
cvsextras 47272f4
36c1bd4
%files filesystem
Orion Poplawski 055ee19
%attr(-,%updateuser,%updateuser) %dir %homedir
Orion Poplawski d68214e
%dir %_sysconfdir/clamd.d
4acee7c
# Used by both clamd, clamdscan, and clamonacc
4acee7c
%config(noreplace) %_sysconfdir/clamd.d/scan.conf
36c1bd4
36c1bd4
cvsextras 47272f4
%files data
Orion Poplawski 055ee19
%defattr(-,%updateuser,%updateuser,-)
6151a28
# use %%config to keep files which were updated by 'freshclam'
6151a28
# already. Without this tag, they would be overridden with older
6151a28
# versions whenever a new -data package is installed.
f294c9e
%config %verify(not size md5 mtime) %homedir/*.cvd
cvsextras 47272f4
36c1bd4
cvsextras 47272f4
%files update
cvsextras 47272f4
%_bindir/freshclam
d526a97
%_libdir/libfreshclam.so.2*
ecfc3db
%_mandir/*/freshclam*
c162cac
%_unitdir/clamav-freshclam.service
3e396f9
%config(noreplace) %verify(not mtime)    %_sysconfdir/freshclam.conf
53414b2
%if %{with old_freshclam}
53414b2
%pkgdatadir/freshclam-sleep
2d3f9e8
%config(noreplace) %_sysconfdir/cron.d/clamav-update
2d3f9e8
%config(noreplace) %_sysconfdir/sysconfig/freshclam
53414b2
%endif
1f88102
%config(noreplace) %verify(not mtime)    %_sysconfdir/logrotate.d/*
1f88102
%ghost %attr(0664,root,%updateuser) %verify(not size md5 mtime) %freshclamlog
Orion Poplawski 055ee19
%ghost %attr(0664,%updateuser,%updateuser) %homedir/*.cld
Orion Poplawski 055ee19
%ghost %attr(0664,%updateuser,%updateuser) %homedir/mirrors.dat
36c1bd4
36c1bd4
1977bdf
%files -n clamd
cvsextras 47272f4
%doc _doc_server/*
c67bf0c
%_mandir/man5/clamd.conf.5*
c67bf0c
%_mandir/man8/clamd.8*
c67bf0c
%_sbindir/clamd
5491d97
%_unitdir/clamd@.service
cbeb9f1
e939bcc
%ghost %scanstatedir/clamd.sock
c6bcaca
%if %{with tmpfiles}
daca419
  %_tmpfilesdir/clamd.scan.conf
f171361
  %ghost %dir %attr(0710,%scanuser,virusgroup) %scanstatedir
Enrico Scholz 69c6c9f
%else
f171361
  %dir %attr(0710,%scanuser,virusgroup) %scanstatedir
Enrico Scholz 69c6c9f
%endif
e939bcc
cvsextras 47272f4
e939bcc
%files milter
9ee1c30
%doc clamav-milter/README.fedora
e939bcc
%_sbindir/*milter*
e939bcc
%_mandir/man8/clamav-milter*
Orion Poplawski 3365dc5
%dir %_sysconfdir/mail
e939bcc
%config(noreplace) %_sysconfdir/mail/clamav-milter.conf
e939bcc
%ghost %attr(0620,root,%milteruser) %verify(not size md5 mtime) %milterlog
Enrico Scholz 69c6c9f
%ghost %milterstatedir/clamav-milter.socket
Enrico Scholz 69c6c9f
c6bcaca
%if %{with tmpfiles}
daca419
  %_tmpfilesdir/clamav-milter.conf
Enrico Scholz 69c6c9f
  %ghost %dir %attr(0710,%milteruser,%milteruser) %milterstatedir
Enrico Scholz 69c6c9f
%else
Enrico Scholz 69c6c9f
  %dir %attr(0710,%milteruser,%milteruser) %milterstatedir
Enrico Scholz 69c6c9f
%endif
9833a06
%_unitdir/clamav-milter.service
cbeb9f1
cbeb9f1
cvsextras 47272f4
%changelog
ba61c84
* Thu Sep 17 2020 Orion Poplawski <orion@nwra.com> - 0.103.0-1
ba61c84
- Update to 0.103.0
ba61c84
2f1ce73
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.102.4-2
2f1ce73
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
2f1ce73
4f33430
* Fri Jul 17 2020 Orion Poplawski <orion@nwra.com> - 0.102.4-1
4f33430
- Update to 0.102.4 (bz#1857867,1858262,1858263,1858265,1858266)
4f33430
- Security fixes CVE-2020-3327 CVE-2020-3350 CVE-2020-3481
4f33430
50a490f
* Thu May 28 2020 Orion Poplawski <orion@nwra.com> - 0.102.3-2
50a490f
- Update clamd README file (bz#1798369)
50a490f
ff339dd
* Thu May 14 2020 Orion Poplawski <orion@nwra.com> - 0.102.3-1
ff339dd
- Update to 0.102.3 (bz#1834910)
1aae5ab
- Security fixes CVE-2020-3327 CVE-2020-3341
ff339dd
c899b0e
* Sat May 02 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-9
c899b0e
- Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning
c899b0e
  certain PDFs
c899b0e
6217f0e
* Thu Apr 30 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-8
6217f0e
- Enable prelude support (bz#1829726)
6217f0e
f9c00c3
* Wed Apr 29 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-7
4acee7c
- Move /etc/clamd.d/scan.conf to clamav-filesystem
f9c00c3
- Add patch to build with EL7 libcurl - re-enable on-access scanning
f9c00c3
  (bz#1820395)
4acee7c
- Add clamonacc.service
f9c00c3
77db482
* Tue Apr 21 2020 Björn Esser <besser82@fedoraproject.org> - 0.102.2-6
77db482
- Rebuild (json-c)
77db482
a970a29
* Wed Apr  8 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-5
a970a29
- Do not log freshclam output to syslog by default - creates double entries
a970a29
  in the journal (bz#1822012)
fcb861f
- (#1820069) add try-restart clamav-freshclam.service on logrotate
a970a29
a970a29
* Mon Mar 16 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-4
c5b5449
- Quiet freshclam-sleep when used with proxy
c5b5449
55369f7
* Sat Feb 29 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-3
55369f7
- Add missingok to clamav-update.logrotate (bz#1807701)
55369f7
1f88102
* Mon Feb 10 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-2
1f88102
- Keep /var/log/freshclam.log handling - can still be used
1f88102
- Restore clamav-server provides (bz#1801329)
1f88102
- Fix old_freshclam cron conditional (bz#1801199)
1f88102
d526a97
* Sun Feb  9 2020 Orion Poplawski <orion@nwra.com> - 0.102.2-1
d526a97
- Update to 0.102.2
d526a97
- Drop supporting deprecated options for F32+ and EL8+
d526a97
- Drop old umask patch
d526a97
2d3f9e8
* Sun Feb 09 2020 Orion Poplawski <orion@nwra.com> - 0.101.5-10
2d3f9e8
- Re-add clamav-update.cron (bz#1800226)
53414b2
- Add conditional old_freshclam
2d3f9e8
cf32b14
* Tue Feb 04 2020 Sérgio Basto <sergio@serjux.com> - 0.101.5-9
cf32b14
- Add a message warning that We now provide clamav-freshclam.service systemd
cf32b14
  unit instead old scripts
cf32b14
d74f556
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.101.5-8
d74f556
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
d74f556
7a201cd
* Mon Jan 27 2020 Sérgio Basto <sergio@serjux.com> - 0.101.5-7
7a201cd
- More cleanups
607a7f1
- Remove llvm-glibc.patch (upstream already fixed it)
df27a18
- Comment "Example" in scan.conf to make clamd@scan.service works without editing
df27a18
- Improve description of clamav-update
7a201cd
8f1ad71
* Sun Jan 26 2020 Sérgio Basto <sergio@serjux.com> - 0.101.5-6
8f1ad71
- Fix clamd scriplets on update and add scriplets for clamav-freshclam.service
8f1ad71
c162cac
* Fri Jan 24 2020 Sérgio Basto <sergio@serjux.com> - 0.101.5-5
c162cac
- Improve upgrade path
c162cac
- Get rid of pkgdatadir variable
c162cac
- Use upstream freshclam systemd unit file, remove freshclam-sleep
c162cac
- Get rid of %freshclamlog variable
c162cac
- Get rid of smartsubst function
c162cac
e7cfcf5
* Fri Jan 17 2020 Sérgio Basto <sergio@serjux.com> - 0.101.5-4
e7cfcf5
- Fix scriplets (#1788338)
e7cfcf5
9833a06
* Tue Dec 17 2019 Sérgio Basto <sergio@serjux.com> - 0.101.5-3
9833a06
- Remove old init scripts and use systemd
9833a06
36e0fae
* Tue Dec 17 2019 Orion Poplawski <orion@nwra.com> - 0.101.5-2
36e0fae
- Allow building --with unrar again (bz#1782638)
36e0fae
a7555a5
* Sat Nov 23 2019 Orion Poplawski <orion@nwra.com> - 0.101.5-1
a7555a5
- Update to 0.101.5 (CVE-2019-15961) (bz#1775550)
a7555a5
234a5b8
* Mon Nov 18 2019 Orion Poplawski <orion@nwra.com> - 0.101.4-3
234a5b8
- Drop clamd@scan.service file (bz#1725810)
234a5b8
- Change /var/run to /run
234a5b8
5b6ec7c
* Mon Nov 18 2019 Orion Poplawski <orion@nwra.com> - 0.101.4-2
5b6ec7c
- Add TimeoutStartSec=420 to clamd@.service to match upstream (bz#1764835)
5b6ec7c
26c79bf
* Thu Aug 22 2019 Orion Poplawski <orion@nwra.com> - 0.101.4-1
26c79bf
- Update to 0.101.4
26c79bf
31dd11c
* Wed Aug 7 2019 Orion Poplawski <orion@nwra.com> - 0.101.3-1
31dd11c
- Update to 0.101.3
31dd11c
- Fix permissions on freshclam.conf (bugz#1733112)
31dd11c
7742d03
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.101.2-3
7742d03
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
7742d03
1d6f132
* Sun Jun 30 2019 Sérgio Basto <sergio@serjux.com> - 0.101.2-2
1d6f132
- One year later we may remove pakages workaround of clamav-milter-systemd,
1d6f132
  clamav-scanner-systemd and clamav-server-systemd, before I forget it was one
1d6f132
  workaround to allow migration of service without stop it and disable it
1d6f132
  (#1583599).
1d6f132
c8db3d7
* Thu Mar 28 2019 Sérgio Basto <sergio@serjux.com> - 0.101.2-1
c8db3d7
- Update to 0.101.2
c8db3d7
b2b8a96
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.101.1-2
b2b8a96
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
b2b8a96
eac463f
* Thu Jan 10 2019 Sérgio Basto <sergio@serjux.com> - 0.101.1-1
eac463f
- Update to 0.101.1
eac463f
c2d8e5e
* Thu Jan 3 2019 Orion Poplawski <orion@nwra.com> - 0.101.0-3
c2d8e5e
- Actually apply patch
c2d8e5e
767676d
* Thu Jan 3 2019 Orion Poplawski <orion@nwra.com> - 0.101.0-2
767676d
- Explicitly list sonames to catch soname bumps
767676d
- Backport header fix (bug #1663011)
767676d
202154b
* Thu Dec 13 2018 Orion Poplawski <orion@nwra.com> - 0.101.0-1
202154b
- Update to 0.101.0
26ce29c
- Add %%license
26ce29c
- pdf docs replaced with html
202154b
4b6e1ae
* Thu Oct 04 2018 Sérgio Basto <sergio@serjux.com> - 0.100.2-2
4b6e1ae
- Revert unwanted committed parts of commit "clean whitespace"
4b6e1ae
ea82c8b
* Thu Oct 04 2018 Sérgio Basto <sergio@serjux.com> - 0.100.2-1
ea82c8b
- Update to 0.100.2
4b6e1ae
- Fix logrotate example (#1610735)
4b6e1ae
- Improve clamd@.service (enter in commit "clean whitespace" by mistake sorry)
ea82c8b
629b8f1
* Mon Jul 30 2018 Sérgio Basto <sergio@serjux.com> - 0.100.1-4
629b8f1
- Change the default location of configuration files in clamconf, binaries and
629b8f1
  man pages, replacing with our default packaging (#859339).
629b8f1
aced9bb
* Sun Jul 29 2018 Sérgio Basto <sergio@serjux.com> - 0.100.1-3
aced9bb
- Modify group of /var/run/clamd.scan to virusgroup
aced9bb
- Add some SELinux notes from (#787434)
aced9bb
- Drop pointless clamav-0.99.1-setsebool.patch
a373eee
- Drop conditionalized build of noarch
aced9bb
ae505a3
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.100.1-2
ae505a3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
ae505a3
9d78ad0
* Wed Jul 11 2018 Sérgio Basto <sergio@serjux.com> - 0.100.1-1
9d78ad0
- Update to 0.100.1
9d78ad0
15e5a2c
* Mon Jul 02 2018 Sérgio Basto <sergio@serjux.com> - 0.100.0-3
15e5a2c
- Remove sub-package clamav-data-empty
15e5a2c
- Also remove conflicts between clamav-data and clamav-data-empty
15e5a2c
ea823d8
* Sun Jun 03 2018 Sérgio Basto <sergio@serjux.com> - 0.100.0-2
ea823d8
- Try to mitigate bug #1583599
734f2ac
- Move comments one line (to read before starting the scriptlet)
8c01499
- clamav-milter could work without clamd and without sendmail (#1583599)
ccea2e3
- Get rid of provides/requires with updateuser, virusgroup, scanuser and
ccea2e3
  milteruser and just simply require clamav-filesystem
734f2ac
7b491c4
* Mon May 28 2018 Robert Scheck <robert@fedoraproject.org> - 0.100.0-1
7b491c4
- Upgrade to 0.100.0 (#1565381)
7b491c4
abc6c60
* Wed Mar 21 2018 Sérgio Basto <sergio@serjux.com> - 0.99.4-3
abc6c60
- Fix data-empty sub-package (ghost the correct files)
5e34a1f
- Add Obsoletes systemd sub-packages
abc6c60
ab5a445
* Mon Mar 12 2018 Sérgio Basto <sergio@serjux.com> - 0.99.4-2
ab5a445
- Revert fix for llvm, build using -std=gnu++98 (#1307378)
ab5a445
- Revert CFLAG assignment in commmit a4a6d252 (made in 2006)
ab5a445
- BR systemd-devel to fix detection in configure.
58b63a7
- Disable llvm in ppc64 (#1534071)
58b63a7
- "Disable llvm will use the internal bytecode interpreter rather than the llvm
58b63a7
  jit", so drop bytecode build condition and use condional on enable or disable
58b63a7
  llvm.
ab5a445
e25f69a
* Fri Mar 02 2018 Orion Poplawski <orion@nwra.com> - 0.99.4-1
e25f69a
- Update to 0.99.4
e25f69a
- Security fixes CVE-2012-6706 CVE-2017-6419 CVE-2017-11423 CVE-2018-1000085
e25f69a
  CVE-2018-0202
e25f69a
5491d97
* Tue Feb 13 2018 Sérgio Basto <sergio@serjux.com> - 0.99.3-7
ab5a445
- Remove sub-packages sysvinit, upstart and systemd to be more compatible with
5491d97
  el6 .
5491d97
- Remove provides/obsoletes for very old sub-packges clamav-milter-core,
5491d97
  clamav-milter-sendmail and clamav-milter-core
1977bdf
- Call server and scanner sub-packages as clamd (el6 compatible and as uppstream
1977bdf
  call it)
1977bdf
- clamav-data provides clamav-db (el6 compatible)
083b73d
- Explicitly enable-id-check and enable-dns in configure (as in el6).
9f23645
- Add missing build-time requirement pcre2-devel (it misses in el6 at least)
5491d97
0438913
* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 0.99.3-6
0438913
- Escape macros in %%changelog
0438913
1bd085d
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.3-5
1bd085d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
1bd085d
2ac33e2
* Sat Feb 03 2018 Sérgio Basto <sergio@serjux.com> - 0.99.3-4
5f972d5
- Last Epel 7 macro already have systemctl daemon-reload, reverting 0.99.3-3 release
5f972d5
- Remove BR _includedir/tcpd.h due:
5f972d5
  https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers
2ac33e2
fb4f5e7
* Wed Jan 31 2018 Sérgio Basto <sergio@serjux.com> - 0.99.3-3
fb4f5e7
- Use systemctl daemon-reload because we change services and epel7 seems not
c5364c4
  reload services and break conditional restart.
fb4f5e7
1d79f9a
* Wed Jan 31 2018 Sérgio Basto <sergio@serjux.com>
1d79f9a
- Fix and organize systemd scriptlets, clamd@.service missed systemd_preun macro
1d79f9a
  and had a wrong systemd_postun_with_restart
5e876f7
- Remove triggerin macros that aren't need it anymore
5e876f7
- Fix scriplet
5e876f7
- Organize startup scriptlets
5e876f7
- Exclude one file listed twice
1d79f9a
c67bf0c
* Fri Jan 26 2018 Orion Poplawski <orion@nwra.com> - 0.99.3-1
c67bf0c
- Update to 0.99.3
c67bf0c
- Security fixes CVE-2017-12374 CVE-2017-12375 CVE-2017-12376 CVE-2017-12377
c67bf0c
  CVE-2017-12378 CVE-2017-12379 CVE-2017-12380 (bug #1539030)
c67bf0c
- Drop clamav-notify-servers and it's dependency on ncat (bug #1530678)
c67bf0c
f02bd6b
* Wed Jan 17 2018 Sérgio Basto <sergio@serjux.com> - 0.99.2-18
8e91346
- Fix type of clamd@ service
82c4e87
- Fix packages name of Obsoletes directives
f02bd6b
- Also fix type of clamav-milter.service
8e91346
1d4f821
* Thu Jan 11 2018 Sérgio Basto <sergio@serjux.com> - 0.99.2-17
8c0e645
- Security fixes CVE-2017-6420 (#1483910), CVE-2017-6418 (#1483908)
1d4f821
e817c70
* Tue Jan 09 2018 Sérgio Basto <sergio@serjux.com> - 0.99.2-16
e817c70
- Make sure that Obsoletes sysv and upstart for Epel upgrade and update
e817c70
e613e50
* Mon Jan 08 2018 Sérgio Basto <sergio@serjux.com> - 0.99.2-15
e613e50
- Fix rundir path (#1126595)
af0cb6b
- Update main.cvd, daily.cvd and bytecode.cvd
af0cb6b
- Fixes for rhbz 1464269 and rhbz 1126625
af0cb6b
- Move Sources and BuildRequires to the beginning
af0cb6b
- Build systemd for F22+ and el7+
af0cb6b
- Build sysv and upstart for el6 else build only sysv
af0cb6b
- Only enable tmpfiles with systemd enabled
af0cb6b
- Move descritions to near the package macro and remove his build
af0cb6b
  conditionals, this also fix the generation of src.rpm
af0cb6b
- Remove hack from 2010 (git show e1a9be60)
af0cb6b
- Use autoreconf without --force
e613e50
eec7d43
* Thu Jan 04 2018 Sérgio Basto <sergio@serjux.com> - 0.99.2-14
c6bcaca
- Use 4 spaces instead tabs
eec7d43
- Fix rhbz #1530678
eec7d43
- Fix rhbz #1518016
c6bcaca
- Simplify conditional builds reference: /usr/lib/rpm/macros
c6bcaca
- use make_build and make install macros
eec7d43
b63618b
* Sun Nov 26 2017 Robert Scheck <robert@fedoraproject.org> - 0.99.2-13
b63618b
- Backported upstream patch to unbreak e2guardian vs. temp files
b63618b
f5e72a7
* Fri Sep 15 2017 Sérgio Basto <sergio@serjux.com> - 0.99.2-12
f5e72a7
- Try fix rhbz #1473642
f5e72a7
661aa15
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.2-11
661aa15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
661aa15
1d300b7
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.2-10
1d300b7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
1d300b7
298f77b
* Mon Jul 17 2017 Sérgio Basto <sergio@serjux.com> - 0.99.2-9
298f77b
- Add patch for openssl-1.1
298f77b
Orion Poplawski 055ee19
* Mon Mar 27 2017 Orion Poplawski <orion@cora.nwra.com> - 0.99.2-8
Orion Poplawski 055ee19
- Create virusgroup group and add the various clam* users to it
Orion Poplawski 055ee19
Orion Poplawski 58a08b0
* Sun Mar 26 2017 Orion Poplawski <orion@cora.nwra.com> - 0.99.2-7
Orion Poplawski 58a08b0
- Fix clamav-milter startup under selinux (bug #1434176)
Orion Poplawski d68214e
- Move /etc/clam.d to clamav-filesystem (bug #1275630)
Orion Poplawski 3365dc5
- Make clamav-milter own /etc/mail (bug #1175473)
Orion Poplawski 58a08b0
Orion Poplawski c0342cf
* Sun Mar 26 2017 Orion Poplawski <orion@cora.nwra.com> - 0.99.2-6
Orion Poplawski c0342cf
- Start clamav-milter after clamd@scan (bug #1356507))
Orion Poplawski c0342cf
Orion Poplawski 709eae1
* Sun Mar 26 2017 Orion Poplawski <orion@cora.nwra.com> - 0.99.2-5
Orion Poplawski 709eae1
- Allow freshclam to run automatically on install (bug #1408649)
Orion Poplawski 709eae1
a77823c
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.2-4
a77823c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
a77823c
d584df9
* Mon Nov 07 2016 Richard W.M. Jones <rjones@redhat.com> - 0.99.2-3
d584df9
- Rebuild for OCaml 4.04.0.
d584df9
Orion Poplawski e0e55d3
* Tue Oct 18 2016 Orion Poplawski <orion@cora.nwra.com> - 0.99.2-2
Orion Poplawski e0e55d3
- Also send logrotate script stdout to /dev/null (bug #1376815)
Orion Poplawski e0e55d3
Orion Poplawski fd47d25
* Mon Jun 13 2016 Orion Poplawski <orion@cora.nwra.com> - 0.99.2-1
Orion Poplawski fd47d25
- Update to 0.99.2
Orion Poplawski fd47d25
- Drop cliopts patch fixed upstream, use upstream's "--forground" option name
Orion Poplawski fd47d25
- Fix main.cvd (fedora #1325482, epel #1325717)
Orion Poplawski fd47d25
- Own bytecode.cld (#1176252) and mirrors.dat, ship bytecode.cvd
Orion Poplawski fd47d25
- Update daily.cvd
Orion Poplawski fd47d25
- Fixup Requires(pre) usage (#1319151)
Orion Poplawski fd47d25
cb1d163
* Tue Mar 29 2016 Robert Scheck <robert@fedoraproject.org> - 0.99.1-1
cb1d163
- Upgrade to 0.99.1 and updated main.cvd and daily.cvd (#1314115)
cb1d163
- Complain about antivirus_use_jit rather clamd_use_jit (#1295473)
cb1d163
aa28a8d
* Tue Mar 29 2016 Robert Scheck <robert@fedoraproject.org> - 0.99-4
99a8f26
- Link using %%{?__global_ldflags} for hardened builds (#1321173)
aa28a8d
- Build using -std=gnu++98 (#1307378, thanks to Yaakov Selkowitz)
aa28a8d
093f449
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.99-3
093f449
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
093f449
5a9ff07
* Sun Dec 06 2015 Robert Scheck <robert@fedoraproject.org> - 0.99-2
5a9ff07
- Require openssl-devel for clamav-devel
5a9ff07
- Change clamav-milter unit for upstream changes (#1287795)
5a9ff07
9815683
* Wed Dec 02 2015 Robert Scheck <robert@fedoraproject.org> - 0.99-1
9815683
- Upgrade to 0.99 and updated daily.cvd (#1287327)
9815683
daca419
* Tue Jun 30 2015 Robert Scheck <robert@fedoraproject.org> - 0.98.7-3
daca419
- Move /etc/tmpfiles.d/ to /usr/lib/tmpfiles.d/ (#1126595)
daca419
b1f5732
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.98.7-2
b1f5732
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
b1f5732
f3da639
* Wed Apr 29 2015 Robert Scheck <robert@fedoraproject.org> - 0.98.7-1
1fe2808
- Upgrade to 0.98.7 and updated daily.cvd (#1217014)
1fe2808
21e7a7d
* Tue Mar 10 2015 Adam Jackson <ajax@redhat.com> 0.98.6-2
21e7a7d
- Drop sysvinit subpackages in F23+
21e7a7d
de7237b
* Thu Jan 29 2015 Robert Scheck <robert@fedoraproject.org> - 0.98.6-1
de7237b
- Upgrade to 0.98.6 and updated daily.cvd (#1187050)
de7237b
b6e28ea
* Wed Nov 19 2014 Robert Scheck <robert@fedoraproject.org> - 0.98.5-2
b6e28ea
- Corrected summary of clamav-server-systemd package (#1165672)
b6e28ea
cf98e1a
* Wed Nov 19 2014 Robert Scheck <robert@fedoraproject.org> - 0.98.5-1
cf98e1a
- Upgrade to 0.98.5 and updated daily.cvd (#1138101)
cf98e1a
5bfc5de
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.98.4-2
5bfc5de
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
5bfc5de
5fcbde9
* Sat Jun 21 2014 Robert Scheck <robert@fedoraproject.org> - 0.98.4-1
5fcbde9
- Upgrade to 0.98.4 and updated daily.cvd (#1111811)
5fcbde9
- Add build requirement to libxml2 for DMG, OpenIOC and XAR
5fcbde9
b7f81c2
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.98.3-2
b7f81c2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
b7f81c2
07c7f28
* Sat May 10 2014 Robert Scheck <robert@fedoraproject.org> - 0.98.3-1
07c7f28
- Upgrade to 0.98.3 and updated daily.cvd (#1095614)
07c7f28
- Avoid automatic path detection breakage regarding curl
07c7f28
- Added build requirement to openssl-devel for hasing code
07c7f28
- Added clamsubmit to main package
07c7f28
56d62ee
* Wed Jan 15 2014 Robert Scheck <robert@fedoraproject.org> - 0.98.1-1
56d62ee
- Upgrade to 0.98.1 and updated daily.cvd (#1053400)
56d62ee
114a6b2
* Wed Oct 09 2013 Dan Horák <dan[at]danny.cz> - 0.98-2
114a6b2
- Use fanotify from glibc instead of the limited hand-crafted version
114a6b2
57cb746
* Sun Oct 06 2013 Robert Scheck <robert@fedoraproject.org> - 0.98-1
57cb746
- Upgrade to 0.98 and updated main.cvd and daily.cvd (#1010168)
57cb746
5a2b150
* Wed Aug 07 2013 Pierre-Yves Chibon <pingou@pingoured.fr> - 0.97.8-4
5a2b150
- Add a missing requirement on crontabs to spec file
5a2b150
- Fix RHBZ#988605
5a2b150
bfe1515
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.97.8-3
bfe1515
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
bfe1515
d910062
* Thu May 2 2013 Nick Bebout <nb@fedoraproject.org> - 0.97.8-1
d910062
- Update to 0.97.8
d910062
d2c5bf5
* Wed Apr 10 2013 Jon Ciesla <limburgher@gmail.com> - 0.97.7-2
d2c5bf5
- Migrate from fedora-usermgmt to guideline scriptlets.
d2c5bf5
84f95c1
* Sat Mar 23 2013 Nick Bebout <nb@fedoraproject.org> - 0.97.7-1
84f95c1
- Update to 0.97.7
84f95c1
1782978
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.97.6-1901
1782978
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
1782978
Enrico Scholz 62e9732
* Sat Sep 22 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.6-1900
Enrico Scholz 62e9732
- updated to 0.97.6
Enrico Scholz 83f132f
- use %%systemd macros
Enrico Scholz 62e9732
Enrico Scholz 3b40094
* Tue Aug 14 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.5-1900
Enrico Scholz 3b40094
- disabled upstart support
Enrico Scholz 3b40094
4359495
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.97.5-1801
4359495
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
4359495
Enrico Scholz 2d0fed8
* Sat Jun 16 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.5-1800
Enrico Scholz 2d0fed8
- updated to 0.97.5
Enrico Scholz 2d0fed8
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
Enrico Scholz 2d0fed8
  entry with a length field that exceeds the total TAR file size
Enrico Scholz 2d0fed8
- CVE-2012-1458: allows to bypass malware detection via a crafted
Enrico Scholz 2d0fed8
  reset interval in the LZXC header of a CHM file
Enrico Scholz 2d0fed8
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
Enrico Scholz 2d0fed8
  entry with a length field corresponding to that entire entry, plus
Enrico Scholz 2d0fed8
  part of the header of the next entry
Enrico Scholz 590f977
- ship local copy of virus database; it was removed by accident from
Enrico Scholz 590f977
  0.97.5 tarball
Enrico Scholz 7a283cf
- removed sysv compat stuff
Enrico Scholz 2d0fed8
Enrico Scholz 6a1f662
* Fri Apr 13 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.4-1801
Enrico Scholz 6a1f662
- build with -fPIE
Enrico Scholz 6a1f662
Enrico Scholz 1712173
* Fri Mar 16 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.4-1800
Enrico Scholz 1712173
- updated to 0.97.4
Enrico Scholz 1712173
Enrico Scholz 05b60da
* Sun Feb  5 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.3-1703
Enrico Scholz 288f020
- fixed SELinux restorecon invocation
Enrico Scholz 57ac72a
- added trigger to fix SELinux contexts of logfiles created by old
Enrico Scholz 57ac72a
  packages
Enrico Scholz 6134d15
- fixed build with recent gcc/glibc toolchain
Enrico Scholz 288f020
Enrico Scholz a11aee2
* Sat Jan 21 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.3-1703
Enrico Scholz adba5ca
- rewrote clamav-notify-servers to be init system neutral
Enrico Scholz 60764cd
- set PrivateTmp systemd option (#782488)
Enrico Scholz adba5ca
Enrico Scholz 754437b
* Sun Jan  8 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.3-1702
Enrico Scholz 5762593
- set correct SELinux context for logfiles generated in %%post (#754555)
Enrico Scholz df4373d
- create systemd tmpfiles in %%post
Enrico Scholz 09cf83a
- created -server-systemd subpackage providing a clamd@.service template
Enrico Scholz ff790d3
- made script in -scanner-systemd an instance of clamd@.service
Enrico Scholz 5762593
f5c3f18
* Tue Oct 18 2011 Nick Bebout <nb@fedoraproject.org> - 0.97.3-1700
f5c3f18
- updated to 0.97.3
f5c3f18
- CVE-2011-3627 clamav: Recursion level crash fixed in v0.97.3
f5c3f18
Enrico Scholz ec71ab7
* Thu Aug  4 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.2-1700
Enrico Scholz 561d35c
- moved sysv wrapper script into -sysv subpackage
Enrico Scholz ec71ab7
- start systemd services after network.target and nss-lookup.target
Enrico Scholz ec71ab7
Enrico Scholz 85dd73e
* Tue Jul 26 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.2-1600
Enrico Scholz 85dd73e
- updated to 0.97.2
Enrico Scholz 1747f49
- CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)
Enrico Scholz 55ae14c
- fixed systemd scripts and their installation
Enrico Scholz 85dd73e
Enrico Scholz 2b2f955
* Thu Jun  9 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97.1-1600
Enrico Scholz 2b2f955
- updated to 0.97.1
Enrico Scholz 652b406
- fixed Requires(preun) vs. Requires(postun) inconsistency
Enrico Scholz 2b2f955
Enrico Scholz 9fe7b84
* Sat Apr 23 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97-1601
Enrico Scholz 9fe7b84
- fixed tmpfiles.d syntax (#696812)
Enrico Scholz 9fe7b84
Enrico Scholz e3d4e0f
* Sun Feb 20 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.97-1600
Enrico Scholz e3d4e0f
- updated to 0.97
Enrico Scholz e3d4e0f
- rediffed some patches
Enrico Scholz e3d4e0f
788561e
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.96.5-1503
788561e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
788561e
Enrico Scholz 77795d2
* Sat Jan  8 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.5-1502
Enrico Scholz 77795d2
- fixed signal specifier in clamd-wrapper (#668131, James Ralston)
Enrico Scholz 77795d2
Enrico Scholz 69c6c9f
* Fri Dec 24 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.5-1501
Enrico Scholz 69c6c9f
- added systemd init scripts which obsolete to old sysvinit ones
Enrico Scholz 69c6c9f
- added tmpfiles.d/ descriptions
Enrico Scholz 69c6c9f
Enrico Scholz d4f86f1
* Sat Dec  4 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.5-1500
Enrico Scholz d4f86f1
- updated to 0.96.5
Enrico Scholz d4f86f1
- CVE-2010-4260 Multiple errors within the processing of PDF files can
Enrico Scholz d4f86f1
  be exploited to e.g. cause a crash.
Enrico Scholz d4f86f1
- CVE-2010-4261 An off-by-one error within the "icon_cb()" function
Enrico Scholz d4f86f1
  can be exploited to cause a memory corruption.
Enrico Scholz d4f86f1
Enrico Scholz ba25ade
* Sun Oct 31 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.4-1500
Enrico Scholz ba25ade
- updated to 0.96.4
Enrico Scholz 35bfd9d
- execute 'make check' (#640347) but ignore errors for now because
Enrico Scholz 35bfd9d
  four checks are failing on f13
Enrico Scholz ba25ade
Enrico Scholz 2528e9c
* Wed Sep 29 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.3-1501
Enrico Scholz 2528e9c
- lowered stop priority of sysv initscripts (#629435)
Enrico Scholz 2528e9c
Enrico Scholz a83f243
* Wed Sep 22 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.3-1500
Enrico Scholz a83f243
- updated to 0.96.3
Enrico Scholz a83f243
- fixes CVE-2010-0405 in shipped bzlib.c copy
Enrico Scholz a83f243
Enrico Scholz d2913cd
* Sun Aug 15 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.2-1500
Enrico Scholz d2913cd
- updated to 0.96.2
Enrico Scholz d2913cd
- rediffed patches
Enrico Scholz d2913cd
- removed the -jit-disable patch which is replaced upstream by a more
Enrico Scholz d2913cd
  detailed configuration option.
Enrico Scholz d2913cd
Enrico Scholz 2e749a5
* Wed Aug 11 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
Enrico Scholz 2e749a5
- removed old %%trigger which renamed the 'clamav' user- and groupnames
Enrico Scholz 2e749a5
  to 'clamupdate'
Enrico Scholz 1b9c20a
- use 'groupmems', not 'usermod' to add a user to a group because
Enrico Scholz 1b9c20a
  'usermod' does not work when user does not exist in local /etc/passwd
Enrico Scholz 2e749a5
Enrico Scholz c12c295
* Tue Jul 13 2010 Dan Horák <dan[at]danny.cz> - 0.96.1-1401
Enrico Scholz c12c295
- ocaml not available (at least) on s390(x)
Enrico Scholz c12c295
Enrico Scholz c12c295
* Tue Jun  1 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96.1-1400
dc6c42a
- updated to 0.96.1
Enrico Scholz c12c295
- rediffed patches
Enrico Scholz c12c295
57cb746
* Sat May 29 2010 Rakesh Pandit <rakesh@fedoraproject.org> - 0.96.1403
Enrico Scholz c12c295
- CVE-2010-1639 Clam AntiVirus: Heap-based overflow, when processing malicious PDF file(s)
Enrico Scholz c12c295
Enrico Scholz c12c295
* Wed Apr 21 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96-1402
Enrico Scholz c12c295
- updated to final 0.96
1c5ca07
- applied upstream patch which allows to disable JIT compiler (#573191)
Enrico Scholz c12c295
- build JIT compiler again
1c5ca07
- disabled JIT compiler by default
1c5ca07
- removed explicit 'pkgconfig' requirements in -devel (#533956)
Enrico Scholz c12c295
Enrico Scholz c12c295
* Sat Mar 20 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96-0.1401.rc1
Enrico Scholz c12c295
- do not build the bytecode JIT compiler for now until it can be disabled
Enrico Scholz c12c295
  at runtime (#573191)
Enrico Scholz c12c295
Enrico Scholz c12c295
* Thu Mar 11 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.96-1400.rc1
Enrico Scholz c12c295
- updated to 0.96rc1
95227b8
- added some BRs
Enrico Scholz c12c295
Enrico Scholz c12c295
* Sun Dec  6 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95.3-1301
Enrico Scholz c12c295
- updated -upstart to upstart 0.6.3
18c2da4
5a59f06
* Sat Nov 21 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
5a59f06
- adjusted chkconfig positions for clamav-milter (#530101)
Enrico Scholz c12c295
- use %%apply instead of %%patch
5a59f06
Enrico Scholz c12c295
* Thu Oct 29 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95.3-1300
e0ec3ff
- updated to 0.95.3
e0ec3ff
11ed44b
* Sun Sep 13 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
11ed44b
- conditionalized build of noarch subpackages to ease packaging under RHEL5
11ed44b
3ec0300
* Sun Aug  9 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95.2-5
3ec0300
- modified freshclam configuration to log by syslog by default
3ec0300
- disabled LocalSocket option in sample configuration
3ec0300
- fixed clamav-milter sysv initscript to use bash interpreter and to
3ec0300
  be disabled by default
3ec0300
42e36a2
* Sat Aug  8 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95.2-4
42e36a2
- renamed 'clamav' user/group to 'clamupdate'
0438913
- add the '%%milteruser' user to the '%%scanuser' group when the -scanner
42e36a2
  subpackage is installed
42e36a2
44d2450
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.95.2-2
44d2450
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
44d2450
f3f7462
* Thu Jun 11 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95.2-1
f3f7462
- updated to 0.95.2
f3f7462
d41bb54
* Sun Apr 19 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95.1-3
d41bb54
- fixed '--without upstart' operation
d41bb54
0b8f60e
* Wed Apr 15 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95.1-2
0b8f60e
- added '%%bcond_without upstart' conditional to ease skipping of
0b8f60e
  -upstart subpackage creation e.g. on EL5 systems
0b8f60e
- fixed Provides/Obsoletes: typo in -milter-sysvinit subpackage which
0b8f60e
  broke update path
0b8f60e
4939cbd
* Fri Apr 10 2009 Robert Scheck <robert@fedoraproject.org> - 0.95.1-1
4939cbd
- Upgrade to 0.95.1 (#495039)
4939cbd
0e899af
* Wed Mar 25 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95-1
0e899af
- updated to final 0.95
0e899af
- added ncurses-devel (-> clamdtop) BR
0e899af
- enforced IPv6 support
0e899af
e939bcc
* Sun Mar  8 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.95-0.1.rc1
e939bcc
- updated to 0.95rc1
e939bcc
- added -upstart subpackages
e939bcc
- renamed -sysv to -sysvinit to make -upstart win the default dep resolving
e939bcc
- reworked complete milter stuff
e939bcc
- added -scanner subpackage which contains a preconfigured daemon
e939bcc
  (e.g. for use by -milter)
e939bcc
- moved %%changelog entries from 2006 and before into ChangeLog-rpm.old
e939bcc
6e801b5
* Wed Feb 25 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.94.2-3
6e801b5
- made some subpackages noarch
6e801b5
- fixed typo in SysV initscript which removes 'touch' file (#473513)
6e801b5
b373eea
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.94.2-2
b373eea
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
b373eea
8350726
* Tue Dec 02 2008 Robert Scheck <robert@fedoraproject.org> - 0.94.2-1
8350726
- Upgrade to 0.94.2 (#474002)
8350726
703e6bd
* Wed Nov 05 2008 Robert Scheck <robert@fedoraproject.org> - 0.94.1-1
703e6bd
- Upgrade to 0.94.1
703e6bd
57e0f31
* Sun Oct 26 2008 Robert Scheck <robert@fedoraproject.org> - 0.94-1
57e0f31
- Upgrade to 0.94 (SECURITY), fixes #461461:
57e0f31
- CVE-2008-1389 Invalid memory access in the CHM unpacker
57e0f31
- CVE-2008-3912 Out-of-memory NULL pointer dereference in mbox/msg
57e0f31
- CVE-2008-3913 Memory leak in code path in freshclam's manager.c
57e0f31
- CVE-2008-3914 Multiple file descriptor leaks on the code paths
57e0f31
4732e9c
* Sun Jul 13 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.93.3-1
4732e9c
- updated to 0.93.3; another fix for CVE-2008-2713 (out-of-bounds read
4732e9c
  on petite files)
4732e9c
- put pid instead of pgrp into pidfile of clamav-milter (bz #452359)
f906263
- rediffed patches
4732e9c
01e19b3
* Tue Jun 17 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.93.1-1
01e19b3
- updated to 0.93.1
01e19b3
- rediffed -path patch
01e19b3
- CVE-2008-2713 Invalid Memory Access Denial Of Service Vulnerability
01e19b3
3807829
* Mon Apr 14 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.93-1
3807829
- updated to final 0.93
3807829
- removed daily.inc + main.inc directories; they are now replaced by
3807829
  *.cld containers
3807829
- trimmed down MAILTO list of cronjob to 'root' again; every well
3807829
  configured system has an alias for this recipient
3807829
196290c
* Wed Mar 12 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.93-0.1.rc1
887e341
- moved -milter scriptlets into -milter-core subpackage
887e341
- added a requirement on the milteruser to the -milter-sendmail
887e341
  subpackage (reported by Bruce Jerrick)
887e341
c5e4682
* Tue Mar  4 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.93-0.0.rc1
c5e4682
- updated to 0.93rc1
c5e4682
- fixed rpath issues
c5e4682
240e0e1
* Mon Feb 11 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.92.1-1
240e0e1
- updated to 0.92.1
240e0e1
9ee1c30
* Tue Jan  1 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.92-6
9ee1c30
- redisabled unrar stuff completely by using clean sources
9ee1c30
- splitted -milter subpackage into pieces to allow use without sendmail
9ee1c30
  (#239037)
9ee1c30
985d8cb
* Tue Jan  1 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.92-5
985d8cb
- use a better way to disable RPATH-generation (needed for '--with
985d8cb
  unrar' builds)
985d8cb
93ac5ce
* Mon Dec 31 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.92-4
93ac5ce
- added a README.fedora to the milter package (#240610)
93ac5ce
- ship original sources again; unrar is now licensed correctly (no more
93ac5ce
  stolen code put under GPL). Nevertheless, this license is not GPL
93ac5ce
  compatible, and to allow libclamav to be used by GPL applications,
93ac5ce
  unrar is disabled by a ./configure switch.
93ac5ce
- use pkg-config in clamav-config to emulate --cflags and --libs
93ac5ce
  operations (fixes partly multilib issues)
93ac5ce
- registered some more auto-updated files and marked them as %%ghost
93ac5ce
b9a8a98
* Fri Dec 21 2007 Tom "spot" Callaway <tcallawa@redhat.com> - 0.92-3
6a05c58
- updated to 0.92 (SECURITY):
6a05c58
- CVE-2007-6335 MEW PE File Integer Overflow Vulnerability
6a05c58
179411b
* Mon Oct 29 2007 Tom "spot" Callaway <tcallawa@redhat.com> - 0.91.2-3
11ed44b
- remove RAR decompression code from source tarball because of
179411b
  legal problems (resolves 334371)
179411b
- correct license tag
179411b
4086c9f
* Mon Sep 24 2007 Jesse Keating <jkeating@redhat.com> - 0.91.2-2
4086c9f
- Bump release for upgrade path.
4086c9f
68d2aa4
* Sat Aug 25 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.91.2-1
68d2aa4
- updated to 0.91.2 (SECURITY):
68d2aa4
- CVE-2007-4510 DOS in RTF parser
68d2aa4
- DOS in html normalizer
68d2aa4
- arbitrary command execution by special crafted recipients in
68d2aa4
  clamav-milter's black-hole mode
6aecc07
- fixed an open(2) issue
68d2aa4
e507381
* Tue Jul 17 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.91.1-0
e507381
- updated to 0.91.1
e507381
2ee773d
* Thu Jul 12 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.91-1
2ee773d
- updated to 0.91
2ee773d
ca0868d
* Thu May 31 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.90.3-1
ca0868d
- updated to 0.90.3
491e541
- BR tcpd.h instead of tcp_wrappers(-devel) to make it build both
ca0868d
  in FC6- and F7+
ca0868d
0b90ae9
* Fri Apr 13 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.90.2-1
11ed44b
- [SECURITY] updated to 0.90.2; fixes CVE-2007-1745, CVE-2007-1997
0b90ae9
319d6e7
* Fri Mar  2 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.90.1-2
319d6e7
- BR 'tcp_wrappers-devel' instead of plain 'tcp_wrappers'
319d6e7
00f644c
* Fri Mar  2 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.90.1-1
00f644c
- updated to 0.90.1
00f644c
- updated %%doc list
00f644c
0172997
* Sun Feb 18 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.90-1
0172997
- updated to final 0.90
0172997
- removed -visibility patch since fixed upstream
0172997
8aa983a
* Sun Feb  4 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.90-0.3.rc3
8aa983a
- build with -Wl,-as-needed and cleaned up pkgconfig file
8aa983a
- removed old hack which forced installation of freshclam.conf; related
8aa983a
  check was removed upstream
8aa983a
- removed static library
8aa983a
- removed %%changelog entries from before 2004
8aa983a
36c1bd4
* Sat Feb  3 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.90-0.2.rc3
36c1bd4
- updated to 0.90rc3
36c1bd4
- splitted mandatory parts from the data-file into a separate -filesystem
36c1bd4
  subpackage
36c1bd4
- added a -data-empty subpackage to allow a setup where database is
36c1bd4
  updated per cron-job and user does not want to download the large
36c1bd4
  -data package with outdated virus definitations (#214949)
36c1bd4
- %%ghost'ed the files downloaded by freshclam