Skip to content

Debian Changelog clamav (0.90.1dfsg-4etch19)

2009

clamav (0.90.1dfsg-4etch19) oldstable-security; urgency=low

   * [CVE-2008-6680] Fixed division by zero with --detect-broken.
   * [CVE-2009-1270] clamd and clamscan get hung up.
   * Backported hardening of CLI_ISCONTAINED macros (fixes UPack crash with
     malformed file, #1552)

 -- Stephen Gran <sgran@debian.org>  Tue, 14 Apr 2009 16:52:54 +0200

2008

clamav (0.90.1dfsg-4etch17) stable-security; urgency=low

   * Corrected error in previous patch for CVE-2008-3914 (thanks Leonel Nunez)

 -- Stephen Gran <sgran@debian.org>  Wed, 03 Dec 2008 13:26:21 -0800

clamav (0.90.1dfsg-4etch16) stable-security; urgency=high

   * [CVE-2008-5050]: libclamav/vba_extract.c: possible buffer overflow
     (Closes: #505134)
   * [CVE-2008-5314]: libclamav/special.c: respect recursion limits in
     cli_check_jpeg_exploit() (Closes: #507624)

 -- Stephen Gran <sgran@debian.org>  Wed, 03 Dec 2008 11:08:39 -0800

clamav (0.90.1dfsg-4etch15) stable-security; urgency=low

   * [CVE-2008-3912]: libclamav/mbox.c, libclamav/message.c: out-of-memory null
     dereferences
   * [CVE-2008-3914]: libclamav/htmlnorm.c, libclamav/others.c,
     libclamav/sis.c: fd leaks
   * [CVE-2008-3913]: freshclam/manager.c: memory leaks

 -- Stephen Gran <sgran@debian.org>  Fri, 05 Sep 2008 16:24:15 +0100

clamav (0.90.1dfsg-3.1+etch14) stable-security; urgency=high

   * Non-maintainer upload by the security team
   * Reinstate dropped patch for CVE-2008-2713, which was somehow left
     out of 0.90.1dfsg-3etch13 (Closes: #492252)

 -- Devin Carraway <devin@debian.org>  Thu, 24 Jul 2008 10:02:47 -0700

clamav (0.90.1dfsg-3etch13) stable-security; urgency=high

   * Non-maintainer upload by the security team
   * Backport upstream fix for CVE-2008-2713, addressing a denial of
     service vulnerability in the Petite executable unpacker.  A
     maliciously crafted petite-packed executable could trigger an
     out-of-bound memory read, resulting in a crash.  Thanks to Stephen
     Gran for his help identifying the problem.

 -- Devin Carraway <devin@debian.org>  Sat, 19 Jul 2008 06:26:52 +0000

clamav (0.90.1dfsg-3etch11) stable-security; urgency=high

   * libclamav/pe.c: possible integer overflow in wwpack
   * [CVE-2008-1100]: libclamav/pe.c: possible integer overflow in upack
   * [CVE-2008-1387]: libclamav/spin.c: possible integer overflow

 -- Stephen Gran <sgran@debian.org>  Tue, 15 Apr 2008 17:16:56 +0100

clamav (0.90.1dfsg-3etch10) stable-security; urgency=high

   * [CVE-2008-0318]: libclamav/pe.c: possible integer overflow
   * [CVE-2007-6595]: libclamav/others.c: tempfile symlink vulnerability

 -- Stephen Gran <sgran@debian.org>  Tue, 12 Feb 2008 00:32:33 +0000

2007

clamav (0.90.1dfsg-3etch9) stable; urgency=low

   * Remove non-free unrar code.
     - This change breaks all rar scanning.  Sorry
     - This also means we don't have to ship patches for removed code.

 -- Stephen Gran <sgran@debian.org>  Wed, 26 Dec 2007 14:05:10 +0000

clamav (0.90.1-3etch8) stable-security; urgency=low

   * [CVE-2007-6336]: libclamav/mspack.c: Off-by-one error in LZX_READ_HUFFSYM
   * [CVE-2007-6335]: libclamav/pe.c: MEW PE File Integer Overflow

 -- Stephen Gran <sgran@debian.org>  Sun, 16 Dec 2007 16:42:32 +0000

clamav (0.90.1-3etch7) stable-security; urgency=low

   * Rebuild with bumped version number

 -- Stephen Gran <sgran@debian.org>  Wed, 29 Aug 2007 14:10:31 +0100

clamav (0.90.1-3etch6) stable-security; urgency=low

   * Remove unnecessary 33_htmlnorm.c.crash.dpatch
   * 36_clamav-milter.c.CVE-2007-4560.dpatch:
     [CVE-2007-4560]: arbitrary code execution via clamav-milter's blackhole
     function

 -- Stephen Gran <sgran@debian.org>  Wed, 29 Aug 2007 12:44:52 +0100

clamav (0.90.1-3etch5) stable-security; urgency=low

   * fix call to tolower() which led to a crash in libclamav/htmlnorm.c
   * fix possible NULL dereference in rtf.c
   * fix possible NULL dereference when parsing email with RFC2397 URI

 -- Stephen Gran <sgran@debian.org>  Tue, 21 Aug 2007 21:31:13 +0100

clamav (0.90.1-3etch4) stable-security; urgency=high

   * [CVE-2007-3725]: libclamav/unrar/unrarvm.c: fix NULL pointer dereference

 -- Stephen Gran <sgran@debian.org>  Sun, 15 Jul 2007 18:01:48 +0100

clamav (0.90.1-3etch3) stable-security; urgency=low

   * Make sure patch for CVE-2007-2029 gets applied.
   * [CVE-2007-2650]: libclamav/ole2_extract.c: detect block list loop
   * [CVE-2007-XXXX]: libclamav/unsp.c: fix end of buffer calculation
   * [CVE-2007-XXXX]: libclamav/unrar/unrar.c: heap corruption causing DoS with
     corrupted rar archive, better handle truncated files
   * [CVE-2007-XXXX]: libclamav/others.c: tighten permissions on unpacked files

 -- Stephen Gran <sgran@debian.org>  Fri, 01 Jun 2007 00:08:57 +0100

clamav (0.90.1-3etch2) stable-security; urgency=high

   * fix debian/patch/27_pdf.c.CVE-2007-2029 so it actually applies and
     fixes the security issue documented in 0.90.1-3etch1

 -- Noah Meyerhans <noahm@debian.org>  Sat, 19 May 2007 08:50:09 -0400

clamav (0.90.1-3etch1) stable-security; urgency=low

   * [CVE-2007-2029] File descriptor leak in PDF handler
   * [CVE-2007-1745] File descriptor leak in CHM handler
   * [CVE-2007-1997] Buffer Overflow in CAB File Unstore

 -- Stephen Gran <sgran@debian.org>  Sun, 15 Apr 2007 11:07:59 +0100

clamav (0.90.1-2) unstable; urgency=low

   * Another NotifyClamd fix that somehow didn't make it into the last upload
     (closes: #414407)
   * Remove references to Woody backports.  No longer supported
     (closes: #412386)
   * Add more files to freshclam's purge list

 -- Stephen Gran <sgran@debian.org>  Mon, 12 Mar 2007 23:00:42 +0000

clamav (0.90.1-1) unstable; urgency=low

   * New upstream version.
     - many memory leaks fixed.
     - soname version increase now upstream
   * Patches:
     - freshen 02_milter_sendmail_version_patch
     - freshen 20_clamscan-manpage-update.dpatch
     - freshen 24_nullmailer_ftbfs.dpatch
     - remove 25_soname_bump.dpatch (merged upstream)
     - remove 26_isspace_fix_segv.dpatch (merged upstream)
   * Another NotifyClamd fix: guard against it being accidentally set to 'true'
     on upgrade (closes: #411095)
   * Document use of a TCP socket with clamav-milter in README.Debian
   * Remove obsolete --mbox switch from clampipe
   * add --enable-dns-fix to ./configure (closes: #411921)
   * Remove spurious Conflicts/Provides libclamav (this results in attempting
     to remove libclamav1, which is not what we want).
   * Remove Provides libclamav1-dev from the -dev package.
   * Better /etc/init.d/ stop handling (closes: #411373, #411448)

 -- Stephen Gran <sgran@debian.org>  Fri, 2 Mar 2007 03:18:31 +0000

clamav (0.90-1) unstable; urgency=medium

   * New upstream version (closes: #410966)
   * Patch rework:
     - freshen 02_milter_sendmail_version_patch
     - remove 05_freshclam_manpage.dpatch (obsoleted upstream)
     - freshen 19_freshclam-manpage-info.dpatch
     - freshen 20_clamscan-manpage-update.dpatch
     - freshen 24_nullmailer_ftbfs.dpatch
     - add 25_soname_bump
     - add 26_isspace_fix_segv.dpatch to address segv in entity normalization
      (taken from upstream CVS)
   * New freshclam option: ScriptedUpdates
   * Add manpage for clamconf
   * soname bump and library package rename due to dropped functions
   * Security issues addressed in this release:
     - [CVE-2007-0897] CAB File Denial of Service Vulnerability
     - [CVE-2007-0898] MIME Parsing Directory Traversal Vulnerability
     - [CVE-2007-0899] Possible heap overflow in libclamav/fsg.c

 -- Stephen Gran <sgran@debian.org>  Thu, 15 Feb 2007 01:28:37 +0000

clamav (0.90~rc3-1) unstable; urgency=low

   * New upstream version
     - New config options:
       MailMaxRecursion
       PhishingSignatures
   * Add clamconf to clamav-daemon package
   * New translations:
     - gl (closes: #407281)
   * patch rework:
     - Remove 10_base64.dpatch (merged upstream)
     - Remove 22_libtoolize.dpatch (merged upstream: w0000t)
     - Remove 26_implicit_functions.dpatch (merged upstream)
     - Remove 25_kfreebsd.dpatch (merged upstream)
     - Freshen 20_clamscan-manpage-update.dpatch
     - Freshen 24_nullmailer_ftbfs.dpatch

 -- Stephen Gran <sgran@debian.org>  Thu, 1 Feb 2007 02:10:55 +0000

2006

clamav (0.90~rc2-2) experimental; urgency=low

   * CVE's unavailable at previous upload time fixed in -1:
     CVE-2006-6481
     CVE-2006-6406
   * NotifyClamd option handling was wrong for freshclam (closes: #403265)
   * Fix Foreground parsing bug in clamav-milter.init
   * Document postfix useage for clamav-milter, and include upstream INSTALL
     file which has more information (closes: #392224)
   * patches rework: libtoolizing is now a dpatch, to reduce patch size between
     releases in the future
   * New translation:
     - es.po (closes: #402668)

 -- Stephen Gran <sgran@debian.org>  Sun, 17 Dec 2006 01:35:38 +0000

clamav (0.90~rc2-1) experimental; urgency=low

   * New upstream version
     - Can now disable options one by one (closes: #316330)
     - Fixes recursion based DoS (closes: #401874)
   * Patches:
     - Freshen all
     - Delete obsoleted ones
     - 10_base64.dpatch added for MIME bypass (closes: #401873)
   * New config file format dealt with in postinst
   * Freshclam now takes a PidFile argument - we don't need s-s-d to handle it
   * debian/rules check to make sure all config options are handled

 -- Stephen Gran <sgran@debian.org>  Mon, 11 Dec 2006 13:44:54 +0000

clamav (0.88.6-1) unstable; urgency=low

   * New upstream version
     - incorporates freshclam non-block patch, thus dropping it from patches/

 -- Stephen Gran <sgran@debian.org>  Mon, 6 Nov 2006 11:19:38 +0000

clamav (0.88.5-3) unstable; urgency=low

   * Fix broken configure.in patch.  Never mattered on systems where sendmail
     wasn't installed, but would make the build system fail to pick up local
     versions of sendmail on custom arrangements

 -- Stephen Gran <sgran@debian.org>  Mon, 23 Oct 2006 23:18:59 +0100

clamav (0.88.5-2) unstable; urgency=high

   * Fix FTBFS with nullmailer (closes: #393672)
   * Urgency high because this was keeping security fixes out of testing
   * Noted here since they were unavailable at previous upload time:
     - IDEF1597 is CVE-2006-4182 (libclamav/rebuildpe.c)
     - IDEF1736 is CVE-2006-5295 (libclamav/chmunpack.c)

 -- Stephen Gran <sgran@debian.org>  Thu, 19 Oct 2006 12:30:07 +0100

clamav (0.88.5-1) unstable; urgency=medium

   * New upstream version
     - libclamav/rebuildpe.c: fix possible heap overflow [IDEF1597]
     - libclamav/chmunpack.c: fix possible crash [IDEF1736]
     - urgency medium for this reason

 -- Stephen Gran <sgran@debian.org>  Mon, 16 Oct 2006 01:40:57 +0100

clamav (0.88.4-4) unstable; urgency=low

   * Versioned build-dep on dpkg-dev so I can use ${binary:Version}
   * Actually remove Magnus this time
   * Add Recommends clamav-base to clamav (closes: #391038)
   * Fix parse problem is slurp_config() (closes: #384046)

 -- Stephen Gran <sgran@debian.org>  Sun, 8 Oct 2006 13:39:15 +0100

clamav (0.88.4-3) unstable; urgency=low

   * Move logrotate handling to clamav-daemon.postrm (closes: #384011)
   * Apply upstream freshclam timeout patch (closes: #334911, #382353)
   * Actually install changelogs, symlink other docs.
   * Make binary packages binNMU'able
   * lsb init comments added to init scripts
   * Remove Magnus from Uploaders field, as it looks like he's really not
     coming back to it.  Thanks for all your work, Magnus!
   * Add shlibsdeps to clamav-dbg

 -- Stephen Gran <sgran@debian.org>  Mon, 2 Oct 2006 19:47:06 +0100

clamav (0.88.4-2) unstable; urgency=low

   * Just to note here for the security team, 0.88.4-1 fixed
     [CVE-2006-4018]: libclamav/upx.c: buffer overflow
     (CVE unavailable at upload time)
   * Fix up arguments to start_daemon() in init scripts (closes: #382092)
   * Fix override disparity

 -- Stephen Gran <sgran@debian.org>  Tue, 8 Aug 2006 21:38:43 +0100

clamav (0.88.4-1) unstable; urgency=low

   * New upstream version
     - Fixes UPX unpacker overflow vulnerability (closes: #382004, 382007)
   * Add example for clamscan(1) (closes: #374614)
   * freshclam(1) typo fix (closes: #376152)
   * New translations:
     - pt (thanks Ricardo Silva <ardoric@gmail.com>) (closes: #380216)
     - ja (thanks Kenshi Muto <kmuto@debian.org>) (closes: #379955)

 -- Stephen Gran <sgran@debian.org>  Tue, 8 Aug 2006 11:24:05 +0100

clamav (0.88.3-1) unstable; urgency=low

   * New upstream version
   * New translatiosn:
     - nl (thanks Vincent Zweije <zweije@xs4all.nl>) (closes: #370271)
     - pt_BR (Andre Luis Lopes <andrelop@debian.org>) (closes: #374028)

 -- Stephen Gran <sgran@debian.org>  Sat, 1 Jul 2006 15:04:11 +0100

clamav (0.88.2-2) unstable; urgency=low

   * Add -dbg package
     - this requires update to debian compat level 5
   * upgrade to standards version 3.7.2 (no changes)

 -- Stephen Gran <sgran@debian.org>  Thu, 18 May 2006 23:45:00 +0100

clamav (0.88.2-1) unstable; urgency=high

   * New upstream version
     - CVE-2006-1989
       freshclam/manager.c: lack of proper check for the size of header data
   * Typo fix in debian/control (closes: #363201)
   * Fix cut-n-paste error in clamav-config.1 (closes: #364563)
   * Removed dpatches merged upstream
   * Upgrade to Standards Version 3.7.0 (no changes)
   * For security team: 0.88.1-1 fixed the following CVE's:
     CVE-2006-1614 (libclamav/pe.c,libclamav/others.h)
     CVE-2006-1615 (shared/ouput.c)
     CVE-2006-1630 (libclamav/others.c)
     These CVE Ids were unavailable at upload time.

 -- Stephen Gran <sgran@debian.org>  Sun, 30 Apr 2006 12:35:19 +0100

clamav (0.88.1-1) unstable; urgency=low

   * New upstream release
     - Fixes segfault in bitset routine (closes: #360159)
     - Remerge patches (17_freshclam.conf_typos removed)
   * Rebuilding should fix libcurl linkage (closes: #355509)
   * Path to example conf file in clamav-daemon.init was wrong
   * New translation:
     - cs: (thanks Miroslav Kure <kurem@upcase.inf.upol.cz>)(closes: #356547)

 -- Stephen Gran <sgran@debian.org>  Tue, 4 Apr 2006 16:34:04 +0100

clamav (0.88-4) unstable; urgency=low

   * Only use ucf, userdel, and groupdel conditionally in clamav-base postrm
     (closes: #351198)
   * Only use ucf conditionally in clamav-freshclam postrm (closes: #351225)
   * Manpage typo fixes (closes: #351005, #351006, #351007, #351008)

 -- Stephen Gran <sgran@debian.org>  Fri, 3 Feb 2006 17:37:39 +0000

clamav (0.88-3) unstable; urgency=low

   * Reupload to try to triggter a rebuild with fixed debhelper

 -- Stephen Gran <sgran@debian.org>  Tue, 24 Jan 2006 23:26:12 +0000

clamav (0.88-2) unstable; urgency=low

   * Actually rebuild ./configure with the magic to make pass_all work

 -- Stephen Gran <sgran@debian.org>  Tue, 10 Jan 2006 02:55:18 +0000

clamav (0.88-1) unstable; urgency=high

   * New upstream version
     - [ libclamav/upx.c ]:
       fix possible heap overflow
     - [ libclamav/zziplib/zzip-zip.c ]:
       fix pointer misalignment problem on sparc64
     - [ libclamav/zziplib ]:
       improve handling of incorrectly created/handcrafted zip archives.
     - Many other fixes
   * Urgency high due to security fixes
   * Updated all package descriptions.
   * Patch merged upstream:
     - 10_zzip_aligned_patch
   * Patch added:
     - 05_freshclam_manpage.dpatch (quiets lintain complaint)
   * Add versioned dependency on lsb-base - we use log_daemon_msg now
     (closes: #338414)
   * New Translation:
     - de (thanks Erik Schanze <schanzi_usenet@gmx.de>)(closes: #345697)

 -- Stephen Gran <sgran@debian.org>  Tue, 10 Jan 2006 02:02:56 +0000

2005

clamav (0.87.1-1) unstable; urgency=low

   * New upstream release
     - Upstream fix for possible infinite loop
       libclamav/tnef.c: IDEF1169]
     - Upstream fix for possible infinite loop
       libclamav/mspack/cabd.c: IDEF1180]
     - Upstream fix for buffer size calculation
       libclamav/fsg.c: ZDI-CAN-004]
     - Upstream fix for possible infinite loop
       libclamav/others.c,h, libclamav/ole2_extract.c: CAN-2005-3239]
       (closes: #333566)
     - Upstream fix for boundary checks
       libclamav/petite.c]
     - Upstream fix to scan attachments that have no file names
       libclamav/mbox.c]
   * Some more lsb changes to init scripts
   * New Translations:
     - it (Thanks Cristian Rigamonti <cri@linux.it>)(closes: #330240)
     - sv (Thanks Daniel Nylander <po@danielnylander.se>)(closes: #333400)
   * Move to dpatch for patch management, and add build-dependencies (dpatch
     and cpp)
   * Apply patch for bus error on sparc in zzip routines (closes: #322396)

 -- Stephen Gran <sgran@debian.org>  Thu, 3 Nov 2005 23:21:30 +0000

clamav (0.87-1) unstable; urgency=low

   * New upstream version
     - Fixes CAN-2005-2920 and CAN-2005-2919 (closes: #328660)
   * New logcheck line for clamav-daemon (closes: #323132)
   * relibtoolize and apply kfreebsd patch (closes: #327707)
   * Make sure init.d script starts freshclam up again after upgrade when run
     from if-up.d (closes: #328912)

 -- Stephen Gran <sgran@debian.org>  Mon, 19 Sep 2005 09:05:59 +0100

clamav (0.86.2-5) unstable; urgency=low

   * Make sure pidfile always expands to something in clamd init script
     (closes: #322564)

 -- Stephen Gran <sgran@debian.org>  Thu, 11 Aug 2005 11:52:05 -0400

clamav (0.86.2-4) unstable; urgency=low

   * Really, I mean it this time, add the depends on lsb-base.

 -- Stephen Gran <sgran@debian.org>  Thu, 11 Aug 2005 08:34:23 -0400

clamav (0.86.2-3) unstable; urgency=low

   * Forgot a Depends on lsb-base last time.  Duh.

 -- Stephen Gran <sgran@debian.org>  Wed, 10 Aug 2005 13:24:57 -0400

clamav (0.86.2-2) unstable; urgency=low

   * Get rid of broken check for timeout (closes: #320301)
   * Add a reload-log target to the init script, so that other packages can
     make clamd reload it's database easily (closes: #321725)
   * Start exising XSI'isms from maintainer scripts.
   * Switch to lsb-base init functions
   * Init script exits if if-up.d method has been chosen and at least one
     of the interfaces is up (closes: #319865)
   * New translations:
     it (thanks Cristian Rigamonti <cri@linux.it>)(closes: #320793)
   * Documenting here what has not been previously documented just to keep the
     record straight for those interested.
     CAN's closed by _previous_ uploads, but not listed due to CAN unknown at
     time or other bad excuse:
     - 0.86.1: CAN-2005-1923
     - 0.86.2: CAN-2005-2450

 -- Stephen Gran <sgran@debian.org>  Wed, 10 Aug 2005 08:34:53 -0400

clamav (0.86.2-1) unstable; urgency=high

   * New upstream version (closes: #319898, #320014)
   * This upload will build against new libgmp3 (closes: #317853)
   * This version fixes several security bugs, will put CANs in a later
     changelog for reference

 -- Stephen Gran <sgran@debian.org>  Tue, 26 Jul 2005 08:57:49 -0400

clamav (0.86.1-2) unstable; urgency=high

   * Updated standards version (no changes)
   * Just a note for the security team's reference.  Version 0.86.1 of clamav
     fixes the following security bugs:
     - CAN-2005-2070
     - CAN-2005-2056
     - CAN-2005-1922
     Urgency high for this reason
   * README.Debian - explain that all conf files are handled by ucf, and add a
     pointer to ucf's documentation reagrding conffile handling
     (closes: #316049)
   * New translations
     - vi (thanks Clytie Siddall <clytie@riverland.net.au>)(closes: #315804)

 -- Stephen Gran <sgran@debian.org>  Fri, 1 Jul 2005 18:15:15 -0400

clamav (0.86.1-1) unstable; urgency=low

   * New upstream version
   * New translations
     - da (thanks Mohammed Adnene Trojette <adn+deb@diwi.org>)(closes: #315396)
     - fr (thanks Claus Hindsgaul <claus_h@image.dk>)(closes: #315410)

 -- Stephen Gran <sgran@debian.org>  Thu, 23 Jun 2005 18:58:41 -0400

clamav (0.86-1) unstable; urgency=low

   * New upstream version
   * Pull unneeded dh_installdocs and arguments out of debian/rules
     (closes: #314747)
   * Properly check for sendmail version to be non-null in configure.in before
     defining macros (closes: #314752)
   * Define sendmail version macros to be the same as current Debian packages
     of sendmail if those macros are undefined - temporary fix until upstream
     porperly use #if defined before checking values.  Also lets milter build
     with correct behavior for Debian sendmail users, without having to have
     sendmail as a build dep for something we already know (closes: #314914)

 -- Stephen Gran <sgran@debian.org>  Mon, 20 Jun 2005 17:12:57 -0400

clamav (0.85.2-0.86rc1-1) unstable; urgency=low

   * New Upstream Version
     (complete with hideous version number to allow upgrades) sigh
   * Allow for entry 'none' in LogFile debconf entry, disabling LogFile
     directive (closes: #309444)
   * Also disable logrotate file if it was previously enabled, but there is now
     no LogFile directive.
   * Multiple typo fixups in documentation
     (closes: #310014, #310015, #310016, #310017)
   * README.Debian erroneously still recommended reconfiguring clamav-daemon,
     although the debconf stuff has been moved to clamav-base
   * Loosen permissions on freshclam.conf if proxy password not used
     (closes: #310238)
   * Fix stray -e in echo statement (closes: #313198)
   * move db_stop in clamav-daemon's postinst, so that it actually stops
     debconf before doing anything that needs input or output (closes: #308740)
   * New translations
     - de (thanks Erik Schanze <mail@erikschanze.de>)(closes: #311706)
     - ru (thanks Yuriy Talakan' <yt@amur.elektra.ru>)(closes: #311969)
     - vi (thanks Clytie Siddall <clytie@riverland.net.au>)(closes: #313359)

 -- Stephen Gran <sgran@debian.org>  Mon, 13 Jun 2005 20:56:44 -0400

clamav (0.85.1-2) unstable; urgency=low

   * How about I remember the acinclude patch this time

 -- Stephen Gran <sgran@debian.org>  Mon, 16 May 2005 20:45:53 -0400

clamav (0.85.1-1) unstable; urgency=low

   * New upstream version

 -- Stephen Gran <sgran@debian.org>  Mon, 16 May 2005 19:07:40 -0400

clamav (0.85-1) unstable; urgency=low

   * New upstream version (closes: #308758)
   * Better logcheck line for freshclam (closes: #307189)
   * freshclam's postinst uses /dev/urandom instead of /dev/random now - no
     reason to block for perfect entropy when generating a cron job :)
   * Implement a 'reload-log' init script target for freshclam and clamd,
     so that logrotate does the right thing. (closes: #308153)

 -- Stephen Gran <sgran@debian.org>  Thu, 12 May 2005 09:20:15 -0400

clamav (0.84-2) unstable; urgency=medium

   * New logcheck lines for freshclam (closes: #307062)
   * Urgency is medium - should really have been medium for -1.  The reason for
     this urgency is to get a fix for #304123 into sarge.

 -- Stephen Gran <sgran@debian.org>  Sat, 30 Apr 2005 09:56:23 -0400

clamav (0.84-1) unstable; urgency=low

   * New upstream version
       Fit for sarge (closes: #304059)
   * Fix logrotate to only HUP freshclam if pidfile is present.  This is for
     people who don't run it as a deamon (closes: #306678)

 -- Stephen Gran <sgran@debian.org>  Fri, 29 Apr 2005 10:08:31 -0400

clamav (0.83.84rc2-2) unstable; urgency=low

   * Tighten permissions on freshclam.conf (may have passwords in it)
     (closes: #305483)
   * Put pointer to README.Debian in autogenerated clamd.conf, and explanation
     of why non-default configuration options have been chosen
     (closes: #292870)
   * Remove all reload targets in init scripts (the clam suite does not yet
     reread it's configuration on HUP).  Replace all calls to reload in
     logrotate scripts with kill -HUP (closes: #305590)

 -- Stephen Gran <sgran@debian.org>  Fri, 22 Apr 2005 12:06:31 -0400

clamav (0.83.84rc2-1) unstable; urgency=low

   * New upstream version
   * New clamav-milter logcheck lines

 -- Stephen Gran <sgran@debian.org>  Tue, 19 Apr 2005 23:03:48 -0400

clamav (0.83.84rc1-1) unstable; urgency=low

   * New upstream version (0.84rc1)
     Freshclam:
     - URL added to verbose output for freshclam (closes: #231865)
     - mutex using logg() code removed from freshclam signal handling, which
       fixes hang during update (closes: #274255, #274646, #292487)
     libclamav:
     - Fixes digest handling bug (closes: #299469)
     - better tar file (and by extension, deb) support (closes: #300223)
   * Clarify the warning about ScanMail (it is enabled by default, after all)
   * New logcheck files (thanks Marc Sherman <msherman@projectile.ca>)
     (closes: #302253, #302254)

 -- Stephen Gran <sgran@debian.org>  Sat, 9 Apr 2005 19:14:52 -0400

clamav (0.83-5) unstable; urgency=low

   * Typo fix in README.Debian (thanks Tomasz Papszun <tomek@lodz.tpsa.pl> for
     noticing)
   * Fix redirection error in clamav-freshclam.postinst (closes: #301032)

 -- Stephen Gran <sgran@debian.org>  Wed, 23 Mar 2005 09:16:11 -0500

clamav (0.83-4) unstable; urgency=low

   * Typo fix for ucf handling of freshclam cron.d file
   * Make sure ucf cache directory is there before copying into it
     (closes: #297589)
   * Add another logcheck ignore for freshclam (closes: #299546)
   * Documentation update:
     - some reorganization, and addition of headers so sections are more
       clearly delimited.
     - sample exim4 integration provided (closes: #297748)
   * Better debconf/ucf handling in clamav-daemon.postinst (closes: #300779)

 -- Stephen Gran <sgran@debian.org>  Mon, 21 Mar 2005 15:56:11 -0500

clamav (0.83-3) unstable; urgency=low

   * Typo fix in NEWS.Debian
   * Actually don't compress clamd.conf (duh) (really closes 295565 this time)
   * Split out common functions for better maintainability.
   * Put logrotate.d/clamav-daemon back into clamav-daemon package
     (closes: #296196)
   * New Translations:
     - cs (thanks Miroslav Kure <kurem@debian.cz>)
     - fr (thanks Mohammed Adnène Trojette <adn+deb@diwi.org>)(closes: #295905)
     - pt_BR (thanks André Luís Lopes <andrelop@debian.org>)

 -- Stephen Gran <sgran@debian.org>  Sat, 26 Feb 2005 21:50:53 -0500

clamav (0.83-2) unstable; urgency=low

   * Don't compress example clamd.conf (closes: #295565)
   * Add dh_installman rule to clamav-base (closes: #295569)

 -- Stephen Gran <sgran@debian.org>  Thu, 17 Feb 2005 20:06:55 -0500

clamav (0.83-1) unstable; urgency=low

   * New upstream version
     - No longer uses SESSION in clamav-milter (should close 294666, but will
       wait for confirmation)
     - Fixes false positives on RIFF files (closes: #294799)
   * Add clamav-milter logcheck files
   * Change timeout in kill of clamav-milter - it just shouldn't take that long
   * Move configuration of clamd.conf to the package clamav-base, and decouple
     clamav-milter from clamav-daemon.  Now that clamav-milter can run without
     clamav-daemon, there is no reason for this dependency.
   * Sadly this will blow up upgrades of clamav-milter that _do_ use clamd for
     scanning - apt/dpkg sets them up in essentially random order, so it is
     equally likely that the milter will get set up first and bail since it
     can't connect to clamd.  Waiting for the bug reports, but I see no other
     way to do this properly.
   * Since this involved a total reworking of the debconf stuff anyway (sigh),
     I have added debconf support for ArchiveMaxCompressionRatio
     (closes: #291414)
   * Make sure that default values match in clamav-base for DataBaseDirectory
     (closes: #294402)
   * error trapping in freshclam.postinst if check frequency is greater than 24
     and run from cron - this script does not gracefully handle that yet, so we
     trap the error and move on.  Thanks to John R. Shearer <john@puremail.com>
     for catching this.
   * New Translations:
     - da (thanks Claus Hindsgaul <claus_h@image.dk>)
     - it (thanks Cristian Rigamonti <cri@linux.it>)
     - ja (thanks Kenshi Muto <kmuto@debian.org>)

 -- Stephen Gran <sgran@debian.org>  Mon, 14 Feb 2005 14:54:51 -0500

clamav (0.82-1) unstable; urgency=low

   * New upstream version (closes: #294095)
   * New translations:
     - cs (thanks Miroslav Kure <kurem@upcase.inf.upol.cz>)(closes: #293609)
   * Re-add freshclam logcheck files (closes: #284732)
   * 0.81 fixed CAN-2005-0218, noted here for completeness, as this
     vulnerability was not announced until after 0.81 was already uploaded.

 -- Stephen Gran <sgran@debian.org>  Mon, 7 Feb 2005 18:03:32 -0500

clamav (0.81-2) unstable; urgency=high

   * Dammit!  Forgot to fix acinclude.m4 so that all arches get pass_all
     instead of retarded magic file test.  Let's try again.  Sigh.
   * urgency=high t fix security bug in sarge (CAN-2005-0133, actually fixed in
     0.81rc1, but this looks like it's the first version taht will make it).

 -- Stephen Gran <sgran@debian.org>  Thu, 27 Jan 2005 23:46:51 -0500

clamav (0.81-1) unstable; urgency=low

   * New upstream version
     - programs now report normal messages on stdout, and errors and warnings
       on stderr - this lets me better handle freshclam cron jobs, so warnings
       will now be seen by admins (closes: #247180, #279249)
   * Fixed bug in clamav-milter.init (upstream is trying to work around 2.4
     kernel bugs in thread signal handling the same way I was, and this
     caused, er, strange results)
   * Add html/ docs back in (manually generated and uuencoded images, blech -
     have to get upstream to start making them themselves)  Also make my own
     icons, to avoid any licensing problems with latex2html, at least until it
     is released under the GPL in the next version.
   * Add support for new options:
     - clamd: ExitOnOOM, StreamMinPort, StreamMaxPort and LeaveTemporaryFiles
     - freshclam: AllowSupplementaryGroups
   * Please read NEWS.Debian for notes about clamav-milter!

 -- Stephen Gran <sgran@debian.org>  Thu, 27 Jan 2005 20:03:18 -0500

clamav (0.80-0.81rc1-1) unstable; urgency=medium

   * New upstream version
     - Fixes endless loop in VBA scan (closes: #288762)
     - Fixes parsing of certain invalid MIME boundaries (closes: #277531)
     - Fixes X-Virus_Scanned header (closes: #278300)
     - Fixes problem with hard links in GNU tar archives (closes: #283748)
     - ArchiveBlockMax now also applies to ArchiveMaxRecursion
       (closes: #290250)
   * urgency is medium due to fixing endless loop and ArchiveBlockMax bug -
     these should go into sarge soon, if possible
   * Upstream has removed the html documentation from this version, so there
     are no more broken links (closes: #284072)
   * Add logcheck files for freshclam (closes: #284732)
   * New translation:
     - fr.po (closes: #285562)
   * New subdirectories of /etc/clamav/ and notes in README for run-parts style
     scripts on update, error, and virusevent.  Allows packagers and admins to
     drop scripts in transparently, although feature is disabled by default.
     (closes: #288691)
   * Split out -docs package (closes: #290756)
   * This gives me a chance to rename libclamav1-dev to libclamav-dev, and
     totally reorganize packaging of redundant documentation (liberal usage of
     dh_link, IOW)
   * Properly escape hyphens in clamav-config manpage
   * Lowercase all first letters of short descriptions

 -- Stephen Gran <sgran@debian.org>  Fri, 21 Jan 2005 00:06:33 -0500

2004

clamav (0.80-7) unstable; urgency=low

   * Remove milter pid in postrm, in case it's not already gone (makes purge a
     little smoother)
   * Check for ucf file existence before copy in transition to clamd.conf
     (closes: #281867)

 -- Stephen Gran <sgran@debian.org>  Thu, 18 Nov 2004 18:26:24 -0500

clamav (0.80-6) unstable; urgency=low

   * Maintaining versioning even thoug -5 never got uploaded.  Thanks to all
     who run debs from p.d.o for extra testing of new init scripts.
   * Rewrite clamav init script to actually be portable - thanks to
     squid maintainers, from which I borrowed liberally.  Thanks especially
     to Elrond <elrond+bugs.debian.org@samba-tng.org> and Robert Schmidli
     <robert_s@emailme.net.au> for assistance in debugging and testing.
   * freshclam init script no longer produces spurious error message
     (closes: #281514)
   * Again with parser fixups (freshclam, clamd)
   * New translations:
     - da.po (Thanks Claus Hindsgaul <claus_h@image.dk>)
     - de.po (Thanks Erik Schanze <mail@erikschanze.de>)
     - es.po (Thanks Javi Castelo <javicastelo@ono.com>)

 -- Stephen Gran <sgran@debian.org>  Tue, 16 Nov 2004 18:29:39 -0500

clamav (0.80-5) unstable; urgency=low

   * Maintainer script review:
     - clamav-milter:
       instead of -R to start-stop-daemon, we find the right thread and signal
         that one, and loop until it dies.  Much better behavior here, at least.
         Note that this approach is a hack for 2.4 kernels.
       Also patch for $SOCKET upgrades, in case someone has set an alternate one
         from default.  Should work without intervention now.
     - clamav-daemon and clamav-milter:
       Trying to get away from the -R option to start-stop-daemon (which
         produces error message with the milter), we wait until the pid is
         actually gone. (closes: #278198)
     - clamav-daemon and clamav-freshclam
       parser for conf file (preseeding debconf and so forth) reworked a bit for
         better support of options that may have whitespace in them.
   * Remove milter dependency on sendmail, now that (finally) libmilter is
     packaged seperately
   * Add /etc/mail/m4/clamav-milter.m4 (thanks Elrond
     <elrond+bugs.debian.org@samba-tng.org> for patch)(closes: #280048)
     Please see /usr/share/doc/clamav-milter/README.Debian for usage
     instructions.
   * Only look for ^clamav (as opposed to ^clamav:) in /etc/aliases - postfix
     apparently doesn't use the colon.

 -- Stephen Gran <sgran@debian.org>  Sat, 13 Nov 2004 12:54:47 -0500

clamav (0.80-4) unstable; urgency=low

   * Add '|| true' to newaliases invocation in clamav-base (closes:#279724)
   * Updated translations:
     - it (thanks Cristian Rigamonti <cri@linux.it>)(closes: #279849)
     - ja (thanks Kenshi Muto <kmuto@debian.org>)

 -- Stephen Gran <sgran@debian.org>  Fri, 5 Nov 2004 08:54:41 -0500

clamav (0.80-3) unstable; urgency=medium

   * Fix libclamav1-dev dependencies (closes: #277843)
   * Don't enforce local: type socket on clamav-milter - this change should be
     transparent for anyone who hasn't touched the defaults, but will bite
     anyone who has.  Please make sure you review your
     /etc/default/clamav-milter if you have made any modifications.
     (closes: #277505)
   * dpkg-reconfigure works again (failed on StreamSavetoDisk - incomplete
     ripping out of deprecated option). (closes: #279129) (I think)
   * Updated translations:
     - fr (thanks Christian Perrier <bubulle@debian.org>)(closes: #279450)
     - pt_BR (thanks Andre Luis Lopes <andrelop@debian.org>)

 -- Stephen Gran <sgran@debian.org>  Wed, 3 Nov 2004 18:32:25 -0500

clamav (0.80-2) unstable; urgency=low

   * Change Build-Depends:
     - libcurl-dev to libcurl3-dev
     - add bc (for configure test)
   * Some missed updates for new config file name:
     - clamav-milter.README.Debian
     - clamav-base.postinst
     - clamav-freshclam.init
     - clamav-milter.init
     - README.Debian (clamav-base)
     - clamav-daemon.config
     - clamav-freshclam-ifupdown
   * Better ucf management of new clamd.conf on upgrade
   * Add /etc/cron.d/clamav-frechlam to ucf management (oops)
   * ucf -p freshclam.conf and cron.d/clamav-freshclam in postrm
   * Fix freshclam preconfigure warning (test with apt instead of dpkg, Steve)
     (closes: #277274)
   * Some code reorganization in postinsts for freshclam and daemon - mainly
     making functions of repetitive code blocks.
   * debian/control typo fixed (closes: #277215) (thanks Florian Zumbiehl
     <florz@gmx.de>)
   * Now that freshclam does a DNS lookup preferentially over HTTP lookups, the
     default number of checks has been raised to 24 - if you are upgrading,
     feel free to raise it from the old default of 12

 -- Stephen Gran <sgran@debian.org>  Tue, 19 Oct 2004 23:53:10 -0400

clamav (0.80-1) experimental; urgency=low

   * New upstream version (closes: #270265)
   * Many many changes and cleanups, but the biggies are:
     - Detects jpeg attacks (closes: #273889)
     - Clearer error messages (closes: #255954)
     - conf file for clamd{,scan} is now clamd.conf (Arrgh!)
     - Several new conf file directives, selected ones added by default.  ScanOLE
       is now added for new installs and this upgrade only (closes: #272809)
     - StreamSavetoDisk is now deprecated, and will cause clamd to not start if
       it is found in the (renamed) conf file.  Remove automatically on
       upgrade, hopefully.
     - New option for freshclam - DNSDatabaseInfo.  Will do database lookups
       via DNS TXT records, rather than using HTTP HEAD as before.
   * Add absolute path to note in NEWS (closes: #269430)
   * Fix freshclam's cron script not to fail after --remove (closes: #270789)
   * Add warning note about new socket location for upgrades from ancient
     versions.  Hopefully this will stop or slow the bug reports from people
     upgrading from versions where clam still ran as root. (closes: #265606)
   * Change units from Mb to MB in debconf question (closes: #269616)
   * Parser fix to handle extra whitespace in conf files during postinst/config
     (closes: #273805)
   * Add country names to mirror selection question for freshclam - all country
     codes and country names are from http://www.iana.org/cctld/cctld-whois.htm
     Any compaints about country names should be directed to IANA.
     (closes: #270436)
   * Preseed debconf with $http_proxy for freshclam proxy question
     (closes: #266436)
   * New translations:
     - de (thanks Erik Schanze <mail@erikschanze.de>)
     - es (thanks Javi Castelo <javicastelo@ono.com>)
     - fr (thanks Mohammed Adnene Trojette <adn@via.ecp.fr>) (closes: #274675)
     - it (thanks Cristian Rigamonti <cri@linux.it>)
     - ja (thanks Kenshi Muto <kmuto@debian.org>)
     - nl (thanks Tim Dijkstra <tim@famdijkstra.org>) (closes: #274356)

 -- Stephen Gran <sgran@debian.org>  Mon, 18 Oct 2004 19:48:21 -0400

clamav (0.75.1-4) unstable; urgency=medium

   * New da.po (thanks Claus Hindsgaul <claus_h@image.dk>)
     (closes: #268386)
   * Better formatting for fr.po (thanks Ludovic Rousseau
     <rousseau@debian.org>) (closes: #266433)

 -- Stephen Gran <sgran@debian.org>  Sat, 28 Aug 2004 14:39:07 -0400

clamav (0.75.1-3) unstable; urgency=low

   * Add lintian overrides for translations
   * A little more readability cleanup in maintainer scripts
   * Fix clamav-freshclam's postinst to generate a random number using perl,
     instead of relying on bashisms (closes: #263167)
   * Fix clamav-base's postinst for the case where clamav-daemon is not
     installed, so it properly deals with directory permissions even in the
     absence of clamav.conf (closes: #261636)
   * Fix the ifupdown scripts to handle more recent pppd run-parts invocations.
     mea culpa - I only have access to a woody machine that uses pppd.
     (closes: #265137)
   * Updated translations:
     - da (thanks Claus Hindsgaul <claus_h@image.dk>)
     - de (thanks Erik Schanze <mail@erikschanze.de>)
     - es (thanks Javi Castelo <javicastelo@ono.com>)
     - fr (thanks Christian Perrier <bubulle@debian.org>)
     - it (thanks Cristian Rigamonti <cri@linux.it>) (closes: #262704)
     - ja (thanks Kenshi Muto <kmuto@debian.org>)
     - nl (thanks Tim Dijkstra <newsuser@famdijkstra.org>)
     - pt_BR (thanks Andre Luis Lopes <andrelop@debian.org>)

 -- Stephen Gran <sgran@debian.org>  Sun, 15 Aug 2004 19:15:42 -0400

clamav (0.75.1-2) unstable; urgency=low

   * Fix quoting problem inpostinst when multiple group names entered
     (closes: #262433)

 -- Stephen Gran <sgran@debian.org>  Fri, 30 Jul 2004 21:03:30 -0400

clamav (0.75.1-1) unstable; urgency=low

   * New upstream release (closes: #261672)
     - Additional patch from Nicolas Boullis <nboullis@debian.org> to fix read
       from stdin when clamd listens on a unix socket. (closes: #260322)
     - Fixes segfault with LogSyslog on PPC (closes: #250320)
   * Remove duplicated NEWS/README from clamav (closes: #261813)
   * init script changes:
     - Add support for running clamd and clamav-milter under daemon to init
       scripts.  See clamav-base/README.Debian for details (closes: #250008)
     - Change test for milter's socket to use -e instead of -f (duh)
   * Some readability cleanup in maintainer scripts, and more code cleanup:
     - Add an if -d to clamav-base.postrm to get rid of some annoying but
       harmless error messages.
     - Add if -e before chmod call in clamav-freshclam postinst; the ppp
       scripts are technically conffiles, so if the local admin removes
       them manually, dpkg won't put them back, and postinst will blow up
       (closes: #258885)
   * Some additional (sigh) debconf questions:
     - Upstream is again changing their mirror network around.  New question
       about mirrors.
     - Question about adding clamav to extra groups.
       (closes: #250335, #250691, #255733, #256892)

 -- Stephen Gran <sgran@debian.org>  Thu, 29 Jul 2004 23:01:05 -0400

clamav (0.74-1) unstable; urgency=low

   * New upstream version
     - Additional patch from Tomasz Kojm <zolw@konarski.edu.pl> to fix hang on
       stdin with clamdscan
   * More cruft cleanup - this time in clamav-freshclam.postinst
   * debhelper build-depend tightening (closes: #259257)
   * Aadd a sleep to clamav-milter.init, so it restarts a little more
     gracefully (hopefully) (closes: #259161)
   * Add amavis reference to README (thanks Andrea Borgia <andrea@borgia.bo.it>)
   * New translations:
     - German (thanks Erik Schanze <mail@erikschanze.de>)
     - Spanish (thanks Javi Castelo <javicastelo@ono.com>)
     - Dutch (thanks  Tim Dijkstra <tim@famdijkstra.org>) (closes: #259272)

 -- Stephen Gran <sgran@debian.org>  Thu, 15 Jul 2004 22:33:53 -0400

clamav (0.73-2) unstable; urgency=low

   * Change dependency versioning for clamav-milter
   * Fix up overthought ucf call in clamav-base that ended up making ucf think
     manually managed conf file was unmodified and safe to overwrite.
     (closes: #255428)
   * Stop cleaning up after the daemons (clamd, freshclam, milter) in init
     scripts.  It seems they all (with the exception of the milter) do a decent
     job cleaning up after themselves now.  The milter leaves behind a pidfile,
     which is sloppy, but doesn't seem to harm anything.  This should fix the
     problems on upgrade. (closes: #255437, #255436)
   * Remove unnecessary depends/recommends from clamav-testfiles - these
     testfiles could be used for any A/V suite, and have nothing specific to
     do with clamav. (closes: #255370)

 -- Stephen Gran <sgran@debian.org>  Mon, 21 Jun 2004 22:26:45 -0400

clamav (0.73-1) unstable; urgency=low

   * New Upstream Version
     - adds pkgconfig and clamav-config to libclamav1-dev
     - Fixes some crash situations with OLE viruses, and some mbox code
       cleanup
   * Add --with-tcpwrappers to ./configure
   * Stop creating a logrotate file if logfile is under /dev (e.g.,
     stderr/stdout - multilog or other users)
   * Add clamav user to /etc/aliases (closes: #253960)
   * Add an ignore.d.server logcheck file for clamav-daemon (closes: #253255)
   * Remerge sample conf file changes - they also got lost on upgrade, somehow
   * Rework debconf templates with a lot of help from Christian Perrier
     <bubulle@debian.org> and Cristian Rigamonti <cri@linux.it>.  String
     freeze after this, hopefully.
     (closes: #253344)
   * New translations:
     - German (thanks Claus Hindsgaul <claus_h@image.dk>)
     - French (thanks Christian Perrier <bubulle@debian.org>)
       (closes: #253581)
     - Italian (thanks Cristian Rigamonti <cri@linux.it>)
       (closes: #254030)
     - Japanese (thanks Kenshi Muto <kmuto@debian.org>)
     - Brazillian (thanks André Luís Lopes <andrelop@debian.org>)
       (sorry if your name gets mangled here)

 -- Stephen Gran <sgran@debian.org>  Sat, 19 Jun 2004 11:42:41 -0400

clamav (0.72-1) unstable; urgency=low

   * New upstream release
     - Fixes read from STDIN oddity (closes: #250806)
   * Add debian/watch
   * Re-add an '|| true' to the rmdir calls in clamav-base's postrm.  They
     somehow got lost in the last upload.  (closes: #252955)
   * New Danish translation (thanks Claus Hindsgaul <claus_h@image.dk>)
     (closes: #252511)

 -- Stephen Gran <sgran@debian.org>  Sun, 6 Jun 2004 15:38:58 -0400

clamav (0.71-3) unstable; urgency=low

   * Forcibly remove pidfile in clamav-milter.init.  It seems clamav-milter has
     some problems cleaning up after itself.  Also use -R to keep trying until
     really dead.
   * Add debconf question about User setting for clamav.conf - will be
     displayed on upgrade if User directive is unset, otherwise not seen
     until dpkg-reconfigure
   * Add AllowSupplementaryGroups (closes: #250634) for new installs and
     upgrades from <= 0.70-2
   * New German translation (thanks Erik Schanze <mail@erikschanze.de>)
     (closes: #250947)

 -- Stephen Gran <sgran@debian.org>  Tue, 1 Jun 2004 19:52:38 -0400

clamav (0.71-2) unstable; urgency=low

   * Fix broken clamav-milter init script.  Reality apparently does not match
     the man page: -i is not a real option, although it is supposed to be the
     same as --pidfile.

 -- Stephen Gran <sgran@debian.org>  Sat, 22 May 2004 00:01:12 -0400

clamav (0.71-1) unstable; urgency=low

   * New upstream version
     - clamav-milter now uses --pidfile, so can fix init script to use -p
     - clamscan no longer follows symlinks on archive scanning
       (closes: #247574)
     - Can scan msexpand files (closes: #245240)
   * Change group for logfiles to adm.
   * Fix error in md5sum comparison in clamav-freshclam.config
     (closes: #247815)
   * clamd no longer runs as root - see NEWS.Debian for more information
     (closes: #248419)
   * Manually change pid file for clamav-daemon to /var/run/clamav/clamd.pid -
     no breakage should occur, and this will assist people with new change to
     running as unpriviledged user (closes: #238915)
   * Add contrib directory to clamav - this package is getting overloaded now,
     I think
   * Finally get around to including joey's clampipe (closes: #209087)
   * Forgot to close this earlier, but it has built just fine on woody for some
     time (closes: #236098)
   * Manually deal with permissions on /etc/network and /etc/ppp files in
     postinst - I still see some installs without -x bit set
   * Add multiple interface handling for freshclam and ifup/down method
     (closes: #239217, #245230)

 -- Stephen Gran <sgran@debian.org>  Thu, 20 May 2004 22:23:12 -0400

clamav (0.70-4) unstable; urgency=low

   * Fix clamav-milter.init thinko (closes: #246919)

 -- Stephen Gran <sgran@debian.org>  Sun, 2 May 2004 10:07:00 -0400

clamav (0.70-3) unstable; urgency=low

   * Some reworking of freshclam.config, to make sure that no user changes are
     lost on upgrade (same changes as to clamav-daemon, but for some reason I
     didn't port them over to freshclam)
   * Moved db_stop out of case . . . esac statement, to make sure the running
     debconf instance is never stopped before ucf is called (closes: #246611)

 -- Stephen Gran <sgran@debian.org>  Sat, 1 May 2004 13:15:03 -0400

clamav (0.70-2) unstable; urgency=medium

   * Urgency medium again - still trying to get this into testing
   * Fix typo in freshclam description (closes: #244654)
   * Updated init scripts to not uses --exec on stop, and also to use --retry in
     case signal handling issues aren't completely resolved
   * Add /etc/default/clamav-daemon for setting environment variables before
     starting clamd. (closes: #246313)
   * Do a slightly smarter job preserving user changes on upgrade
     (closes: #245379)
   * Updated translations:
     - French (thanks Christian Perrier <bubulle@debian.org>)(closes: #244045)
     - Danish (thanks Claus Hindsgaul <claus_h@image.dk>)(closes: #244445)
     - Japanese (Thanks Kenshi Muto <kmuto@debian.org>)(closes: #245431)

 -- Stephen Gran <sgran@debian.org>  Wed, 28 Apr 2004 13:14:00 -0400

clamav (0.70-1) unstable; urgency=medium

   * New Upstream release
   * Urgency medium due to impending change of sigtool and database format
     change - version in testing will not support change.
   * Try to handle rename of ArchiveDetectEncrypted to ArchiveBlockEncrypted
   * Unless previously set, LogFileMaxSize is now set to 0 (disabled) by
     default - it's handled by logrotate, so this shouldn't be an issue
   * Got a little smarter about registering the file with ucf on first run this
     time around

 -- Stephen Gran <sgran@debian.org>  Sat, 17 Apr 2004 19:38:26 -0400

clamav (0.69-0.70-rc-3) unstable; urgency=low

   * New French translation (thanks Christian Perrier <bubulle@debian.org>)
     (closes: #244045)

 -- Stephen Gran <sgran@debian.org>  Fri, 16 Apr 2004 09:01:12 -0400

clamav (0.69-0.70-rc-2) unstable; urgency=low

   * Remove mentions of dazuko from debian/control (closes: #243217)
   * Add dh_installchangelogs for all binary packages built from same source
   * Try to work around renaming of config file option ThreadTimeout to
     ReadTimeout.  sigh (closes: #243550)
   * New Danish translation (thanks Claus Hindsgaul <claus_h@image.dk>)
     (closes: #243562)

 -- Stephen Gran <sgran@debian.org>  Thu, 15 Apr 2004 13:16:01 -0400

clamav (0.69-0.70-rc-1) unstable; urgency=low

   * New Upstream Version
     - Fixes segfault on some RAR archives (closes: #238986, #240472)
     - New thread manager should eliminate most of the problems of clamd
       children dying (closes: #238916)
   * sgran:
   * Add /etc/ppp/ip-{down,up}.d scripts for ppp users of freshclam.
   * mirrors.txt debconf note has been changed to reflect what actually happens
     - mirrors.txt is removed if unchenged, and backed up otherwise
     (closes: #242657)
   * clamav-base postinst no longer does permissions check if default setup is
     being used - let's not try to be too smart here (closes: #237146)
   * Work begun to ease backporting to stable.  postinst now does some checks
     to see what version of ucf is available, because debconf-ok is not
     available in the version in stable.  Still have to manually deal with it
     in debian/control, but it's improving.
   * This version builds against gcc 2.95 again, removing the Build-Dependency
     on gcc (>=3.0).  Have to rethink how to do that so that it works a little
     better in the future anyway.  (closes: #236769)
   * Add a 'head -n1' to the config file parser.  This prevents people from
     having multiple lines with the same option, but that would be a broken
     config file anyway.
   * Manually set x bit on /etc/network/if-{up,down}.d scripts, as it seems the
     handling has been inconsistent.  I see the bit set correctly, but there
     have been reports otherwise.  Consistency is better, even if it feels
     kludgy.
   * Use delaycompress in logrotate files, so we don't have any open file
     descriptors trying to write to a now gzipped file.
   * New version has TCPWrappers support, add Build-Depends on libwrap0-dev
   * Fix up NEWS.Debian so that the real default socket is actually described.
     (closes: #238917)
   * Add note to NEWS.Debian about permissions on directories needed by clamav
     - permission problems will be corrected, but only if the default setup is
     being used.
   * New translations:
     - Dutch (thanks Tim Dijkstra <tim@famdijkstra.org>) (closes: #239330)
     - Japanese (thanks Kenshi Muto <kmuto@debian.org>) (closes: #237783)

 -- Stephen Gran <sgran@debian.org>  Sun, 11 Apr 2004 15:51:47 -0400

clamav (0.67-7) unstable; urgency=low

   * sgran:
   * Updated French translation (thanks Christian Perrier <bubulle@debian.org>)
     (closes: #235742)
   * Clean up clamav-freshclam package description
   * Now adds old mirrors.txt contents into freshclam.conf but has them
     commented out to begin with.  The default is to only use the round robin
     mirror address, so this is probably best - I just don't want to throw away
     old configuration settings. (closes: #236180)  Also fix quoting problem on
     inserting them into file.
   * Fix versioned depends on ucf - should have been 0.28, not 0.30
   * Fix stupid thinko in /etc/logrotate.d script (create should be earlier)
     (closes: #236603)
   * tlamy:
   * Used some CVS code:
     - qmail bounces get scanned if ScanMail is enabled
     - clamav-milter looks if clamd is available at start
     - Some bounce messages weren't properly recognized as mails, so they
       weren't scanned
     - New config option for clamav.conf ArchiveDetectEncrypted added to
       postinst.  Man page fixup for this new option for clamav.conf and
       clamscan.
   * Removed preliminary code for bounce scanning (closes: #235792, #235992)
   * Added preliminary code to prevent #235792, #235992 in the future

 -- Stephen Gran <sgran@debian.org>  Sun, 7 Mar 2004 19:36:04 +0100

clamav (0.67-6) unstable; urgency=low

   * Add line break in clamav-milter.8 (closes: #235452) * Add a longer
     sleep, and an earlier socket removal, to clamav-milter.init.
     Hopefully this will help it restart more cleanly (closes: #235463)
   * Fix my totally stupid lack of error checking in clamav-base.postinst,
     so that it actually works as intended in the permissions checking section
     (closes: #235624)
   * Better logic for clamav-freshclam.postinst, and if-up.d scripts.
     - postinst doesn't place rc*/ links unless set to run as daemon, and will
       remove if reconfigured to run as something else.
     - postinst creates /var/lib/clamav/interface if configured to run from
       ifup.d, and removes it if not.
     - if/up.d scripts just exit if /var/lib/clamav/interface doesn't exist,
       instead of complaining unnecessarily
       (closes: #235561)
   * Some more general cleanup in clamav-freshclam.postinst - better grouping
     of sections, better comments, better output to stdout
   * ifup scripts are not called with an argument, so if [ -n "$1" ] has been
     corrected to [ -z "$1" ]
   * Now ship cvd's in /usr/share/doc/clamav-freshclam/examples, and only cp
     them into DataDirectory if they don't exist after trying to run freshclam
     once.  These files are really dynamic data, and should not be under package
     management.  The downside of not doing this hackish system is if the the
     user is installing from cd or something, everything else in the clam*
     packages breaks without something there.  This will hopefully protect the
     user who wants to run freshclam once a week from his dialup, while still
     keeping these files out of dpkg's control.  Also move the removal of these
     files from purge to remove, so that a normal apt-get install clamav-data
     will remove the files, before installing the new package. (closes: #234928)
   * Also mention more prominently that freshclam needs an internet connection,
     and that people who intend to not have one should instead opt for
     clamav-data (although how they're going to get updated versions of that is
     left as an exercise for the end user)
   * Some more packaging cleanup:
     clamav:
     - Don't gzip html, css, png or pdf files
     clamav-daemon:
     - Don't gzip sample conffile
     clamav-testfiles:
     - get rid of redundant extra mbox code checker in /usr/share

 -- Stephen Gran <sgran@debian.org>  Mon, 1 Mar 2004 23:48:34 -0500

clamav (0.67-5) unstable; urgency=low

   * Fix stupid typo in if-up/down script (closes: #235313)
   * Make freshclam more error tolerant - thanks Luca 'NERvOus' Gibelli
     <nervous@nervous.it> for patch for reading config file
   * New Danish translation, thanks to Claus Hindsgaul <claus_h@image.dk>
     (closes: #235337)
   * Put in some rough checking that permissions are set properly for clamd to
     run in clamav-base.postinst - probably will cause more false alarms than
     good, but it is a step in the right direction.  Thanks Josip Rodin
     <joy@srce.hr> for coming up with the idea
   * Run autoreconf in source dir, hopefully fixing FTBFS on mips
   * Remove call to autoreconf -v from debian/rules (why did anyone want that
     there, and how did I miss it for so long?)
   * Also rmdir /var/lib/clamav on purge (if dpkg doesn't)

 -- Stephen Gran <sgran@debian.org>  Sat, 28 Feb 2004 21:42:47 -0500

clamav (0.67-4) unstable; urgency=low

   * sgran:
   * Added versioned Build-Depend on gcc, since the build blows up with 2.95,
     adding a little work for backporting
   * Make logrotate scripts use reload, since Thomas got clamd and freshclam to
     accept a HUP signal and reopen their respective logfiles. Will hopefully
     make both more stable, as we're not trying to kill and restart them every
     week
   * Properly check if freshclam is being run from cron or manual before putting
     a 'Checks' line into the config file (Checks will be an empty field if it's
     being run from cron or manually, and this breaks the config file)
     (closes: #235276, #235289)
   * Only chown logdir, datadir, and rundir on fresh install (closes: #235193)
   * Stop relying on debhelper for starting and stoping of freshclam - now it
     really won't get started on install/upgrade. (closes: #235292)
   * tlamy:
   * Patch up freshclam/notify.c error messages produced during attempt to
     notify clamd.  Error messages are now more helpful about what went wrong
     when attempting to notify clamd about updates, if NotifyClamd is set in
     freshclam.conf (closes: #234916, #234922)
   * Better option parsing in freschlam/options.c
   * Better signal handling in freshclam/freshclam.c

 -- Stephen Gran <sgran@debian.org>  Sat, 28 Feb 2004 10:22:39 -0500

clamav (0.67-3) unstable; urgency=low

   * The "Let's Clean This Thing Up" release
   * sgran:
   * clamav-freshclam:
     - Fixup for clamav-freshclam init script - better parsing of options
       allowing for spaces in OnUpdate commands. (closes: #214279)
     - Better error reporting in clamav-freshclam init script
     - All of the debconf questions have been rewritten, thanks to suggestions
       from the many helpful translators who have worked on this package.  They
       now follow the guidelines at http://people.debian.org/~bubulle/dtsg.txt
       (closes: #233241, #233525)
     - Rework clamav-freshclam config, postinst, and templates.  Should avoid
       asking unnecessary questions about conffiles after this upgrade
       (closes: #233610).
     - Move Interface option out of freshclam.conf and into seperate file, so
       freshclam doesn't have parse errors (closes: #234919)
     - postinst generated config file should now finally add back in any
       options the local admin has put in the config file that are not part of
       the debconf questions.
     - update ucf dependency, so that it has --debconf-ok
   * clamav-daemon:
     - Fix up some spacing issues in debconf templates
     - Also some minor changes in debconf question type - mostly changing of
       unnecessary 'select' to 'boolean' to make life easier for translators
       (closes: #233862)
     - Got rid of all the 'question #foo of 28 ...'
     - Similar debconf style cleanup as freshclam, above.
     - Rework clamav-daemon config, postinst, and templates.
     - postinst generated config file should now finally add back in any
       options the local admin has put in the config file that are not part of
       the debconf questions.  Should also respect previous config file
       options, and will preseed the debconf interaction with the choice found
       in the config file.
     - update ucf dependency, so that it has --debconf-ok
     - generate cron.d with user option correvtly (closes: #234458)
   * clamav:
     - Add in some more documentation to the clamav package - provided by
       upstream but previously left out of the package itself.
   * Source package:
     - Fix NEWS.Debian so apt-listchanges will display it (closes: #233795)
     - Find and add back in the French po file (closes: #232010)
     - Add new Danish translation (thanks Claus Hindsgaul <claus_h@image.dk>)
     - New Japanese translation (thanks Kenshi Muto <kmuto@debian.org>)
     - New French translation (thanks Christian Perrier <bubulle@debian.org>)
     - Fix clamscan's manpage to refer to the new-style databases
       (closes: #234927)
   * tlamy:
   * freshclam:
     - freshclam -d now writes it's pid file if configured in freshclam.conf
       (closes: #232206) and also re-opens it's log file on SIGHUP
   * clamd:
     - Handle bounces better by both scanning for bounce delimiters and multipart
       delimiters (closes: #232244)
     - handles SIGHUP by reopening it's log file, allowing more graceful
       reloads after logrotate.
   *

 -- Stephen Gran <sgran@debian.org>  Fri, 27 Feb 2004 00:55:12 -0500

clamav (0.67-2) unstable; urgency=low

   * Correct debian/rules thinko - Correct ordering of build targets now.

 -- Stephen Gran <sgran@debian.org>  Mon, 16 Feb 2004 19:42:09 -0500

clamav (0.67-1) unstable; urgency=low

   * New Upstream Release (closes: #232904)
   * Use orig.tar.gz (groan)(closes: #231963)
   * Add NEWS.Debian telling people about changed default run/ directory - now
     /var/run/clamav.  This should not actually change the conffile, but only
     affect new installs, but it seems that it has bitten at least on person.
     (closes: #231962)
   * Finally find and fix the broken acinclude.m4 that was causing libtool to
     link incorrectly on mips* (closes: #231970)
   * Added MaxAttempts to default freshclam.conf, so that it will try up to 5
     times if the first mirror is broken. (closes: #232221)
   * Add in the po files submitted via the BTS.  Note that they will need to be
     retranslated for the changed string sets.
     (closes: #211902, #218900, #227368, #230337, #232010)
   * Remove trailing space in freshclam init script output (closes: #232468)
   * Remove old symlink for handledaemon, left over from 0.60 (closes: #232440)
   * Freshclam now has the ability to execute a command on update, or on error.
     (closes: #214279)
   * Remove var/lib/clamav/clamav-freshclam.debconf on purge (closes: #212653)
   * Explicitly remove ucf generated files, in case ucf -p fails
     (closes: #212661)
   * Updated ja.po (thanks Kenshi Muto <kmuto@debian.org>)
   * Updated es.po (thanks Javi Castelo <javicastelo@ono.com>)
   * Correct Depends for libclamav1-dev (closes: #232961)

 -- Stephen Gran <sgran@debian.org>  Mon, 16 Feb 2004 14:03:25 -0500

clamav (0.65-3) unstable; urgency=low

   * Give clamav-milter priority: extra, as it depends on sendmail.
   * Fix dependencies on libclamav1 (closes:#231785, #231930)
   * Fix endianness problem breaking md5sum verification for freshclam
     (closes: #23186, #231772, #231778)
   * Build-Depend on correct version of autoconf (closes: #231931)
   * cut-n-paste error fixed in clamav-milter.init (closes: #231878)

 -- Stephen Gran <sgran@debian.org>  Mon, 9 Feb 2004 14:08:09 -0500

clamav (0.65-2) unstable; urgency=low

   * Run autoreconf in source directory - Hopefully fix FTBFS on several
     arches.  Also B-D on automake/conf as fallback.

 -- Stephen Gran <sgran@debian.org>  Sat, 7 Feb 2004 19:03:52 -0500

clamav (0.65-1) unstable; urgency=low

   * New Upstream Version (closes: #220792)
     - max-recursion level problem fixed (closes: #215306)
     - Support for digitally signed databases (closes: #165246)
     - Better stale socket detection and removal (closes: #207922)
     - Better zip file handling (closes: #219073, #223923)
     - Fixes format string vulnerability (closes: #221854)
     - Should no longer hang (closes: #222327, #213598)
     - Should no longer dump core (closes: #225356)
     - Can run as non-root user, although will have to be explicitly configured
       to do so (closes: #200525)
     - Handles RAR archives better, now uses internal rar unpacker.  RAR
       code disabled by default. (closes: #223022)
     - Handles maildirs now (closes: #209084)
     - clamav-milter debug option (-x) now apparently does something, according
       to sources. (closes: #217155)
   tlamy:
   * Updated clamav to CVS 20040119
   * Applied upstream mbox.c fixes as of CVS 20040124
   * Updated documentation
   * Added Config-Option "Interface" to get rid of freshclam-handle-daemon.conf
   * freshclam-handle-daemon is split up into /etc/init.d/clamav-freshclam and
     if-up/down.d scripts
   * manpage for new freshclam.conf
   * debconf support for new options in freshclam.conf
   * fix SEGV on incomplete Content-type specifications (like in "text/")
     (forwarded upstream)
   * fix possible infinite loop in BinHex decoding, causing DoS
     (forwarded upstream)
   * use autoheader and "clamav-config.h" for build defines (forwarded
     upstream)
   sgran:
   * Make clamav-freshclam-handledaemon a properly named init script and not a
     symlink(closes: #212648)
   * clamav-freshclam logrotate output sent to /dev/null
     (closes: #222565, #230658)
   * Fixed clamav-freshclam.postinst error (closes: #223018, #212052)
   * Removed extra call to dh_install (closes: #217746)
   * Added clamav-milter init script (closes: #204340)
   * Fix up clamav-daemon init script.
     - Checks for and removes pidfile and socket on restart, and sleeps to give
       clam a chance to restart gracefully (closes: #214278, #219801)
   * Cosmetic fix for clamav-freshclam init script (closes: #222740)
   * Added /var/run/clamav for all pid and socket files (closes: #219182)
   * freshclam init.d script now checks if if-up.d method is being used, and
     exits if network is down (closes: #214608)

 -- Stephen Gran <sgran@debian.org>  Sat, 7 Feb 2004 13:29:57 -0500

2003

clamav (0.60-10) unstable; urgency=high

   * Updated libclamav to CVS 20030916
   * Fixes at least some mbox problems (closes:Bug#211442)
   * Updated french translation patch from Christian Perrier
   * README.Debian
      Clarified how debconf handles mixing dpkg-reconfigure and
        manual editing (closes:Bug#210908)
      Warnings about unstable mbox code in (also in debconf
        templates and manpages)

 -- Magnus Ekdahl <magnus@debian.org>  Sat, 20 Sep 2003 00:31:38 +0200

clamav (0.60-9) unstable; urgency=high

   * Updated libclamav fixes to CVS 20030905 (closes:Bug#208822)
     (closes:Bug#206562)
   * Reformulated template to avoid illegal template field (closes:Bug#208656)
   * Patch from Adam D. Barratt Fixing another incorrect reference
     (closes:Bug#208667)
   * Cleaned templates from debconf frontend-dependent text (closes:Bug#209026)
   * Added warning for the fact that freshclam doesn't check the gpg
     signature on the database. (closes:Bug#209027)
   * Made clamav-freshclam-handledaemon mimic init scripts when needed
     and updated manpage (closes:Bug#208818)
   * Added logrotate ability to clamav-freshclam and clamav-daemon
     (closes:Bug#208819)
      Logrotate deprecates the LogFileMaxSize debconf handling
   * New libclamav1 description (closes:Bug#210100)
   * Purging more files (hopefully all now)
   * Made clamav-daemon autoconfigured during install (Idea by Tore
     Anderson)

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 11 Sep 2003 11:25:43 +0200

clamav (0.60-8) unstable; urgency=medium

   * Patch from Adam D. Barratt Fixing incorrect references
     (closes:Bug#208517) (closes:Bug#208519) (closes:Bug#208520)
   * Corrected a souring bug in clamav-freshclam-handledaemon

 -- Magnus Ekdahl <magnus@debian.org>  Wed, 3 Sep 2003 13:10:57 +0200

clamav (0.60-7) unstable; urgency=medium

   * Based on 0.60+bugfixes in 20030829 snapshot
     Holding back mbox fixes for this package (introducing new bugs)
   * Patch from Jerome BENOIT: handling running freshclam as daemon
     (closes:Bug#206706) (closes:Bug#198652)
   * Patch from Christian Perrier
      support for different languages in packaging text (closes:Bug#205820)
      french translation (closes:Bug#206773)
      updated Brazilian translation (closes:Bug#187777)
      fixed wrong default in clamav-daemon.templates (closes:Bug#206706)
   * Implemented Colin Watson's backport friendly translation extensions
   * Fixed careless handling of configure files that can be removed by
     user (closes:Bug#205426)
   * Improved the default /etc/clamav.conf for the case when user doesn't
     configure using debconf
   * Added even more docs to the templates, to avoid pink finger injuries
     (for more info see bug 206373)
   * Added debconf proxy support to clamav-freshclam (closes:Bug#205124)
   * Wrote manpages for new files

 -- Magnus Ekdahl <magnus@debian.org>  Mon, 1 Sep 2003 19:21:35 +0200

clamav (0.60-6) unstable; urgency=high

   * Patches from Tomasz Papszun
   *  Fixing a mbox problem
   *  Spelling in changelog

 -- Magnus Ekdahl <magnus@debian.org>  Tue, 12 Aug 2003 09:58:19 +0200

clamav (0.60-5) unstable; urgency=medium

   * Based on 0.60+bugfixes in 20030806 snapshot
   * Patch from Jean Charles Delepine depending on the correct version of
     ucf (closes:Bug#202417) (closes:Bug#203444)
   * Brought configuration management up to debian standards
      Corrected a significant number of debconf priorities
       (closes:Bug#197264)
      Added SelfCheck question
      Updated documentation
   * Patch from Timshel Knoll fixing bashism in init file

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 7 Aug 2003 20:52:55 +0200

clamav (0.60-4) unstable; urgency=high

   * Based on 0.60+bugfixes in 20030720 snapshot
   * Patch by Jonas Smedegaard realizing bashism in initfile + adding
     correct options to start-stop-daemon (closes:Bug#202175)
   * Patch from Chris Butler unconfusing upgrading notes (closes:Bug#202266)

 -- Magnus Ekdahl <magnus@debian.org>  Mon, 21 Jul 2003 18:34:10 +0200

clamav (0.60-3) unstable; urgency=high

   * Based on 20030719 snapshot. However new code (not fixing bugs) in freshclam
     removed. Fixes many problems including (closes: Bug#201812).
   * Corrected permissions on LogFile (closes: Bug#200527)
   * Removed --notify-daemon option from cron-script
     (closes:Bug#198758)
   * Implemented ucf purging
   * Included most of the upstream clamav description in package description
     for clamav-base
   * Make sure that daemon not tries to start if /etc/clamav.conf contain
     Example
   * PidFile bug in initscript fixed

 -- Magnus Ekdahl <magnus@debian.org>  Sun, 20 Jul 2003 10:22:55 +0200

clamav (0.60-2) unstable; urgency=high

   * Corrected permissions on PidFile (closes: Bug#200527)
   * Patch from Tomasz Papszun making freshclam run as clamav from cron
     (closes: Bug#200508)
   * Debconf now respects manual clamav.conf changes
   * Improved pidfile handling in init script (problem found by Daniel E.
     Atencio Psille)
   * Downgraded dazuko-source dependency to a suggestion (closes:Bug#199823)
   * Spelling (closes Bug#199987)

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 10 Jul 2003 00:35:44 +0200

clamav (0.60-1) unstable; urgency=high

   * New upstream release (closes:Bug#198366)
      Includes bzip2 support (closes:Bug#171665)
      Includes syslog support (closes:Bug#190699)
      Fixes CONTSCAN command in daemon (closes:Bug#194696)
      0.61-1 contains no source differences compared to upstream release
   * Updated docs
   * New package: clamav-milter
   * Updated copyright statement
   * Lowered debhelper dependency to >=4 (reported by Jefferson Cowart)
   * Started usability upgrade of debconf scripts
      Included configuration handling for new daemon options
      Implemented backing functionality
      Replacing defaults with defaults conditioned on answer to previous
        questions. The expected number of questions has been lowered.

 -- Magnus Ekdahl <magnus@debian.org>  Mon, 23 Jun 2003 00:05:36 +0200

clamav (0.54-11) unstable; urgency=high

   * patch from Brian May fixing typo in debian/rules
     (closes: Bug#193373)
   * clamav-freshclam depends on cron (closes:Bug#196902)
   * --daemon-notify added to cron script (closes:Bug#194013)
   * important updates from development snapshot
     newest freshclam with mirror support (closes:Bug#185043)
     zzlib security fix

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 12 Jun 2003 22:42:04 +0200

clamav (0.54-10) unstable; urgency=low

   * Splitting patch from Marc Haber, (closes:Bug#190176), new packages:
     clamav-base
     clamav-freshclam
   * replaced zoo with unzoo (closes: Bug#187927)
   * Changed section of development library
   * added watch file
   * downgrading debconf dependency, allowing stable backports
   * cleaned docs

 -- Magnus Ekdahl <magnus@debian.org>  Wed, 7 May 2003 20:19:26 +0200

clamav (0.54-9) unstable; urgency=low

   * corrected UNIX socket permissions (closes:Bug#191286)

 -- Magnus Ekdahl <magnus@debian.org>  Tue, 6 May 2003 20:41:15 +0200

clamav (0.54-8) unstable; urgency=high

   * pulled enough *printf and daemonize() changes from upstream snapshot to
     avoid printing to closed stderr (closes:Bug#190143)
   * delayed writing to pidfile until after fork (daemon).

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 24 Apr 2003 20:27:45 +0200

clamav (0.54-7) unstable; urgency=low

   * fixed binary-indep/arch build rules (closes: Bug#186616)

 -- Magnus Ekdahl <magnus@debian.org>  Sat, 29 Mar 2003 16:28:19 +0100

clamav (0.54-6) unstable; urgency=low

   * changed arch any->all for clamav-testfiles (closes: Bug#184733)
   * added (deprecated) unarj option to keep qmail compability
     (closes: Bug#184840)

 -- Magnus Ekdahl <magnus@debian.org>  Sun, 16 Mar 2003 17:26:31 +0100

clamav (0.54-5) unstable; urgency=high

   * fixed permission on /var/lib/clamav (closes: Bug#184433)
   * included security fix posted on clamav-users mailing list

 -- Magnus Ekdahl <magnus@debian.org>  Wed, 12 Mar 2003 22:07:04 +0100

clamav (0.54-4) unstable; urgency=low

   * added documentation concerning the database location (closes: Bug#183821)

 -- Magnus Ekdahl <magnus@debian.org>  Sat, 8 Mar 2003 10:46:07 +0100

clamav (0.54-3) unstable; urgency=low

   * updated virus database, including removal of bad Chemnitz signature
     (closes: Bug#181500)
   * replaced unarj with arj (closes: Bug#182283)
   * moved database to /usr. Soft links remain under /var (closes: Bug:#181204)

 -- Magnus Ekdahl <magnus@debian.org>  Mon, 3 Mar 2003 20:16:22 +0100

clamav (0.54-2) unstable; urgency=low

   * replaced close with dup2 in conjunction with -i option (closes:
     Bug#173376)
   * fixed missing build dependency (closes: Bug#170113)
   * updated virus database

 -- Magnus Ekdahl <magnus@debian.org>  Fri, 24 Jan 2003 17:25:24 +0100

2002

clamav (0.54-1) unstable; urgency=low

   * new upstream version

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 21 Nov 2002 20:08:18 +0100

clamav (0.53-1) unstable; urgency=low

   * new upstream version
   * added default localsocket (closes: Bug:#168302)

 -- Magnus Ekdahl <magnus@debian.org>  Sat, 9 Nov 2002 21:18:14 +0100

clamav (0.51-2) unstable; urgency=low

   * patch from Martin Lesser <admin-debian@bettercom.de>
   *   correct http-proxy code (closes: Bug#165141)
   * clamav-daemon. postinst and configure now traps db_* error codes
     using || true, which makes dpkg-preconfigure & co work (closes: Bug#165121)
   * rewrote the pidfile patch so its less intrusive
   * the daemon won't try to run as clamav until the FHS issues are resolved

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 17 Oct 2002 20:01:57 +0200

clamav (0.51-1) unstable; urgency=low

   * new upstream version (closes: Bug#163406) (closes: Bug#155485)
   * patch from Marc Haber (closes: Bug#161916)
   *   properly clean up latex files during debian/rules clean
   *   make clamav build correctly with cvs-buildpackage
   * new build system/rules file
   * splitted package, new packages: libclamav1, libclamav1-dev, clamd
   * removed oav-support since upstream doesn't support it anymore
   * trashscan isn't even included in upstream anymore (closes: Bug#161202)
   * updated and splitted documentation
   * added clamd templates/config
   * clamd is a system command (clamd.1 -> clamd.8, /usr/bin -> /usr/sbin)
   * removed troublesome hardlink in docs/html/
   * updated docs again after upstream release 0.51
   * Made the daemon write pidfile to /var/run before releasing root rights
   * patch from Ola Lundqvist <opal@debian.org> (closes: Bug#164290)
   *   option --system to addgroup + delete the group in postrm
   * close fd 3 in clamd
   * made clamd more understanding for extra whitespaces in clamav.conf
   * clamav-daemon.config now prompts users for a correct value when they
     enter non-numerical values for numerical questions

 -- Magnus Ekdahl <magnus@debian.org>  Sat, 12 Oct 2002 16:15:50 +0200

clamav (0.24-3) unstable; urgency=low

   * added modified freshclam that should play nicely with oav-update.
   * added trashscan explanation in README.Debian

 -- Magnus Ekdahl <magnus@debian.org>  Tue, 17 Sep 2002 20:35:00 +0200

clamav (0.24-2) unstable; urgency=low

   * added support for custom database directories (by request from Marc
     Haber) after discussing integration with upstream (Tomasz)

 -- Magnus Ekdahl <magnus@debian.org>  Wed, 28 Aug 2002 15:12:23 +0200

clamav (0.24-1) unstable; urgency=low

   * new upstream version 0.24

 -- Magnus Ekdahl <magnus@debian.org>  Fri, 23 Aug 2002 15:52:24 +0200

clamav (0.23-4) unstable; urgency=low

   * added missing Buildepend on tetex-extra (closes: Bug#156367)

 -- Magnus Ekdahl <magnus@debian.org>  Mon, 12 Aug 2002 11:12:34 +0200

clamav (0.23-3) unstable; urgency=low

   * clamscan doesn't work with unrar v2.71, added versioned dependency
     (closes: Bug#156059)
   * fixed error in control description (bz2 isn't supported for now)

 -- Magnus Ekdahl <magnus@debian.org>  Fri, 9 Aug 2002 16:31:21 +0200

clamav (0.23-2) unstable; urgency=low

   * added .gz support
   * added bunzip2 support
   * fixed linewrapping in description (closes: Bug#155507)
   * Upstream are reworking the archive support part. Removed .gz/.bz2
     support, if you're really in a hurry the patch is available in the
     source as debian/GzBz2Support.diff. Upstream version will be fixed in 0.30.
   * fixed Builddepends (closes: Bug#155722)

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 8 Aug 2002 09:58:45 +0200

clamav (0.23-1) unstable; urgency=low

   * now has upstreams names of debian docs
   * fixed lintian warning (Matthew Grant)
   * cleaned up debian/ (Matthew Grant)
   * new upstream version 0.23

 -- Magnus Ekdahl <magnus@debian.org>  Tue, 30 Jul 2002 11:06:23 +0200

clamav (0.22-1) unstable; urgency=low

   * added debconf template handling old freshclam cron entries (closes: Bug#154117)
   * added support for debian package scanning.
   * removed/replaced more generic docs with debian specific versions (closes: Bug#153789)
   * added sigtool
   * new upstream version 0.22

 -- Magnus Ekdahl <magnus@debian.org>  Wed, 24 Jul 2002 10:50:19 +0200

clamav (0.20-2) unstable; urgency=low

   * new upstream version 0.20

 -- Magnus Ekdahl <magnus@debian.org>  Mon, 15 Jul 2002 11:25:44 +0200

clamav (0.15-2) unstable; urgency=low

   * accepted changes from Matthew Grant (thank you Matthew).
   * Removed freshclam specific parts from description.
   * Removed Suggest/ Recommend on essential packages (Policy 2.3.4).
   * converted non-essential commands from postrm to essential (Policy 7.2).
   * fixed CPU autodetection (closes: Bug#149552)
   * added missing depends,recommends and suggestions (closes: Bug#151421)
   * Removed unneccesary docs (closes: Bug#151420)
   * Added extra check on detectCPU after mail from Tomasz (upstream).

 -- Magnus Ekdahl <magnus@debian.org>  Sun, 30 Jun 2002 16:36:15 +0200

clamav (0.15-1.mag.3) unstable; urgency=low

   * Added missing Recommends and Suggests fields to control file.

 -- Matthew Grant <grantma@anathoth.gen.nz>  Mon, 24 Jun 2002 23:17:45 +1200

clamav (0.15-1.mag.2) unstable; urgency=low

   * Removed cruft from package diff by going back to original tarball.
     Checked files that had been changed with "zcat *.diff.gz | fgrep '+++' ".
     None found apart from unneeded business in clamscan/Makefile.am and
     freshclam/Makefile.am and running automake to change where viruses.db
     lives.  This is now set up by defining pkgdatadir when making clamscan
     in debian/rules.

 -- Matthew Grant <grantma@anathoth.gen.nz>  Mon, 24 Jun 2002 22:28:52 +1200

clamav (0.15-1.mag.1) unstable; urgency=low

   * Removed freshclam and associated files, and cron support
   * Changed viruses.db path to /var/lib/oav-virussignatures/viruses.db
   * Cleaned up debian directory - there was a lot of unnecessary cruft -
     extra dir files etc.
   * Moved DMS documentation copying from rules into docs file
   * Added missing prerm script for debhelper documentation symlink removal
     as given in manpage for dh_installdocs
   * Removed preinst script as user is preferred to be added in postinst
     as per Policy Manual Section 11.9
   * Replaced most of the maintainer scripts as they tended to ignore all
     arguments
   * Made deluser happen on purge and not remove in postrm as in gdm and pidentd
     packages. Of course first tested for existence in passwd and group files.
     This is OK as by default no data is left behind when the package is
     purged (consider when you purge a Web server - you want the pages probably).
   * Fixed addition of clamav user so that in 'postinst configure' it tests
     before adding the user, and take care that all the /etc/passwd fields
     are set securely.
   * Made postinst script re-add clamav group just in case it is removed.
   * Removed dependency on cron.
   * Added dependency on oav-virussignatures pseudo-package.

 -- Matthew Grant <grantma@anathoth.gen.nz>  Mon, 24 Jun 2002 13:46:52 +1200

clamav (0.15-1) unstable; urgency=low

   * adapted to upstream version 0.15 (closes: Bug#149957)

 -- Magnus Ekdahl <magnus@debian.org>  Fri, 14 Jun 2002 14:41:40 +0200

clamav (0.14-2) unstable; urgency=low

   * Fixed confusing output from postinst script (closes: Bug#149552)

 -- Magnus Ekdahl <magnus@debian.org>  Mon, 10 Jun 2002 21:01:50 +0200

clamav (0.14-1) unstable; urgency=low

   * adapted to upstreams clamav v 0.14
   * made cron script use the clamav user

 -- Magnus Ekdahl <magnus@debian.org>  Fri, 31 May 2002 19:59:53 +0200

clamav (0.13-3) unstable; urgency=low

   * fixed wrong path references caused by previous fix (closes: Bug#148427)

 -- Magnus Ekdahl <magnus@debian.org>  Wed, 29 May 2002 10:43:01 +0200

clamav (0.13-2) unstable; urgency=low

   * moved the virus database to /var/lib/clamav (closes: Bug#148367)

 -- Magnus Ekdahl <magnus@debian.org>  Tue, 28 May 2002 15:36:46 +0200

clamav (0.13-1) unstable; urgency=low

   * Adapted debian package to new upstream version

 -- Magnus Ekdahl <magnus@debian.org>  Sat, 25 May 2002 18:45:07 +0200

clamav (0.12-1) unstable; urgency=low

   * fixed permissions on log file

 -- Magnus Ekdahl <magnus@debian.org>  Wed, 22 May 2002 21:32:23 +0200

clamav (0.11-1) unstable; urgency=low

   * Initial Release. Closes: #146283

 -- Magnus Ekdahl <magnus@debian.org>  Thu, 9 May 2002 11:06:00 +0200