[From nobody Sat Sep 12 14:51:07 2026
Received: (at submit) by bugs.debian.org; 10 Sep 2026 08:05:52 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-18.7 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,
 DKIM_VALID_EF,FREEMAIL_FROM,HAS_PACKAGE,MONEY,RCVD_IN_DNSWL_NONE,
 SPF_HELO_NONE,SPF_PASS,XMAILER_REPORTBUG autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 39; hammy, 147; neutral, 20; spammy,
 1. spammytokens:0.987-1--H*r:55281 hammytokens:0.000-+--python3,
 0.000-+--H*Ad:N*Bug, 0.000-+--HTo:N*Debian, 0.000-+--forky,
 0.000-+--HTo:N*System
Return-path: <alexandre.detiste@gmail.com>
Received: from mail-ej1-x629.google.com ([2a00:1450:4864:20::629]:56722)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128)
 (Exim 4.96) (envelope-from <alexandre.detiste@gmail.com>)
 id 1x4Zn6-0024p3-2S for submit@bugs.debian.org;
 Thu, 10 Sep 2026 08:05:52 +0000
Received: by mail-ej1-x629.google.com with SMTP id
 a640c23a62f3a-c253425b253so1029279866b.1
 for <submit@bugs.debian.org>; Thu, 10 Sep 2026 01:05:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20251104; t=1789027550; x=1789632350; darn=bugs.debian.org;
 h=date:message-id:subject:to:content-transfer-encoding:mime-version
 :content-type:from:from:to:cc:subject:date:message-id:reply-to
 :content-type; bh=dguz38/cne1PzQ3S3m+pbYHig+FXDIcZiRag6j7Jh3M=;
 b=CuHaplkPbWGzEARAKFqOYOddkbaSXyNwLJfg6M3qgXVl1RGKV2C6zMiFgvPtxUx21u
 ulW5Ak7jEC/UKxgsrprRb4+eKyvh8laIw6cRHwPdph+jnx/9fEEBgQSComtNAljl/7Yl
 D799KSkxCxAKF5W0cizU/nuUdpo2IoTrTIiiYKYBNAa4MmfXM0uChJ67R3mUSR2sAAtm
 qfwgolFI0/riG143fzboAkeMuCLSC/fWAA3Qyx2GeIY3l3pVLNWCMQupuUYVV1OE2hZP
 Ir3TjeFpDCJQl30bOZIu9Ul1a0yjeuocff2kIU4HcfjSNA2cSvQ6xw44uUqYsbnV5Tk3
 M68A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20251104; t=1789027550; x=1789632350;
 h=date:message-id:subject:to:content-transfer-encoding:mime-version
 :content-type:from:x-gm-gg:x-gm-message-state:from:to:cc:subject
 :date:message-id:reply-to:content-type;
 bh=dguz38/cne1PzQ3S3m+pbYHig+FXDIcZiRag6j7Jh3M=;
 b=Erkbs7unfhjAqbGd6TSllJ2gjEnHgQhfl+DOdIfHvBcwkgsSZ8gOZ9ZsqXDBw8tmGp
 +QMTaDvYdsvudDR6fcbfY6flfJS2otl5L6P7L70dfwznX8k+EuHzxMbeHtfYPYJggpwt
 7BdbvrHwPo/r0POIFL6IawpoqELPaPRdW0AVyCABn7j5/ETTf99IiW3Pud/422rUpoW8
 tJ2Q/NXT5nWl8Pg58OTOj2/16YLIHhAXLDOwVsDcB+pXbhMRKZcpDCa2ZPHIS1WZXu+J
 bRPj98PhGUf0tHaz7EDm7uMxsh67oiL/qrDCPpa7l8wSQY1W3cKY/9vN1OMyIEN7odbq
 55hw==
X-Gm-Message-State: AFuF++lcbLLNbntJhH3qxXqMyGBq+3eTG0x6C2bbXst/JqUplUGWMMEP
 r/b6wm8N9PWYD+07v3pGK528hqJld0iNeihibEB2ZjkpwankkXKWSX3d/PlvvA==
X-Gm-Gg: AYBFou0UfHhYzgXsMc9YMjHHm0LQKspS/Tv3N/SZWwwJjDGk7AHoTOmcpefg8aqzm6u
 9cAjej6NZnbqpnAseAxAi3Dm+kglm8rlbs8g6PhRL90HzKakgPSMVX1WLJf0BxBxPEFYH4ttRVy
 tcSEsXgGqkBcm7GDb0cRh51Z3nAL5gRbEugWUiDO62YU28ufjk5yfI+vjfxNH2yZyqSCQHPoKuN
 idU5lEs3i3TnDAaUs9BdYmFQaI7QaODYZxjARiIoZg+BEBWbLyK/nKQTJrc4G14f+/tJpPyA/Lr
 DCMuqcR+wV8enp0vLjd+0Qto0t73E6/RHF7HuYVhFPxhhYZbgQdvZT+SKMuGzGMzGHr1+rpwO53
 IXWYN3O3Pep/m/baEJfqZa05G9QKrUg+LXQCdpJVaKfEqrwddeDa2T1cCE3wywO70l9pi+oDPgl
 tDnhFS8U/D97TB87CpinFJ133r73EVpvlJWoaRzYtgz9mU7qpy27d5HdMuBw2cpaGxadN73gzdT
 SHqrMFxXMxTxtllzd20Q2Q2696GahElRmjWKWVEwYcTS4paFwodHvVgtSRO5vfeT2DRClFTAC9/
 ZuO0aQVA8iBYTzCQvOBiq5ZLCHsp+AB/6RTjFjlMcjK+WMCBChs=
X-Received: by 2002:a17:906:478d:b0:c25:8c74:71e6 with SMTP id
 a640c23a62f3a-c260c8c111cmr1527347166b.10.1789027549690; 
 Thu, 10 Sep 2026 01:05:49 -0700 (PDT)
Received: from quieter (173.108-201-80.adsl-dyn.isp.belgacom.be.
 [80.201.108.173]) by smtp.gmail.com with ESMTPSA id
 a640c23a62f3a-c260d4aa0b9sm881752966b.11.2026.09.10.01.05.49
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Thu, 10 Sep 2026 01:05:49 -0700 (PDT)
From: Alexandre Detiste <alexandre.detiste@gmail.com>
X-Google-Original-From: Alexandre Detiste <tchet@debian.org>
Received: (nullmailer pid 55281 invoked by uid 1000);
 Thu, 10 Sep 2026 08:05:48 -0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: clamav-cvdupdate: has a runtime dependency on to-be-removed
 python3-pkg-resources
Message-ID: <178902754884.28675.10224216113035380005.reportbug@quieter>
X-Mailer: reportbug 13.2.0+nmu1
Date: Thu, 10 Sep 2026 10:05:48 +0200
Delivered-To: submit@bugs.debian.org

Package: clamav-cvdupdate
Version: 1.2.0-1
Severity: serious

Dear Maintainer,


clamav-cvdupdate: has a runtime dependency on to-be-removed python3-pkg-resources.

pkg_resources module is removed in setuptools v84 (experimental)
which is planned to be part of forky

After a quick glance a the code, this dependecy seems totaly  unnecessary nowadays.

tchet@quieter:/tmp/clamav-cvdupdate-1.2.0$ grep pkg.res -r
debian/control:Depends: python3-pkg-resources, ${python3:Depends}, ${misc:Depends}
debian/changelog:  * Add missing depends on python3-pkg-resources
tchet@quieter:/tmp/clamav-cvdupdate-1.2.0$

See: /usr/bin/cvdupdate

# for compatibility with easy_install; see #2198
__requires__ = 'cvdupdate==1.2.0'

try:
    from importlib.metadata import distribution
except ImportError:
    try:
        from importlib_metadata import distribution
    except ImportError:
        from pkg_resources import load_entry_point



Greetings

Alexandre
]