Bug 40449 - Integrate libclamunrar as dependency to univention-antivir-mail
Integrate libclamunrar as dependency to univention-antivir-mail
Status: REOPENED
Product: UCS
Classification: Unclassified
Component: Mail
UCS 5.0
All Linux
: P5 enhancement (vote)
: ---
Assigned To: Mail maintainers
:
: 36947 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-01-17 13:33 CET by Lutz Willek
Modified: 2022-01-12 16:38 CET (History)
5 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Lutz Willek 2016-01-17 13:33:50 CET
Dear Univention Mail Maintainers,

Quite a lot of sysadmins are unaware of the fact that their virusscanner is running without unrar support. So please integrate the package libclamunrar6 as a dependency to univention-antivir-mail.

On Debian linux systems you need to install the "libclamunrar6" package from
the non-free/libs section, otherwise clamav fails to detect viruses within rar archives.

Please also have a look at bugreport 36947, which is related.

Quick Check to verify this behavior:
http://www.heise.de/security/dienste/emailcheck/virendummies/rar_mit_eicar/

Best regards,
Lutz Willek
Comment 1 Lutz Willek 2016-01-17 13:51:59 CET
suggesting the following addition to mail/univention-antivir-mail/debian/control:

Recommends: libclamunrar6
Comment 2 Arvid Requate univentionstaff 2017-07-11 14:05:14 CEST
*** Bug 36947 has been marked as a duplicate of this bug. ***
Comment 3 Stefan Gohmann univentionstaff 2019-01-03 07:19:18 CET
This issue has been filled against UCS 4.1. The maintenance with bug and security fixes for UCS 4.1 has ended on 5st of April 2018.

Customers still on UCS 4.1 are encouraged to update to UCS 4.3. Please contact
your partner or Univention for any questions.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.
Comment 4 Lutz Willek 2019-01-04 16:21:38 CET
issue reopened, because the same issue is still valid for 4.3-3. Still no dependency or recommendation for libclamunrar6:

root@server:~# apt-get install --reinstall --download-only univention-antivir-mail
... snip ...
Get:1 https://updates.software-univention.de/4.3/maintained 4.3-3/all/ univention-antivir-mail 9.0.0-5A~4.3.0.201811271114 [36.3 MB]
Fetched 36.3 MB in 4s (8699 kB/s)
Download complete and in download only mode

root@server:~# dpkg -I /var/cache/apt/archives/univention-antivir-mail_9.0.0-5A~4.3.0.201811271114_all.deb
 new debian package, version 2.0.
 size 36304860 bytes: control archive=2296 bytes.
     479 bytes,     8 lines      conffiles
     618 bytes,    15 lines      control
     329 bytes,     4 lines      md5sums
    3706 bytes,    98 lines   *  postinst             #!/bin/sh
     426 bytes,     7 lines   *  preinst              #!/bin/sh
     469 bytes,     8 lines   *  prerm                #!/bin/sh
 Package: univention-antivir-mail
 Version: 9.0.0-5A~4.3.0.201811271114
 Architecture: all
 Maintainer: Univention GmbH <packages@univention.de>
 Installed-Size: 35544
 Depends: univention-config (>= 7.0.25), amavisd-new, univention-spamassassin, clamav, clamav-daemon | kav4fileservers | sophie
 Section: univention
 Priority: optional
 Description: UCS anti virus mail configuration.
  UCS anti virus mail module.
  .
  This package is part of Univention Corporate Server (UCS),
  an integrated, directory driven solution for managing
  corporate environments. For more information about UCS,
  refer to: http://www.univention.de/
Comment 5 Florian Best univentionstaff 2020-06-22 12:51:45 CEST
(In reply to Lutz Willek from comment #4)
> issue reopened, because the same issue is still valid for 4.3-3. Still no
> dependency or recommendation for libclamunrar6:
This will probably also affect UCS 4.4/5.0.
Comment 6 Philipp Hahn univentionstaff 2022-01-12 16:38:59 CET
1. This is a feature request to add some "Recommends".
2. clamav clamav-daemon libclamav9 already Suggest: libclamunrar[9]
3. The UnRAR licence is very problematic: <https://fedoraproject.org/wiki/Licensing:Unrar>
4. GNU UnRAR only support v2, while WinRAR is already at v5: <https://en.wikipedia.org/wiki/RAR_(file_format)>
5. According to <https://en.wikipedia.org/wiki/RAR_(file_format)> `libarchive` should support all versions of RAR: See <https://bugzilla.clamav.net/show_bug.cgi?id=12279>, which is also preferred by <https://bugzilla.redhat.com/show_bug.cgi?id=1765373>.

If this is important for any customer they can always do `univention-install libclamunrar`, which will pull in `libclamunrar9` by now.
For the product I would close this as WONT-FIX.