[Pkg-clamav-devel] Bug#1031896: Bug#1031896: Bug#1031896: Bug#1031896: libclamav11: LibClamAV Error: Can't verify database integrity, breaks amavis

[Scott Kitterman]

It's too late for a trip through New and Bookworm.  We probably should have done it before, but not now.  I think setting a minimum version of the current package will be sufficient and about all we can do now anyway.

Scott K

On February 25, 2023 10:26:50 PM UTC, Sebastian Andrzej Siewior <sebastian at breakpoint.cc> wrote:
>On 25 February 2023 16:20:45 UTC, Scott Kitterman <debian at kitterman.com> wrote:
>>True.
>>
>>I'm not a C programmer, so I may be unduly concerned about the maintenance load.  I'll defer to your judgement.
>
>I'm going to throw this on my machine to get more testing - more than just the test suite.
>What about going through NEW with tfm? I would make it provide libtfm1-4k and  clamav would need a binnmu to pick up the change. 
>
>>
>>I do wonder if we should make a stab at switching the rust bits to using Debian packages instead of the embedded copies.  If we could manage it, then any security issues in the rust libraries can be fixed in clamav with a binNMU, no upload needed.
>
>That sounds good. I need to educate myself about rust to figure out how that works. Right now it is all magic. I just hope that they did not adapt any packages to their needs and that they don't rely on a newer version of something than what we have in the archive.
>>
>>Scott K
>
>