Mailing List Archive

This won't help you right now, but our team has been discussing publishing ClamAV on Linux using Snapcraft at the time of each release. Snapcraft sounds like it may be a good option to make ClamAV accessible faster.
Would you, and others here, be interested in installing a ClamAV snap in the future?

Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.



?On 3/29/19, 5:13 AM, "clamav-users on behalf of Marco" <clamav-users-bounces@lists.clamav.net on behalf of falon@ruparpiemonte.it> wrote:

Hello,

I use EPEL RPM files to upgrade Clamav on my Linux systems.

When urgent vulnerability fixes are released is it advisable to wait for
stable rpm? I don't know if it is safe to apply testing rpm.

Usually EPEL stable rpms are released after weeks of delay from new
Clamav versions.

Do you have any hints about use of clamav rpm distributions?

Many thanks
Warm Regards
Marco


Il 27/03/2019 18:46, Micah Snyder (micasnyd) via clamav-users wrote:
> 0.101.2 is a security patch release that includes a handful of urgent vulnerability fixes for issues in 0.101.1 and several that were in 0.100 and prior. Please see the blog announcement for details:
>
> https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html
>
> Micah
>
>
> On 3/27/19, 1:18 PM, "clamav-users on behalf of J.R. via clamav-users" <clamav-users-bounces@lists.clamav.net on behalf of clamav-users@lists.clamav.net> wrote:
>
> I saw 0.101.2 was released yesterday (3/26/2019) but I can't find an
> announcement anywhere?
>
> Anything noteworthy on this release?

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

> I use EPEL RPM files to upgrade Clamav on my Linux systems.
>
> When urgent vulnerability fixes are released is it advisable to wait for
> stable rpm? I don't know if it is safe to apply testing rpm.
>
> Usually EPEL stable rpms are released after weeks of delay from new
> Clamav versions.
>
> Do you have any hints about use of clamav rpm distributions?

I guess the right answer is "it depends on your situation"...

If you are wanting to update just because there's some security
patches, it's probably not going to hurt to wait.

If you are wanting to update because of some new feature and can't /
don't want to wait, then obviously you would have to build your own.
Alternatively there are 3rd party Repositories that usually update
certain packages much faster than the main channels. https://pkgs.org
is a nice searchable source, but it does not cover all 3rd party
repos.

I have built my own RPMs for ClamAV before. It's pretty quick and
easy, usually just updating the source file, a couple lines in the
.spec, sometimes the signature updates, all the other files rarely
require any editing. If you have never built RPMs it can be a little
bit of a learning curve and require installing a handful of packages,
but it's not too terribly difficult, there are lots of guides out
there if you search. I always build / test new RPMs on a dedicated
little VM before rolling it out to my production server.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

* Micah Snyder (micasnyd) via clamav-users <clamav-users@lists.clamav.net>:

> This won't help you right now, but our team has been discussing
> publishing ClamAV on Linux using Snapcraft at the time of each
> release. Snapcraft sounds like it may be a good option to make ClamAV
> accessible faster.
>
> Would you, and others here, be interested in installing a ClamAV
> snap in the future?

That definitely sounds interesting!

--
Ralf Hildebrandt Charite Universitätsmedizin Berlin
ralf.hildebrandt@charite.de Campus Benjamin Franklin
https://www.charite.de Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Hi there,

On Fri, 29 Mar 2019, Micah Snyder wrote:

> This won't help you right now, but our team has been discussing
> publishing ClamAV on Linux using Snapcraft at the time of each
> release. Snapcraft sounds like it may be a good option to make
> ClamAV accessible faster. Would you, and others here, be interested
> in installing a ClamAV snap in the future?

Not if it wants me to install systemd...

laptop3:~# >>> cat /etc/debian_version
9.8
laptop3:~# >>> apt-get install snapd
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
snapd : Depends: systemd
...

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

On Friday, March 29, 2019 06:01:25 PM G.W. Haywood via clamav-users wrote:
> Hi there,
>
> On Fri, 29 Mar 2019, Micah Snyder wrote:
> > This won't help you right now, but our team has been discussing
> > publishing ClamAV on Linux using Snapcraft at the time of each
> > release. Snapcraft sounds like it may be a good option to make
> > ClamAV accessible faster. Would you, and others here, be interested
> > in installing a ClamAV snap in the future?
>
> Not if it wants me to install systemd...
>
> laptop3:~# >>> cat /etc/debian_version
> 9.8
> laptop3:~# >>> apt-get install snapd
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> Some packages could not be installed. This may mean that you have
> requested an impossible situation or if you are using the unstable
> distribution that some required packages have not yet been created
> or been moved out of Incoming.
> The following information may help to resolve the situation:
>
> The following packages have unmet dependencies:
> snapd : Depends: systemd
> ...

For Debian we'll continue to provide clamav updates through the normal update
process. Packaging the security update is on my list for today.

Personally, I think Flatpack is a better solution for such things, but we
strive to support these kinds of things for our users within the distro, so
they don't have to worry about it.

Scott K

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

If you want the version to appear in EL7 stable, go to
https://apps.fedoraproject.org/packages/clamav/ and add karma.


Franky


Op Vrijdag, 29-03-2019 om 19:01 schreef G.W. Haywood via clamav-users:


Hi there,

On Fri, 29 Mar 2019, Micah Snyder wrote:

> This won't help you right now, but our team has been discussing
> publishing ClamAV on Linux using Snapcraft at the time of each
> release.  Snapcraft sounds like it may be a good option to make
> ClamAV accessible faster.  Would you, and others here, be
interested
> in installing a ClamAV snap in the future?

Not if it wants me to install systemd...

laptop3:~# >>> cat /etc/debian_version
9.8
laptop3:~# >>> apt-get install snapd
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
  snapd : Depends: systemd
...

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

On 29/03/2019 13:54, Micah Snyder (micasnyd) via clamav-users :

> This won't help you right now, but our team has been discussing
> publishing ClamAV on Linux using Snapcraft at the time of each release.
> Snapcraft sounds like it may be a good option to make ClamAV accessible faster.
> Would you, and others here, be interested in installing a ClamAV snap in the future?

Yes. I never used it before, but if I well understood how it works I
think it could be useful!
+1
Thanks

Marco

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml