Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 04 Nov 2021 09:53:23 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 259641] security/clamav: Update to new bugfix release 0.103.4 (Direct commit to 2021Q4 branch)
Message-ID:  <bug-259641-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D259641

            Bug ID: 259641
           Summary: security/clamav: Update to new bugfix release 0.103.4
                    (Direct commit to 2021Q4 branch)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://blog.clamav.net/2021/11/clamav-01034-and-01041
                    -patch-releases.html
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: yasu@freebsd.org
                CC: ports-secteam@FreeBSD.org
 Attachment #229264 maintainer-approval+
             Flags:

Created attachment 229264
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D229264&action=
=3Dedit
Patch file

@ports-secteam

I would like to request approval to make direct commit of attached patch to
2021Q4 branch. The patch updates security/clamav to new bugfix release 0.10=
3.4.

The reason I request direct commit rather than MFH is as following.

* On September upstream changed their release and support policy as followi=
ng.
  - They release Regular Feature Release (=3D x.y.0 release) more frequentl=
y. And
x.y.z releases are supported until 4 months after the release of x.(y+1).0.
  - To compensate for the short lifetime of Regular Feature Releases, Long =
Term
Support (LTS) Feature Release is introduced. A new LTS Feature Release will=
 be
identified approximately every two years and be supported for at least three
years from the initial publication date of that LTS feature version.
* Version 0.103.3 was identified as first LTS Feature Release.
* After 2021Q4 branch was created, on main brach security/clamav was update=
d to
0.104.0 and security/clamav-lts was added.
* Version 0.104.0 is first Regular Feature Release that new upstream policy=
 is
applied. There are large chages between 0.103.3 and 0.104.0 as upstream
refactored their code base.
* On November 3rd new bugfix releases 0.104.1 and 0.103.4 were released. On
main branch I already updated both security/clamav and security/clamav-lts =
to
their latest releases.
* As is exlained above lifetime of 0.104.x isn't so long and there is large
difference between 0.103.x and 0.104.x. Furthermore there isn't
security/clamav-lts in 2021Q4 branch that can be selected as alternative for
those who look for longer lifetime.
* So merging 0.104.x to 2021Q4 isn't appropriate in this case and I select =
to
update security/clamav to 0.103.3

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-259641-7788>