Bug 2339830

Scratch build failed. Details below:

BuilderException: Build failed:
Command '['rpmbuild', '-D', '_sourcedir .', '-D', '_topdir .', '-bs', '/var/tmp/thn-z159q8zf/clamav.spec']' returned non-zero exit status 1.

StdOut:
setting SOURCE_DATE_EPOCH=1737504000
error: Bad file: ./clamav-1.4.2-norar.tar.xz: No such file or directory

RPM build errors:
    Bad file: ./clamav-1.4.2-norar.tar.xz: No such file or directory


Traceback:
  File "/usr/local/lib/python3.12/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 56, in build
    result = self.builder.build(request.package, request.opts)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 229, in build
    raise BuilderException(

If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues

Created attachment 2068086 [details]
Update to 1.4.2 (#2339830)

Releases retrieved: 1.5.0-beta
Upstream release that is considered latest: 1.5.0-beta
Current version/release in rawhide: 1.4.2-2.fc43
URL: https://www.clamav.net

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/291/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/clamav

Scratch build failed. Details below:

BuilderException: Build failed:
Command '['rpmbuild', '-D', '_sourcedir .', '-D', '_topdir .', '-bs', '/var/tmp/thn-ak_318l1/clamav.spec']' returned non-zero exit status 1.

StdOut:
setting SOURCE_DATE_EPOCH=1743379200
error: Bad file: ./clamav-1.5.0-norar.tar.xz: No such file or directory

RPM build errors:
    Bad file: ./clamav-1.5.0-norar.tar.xz: No such file or directory


Traceback:
  File "/usr/local/lib/python3.12/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 56, in build
    result = self.builder.build(request.package, request.opts)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 229, in build
    raise BuilderException(

If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues

Created attachment 2082853 [details]
Update to 1.5.0-beta (#2339830)

I've started poking at this and have some initial work here: https://src.fedoraproject.org/fork/orion/rpms/clamav/tree/1.5

TODO:
* Figure out how to deal with the clam-sigutil / clamav-signature-util library.  Posted a question to clamav-devel about it - https://lists.clamav.net/pipermail/clamav-devel/2025-April/000790.html 
* Make sure that the default_confs patch has been updated properly

This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

Releases retrieved: 1.5.0
Upstream release that is considered latest: 1.5.0
Current version/release in rawhide: 1.4.3-2.fc43
URL: https://www.clamav.net

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/291/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/clamav

Scratch build failed. Details below:

FileNotFoundError: [Errno 2] No such file or directory: '/var/tmp/thn-130b3vil/https://src.fedoraproject.org/repo/pkgs'
Traceback:
  File "/usr/local/lib/python3.12/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 56, in build
    result = self.builder.build(request.package, request.opts)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 206, in build
    output["message"] = self._compare_sources(old_sources, new_sources)
                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 373, in _compare_sources
    with open(file_path, "rb") as fd:
         ^^^^^^^^^^^^^^^^^^^^^

If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues

Releases retrieved: 1.5.1
Upstream release that is considered latest: 1.5.1
Current version/release in rawhide: 1.4.3-2.fc43
URL: https://www.clamav.net

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/291/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/clamav

Scratch build failed. Details below:

FileNotFoundError: [Errno 2] No such file or directory: '/var/tmp/thn-5tm_tpev/https://src.fedoraproject.org/repo/pkgs'
Traceback:
  File "/usr/local/lib/python3.12/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 56, in build
    result = self.builder.build(request.package, request.opts)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 206, in build
    output["message"] = self._compare_sources(old_sources, new_sources)
                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 373, in _compare_sources
    with open(file_path, "rb") as fd:
         ^^^^^^^^^^^^^^^^^^^^^

If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues

I would greatly appreciate a review of this clamav 1.5.z release for adoption in Fedora, and consideration in EPEL for RHEL9 and RHEL10.

My team uses clamav in a high compliance environment requiring FIPS compliant code.  When clamd v1.4.3 runs on a FIPS-or-die RHEL9 host, it crashes due to calls to md5sum libraries.  The clamav 1.5 release is now FIPS compatible and should be adopted into Fedora and EPEL for the export-sensitive userbase.

@(In reply to Orion Poplawski from comment #6)
> I've started poking at this and have some initial work here:
> https://src.fedoraproject.org/fork/orion/rpms/clamav/tree/1.5
> 
> TODO:
> * Figure out how to deal with the clam-sigutil / clamav-signature-util
> library.  Posted a question to clamav-devel about it -
> https://lists.clamav.net/pipermail/clamav-devel/2025-April/000790.html 
> * Make sure that the default_confs patch has been updated properly

Orion, have you made any progress here? If not, do you think I should loop in the rust SIG?

Filed all necessary bugs and dependencies for this update.

Releases retrieved: 1.4.4, 1.5.2
Upstream release that is considered latest: 1.5.2
Current version/release in rawhide: 1.4.3-6.fc44
URL: https://www.clamav.net

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/291/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/clamav

Scratch build failed. Details below:

FileNotFoundError: [Errno 2] No such file or directory: '/var/tmp/thn-ebew5tyc/https://src.fedoraproject.org/repo/pkgs'
Traceback:
  File "/usr/local/lib/python3.12/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 56, in build
    result = self.builder.build(request.package, request.opts)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 206, in build
    output["message"] = self._compare_sources(old_sources, new_sources)
                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/hotness/builders/koji.py", line 373, in _compare_sources
    with open(file_path, "rb") as fd:
         ^^^^^^^^^^^^^^^^^^^^^

If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues

Any progress on this? Clam 1.5.x fixing compatibility with FIPS mode would unfortunately be helpful for me at work...

We're working on it. The bugs that this bug depends on represent new Rust packages that need to be reviewed and built before we can update to 1.5.x.

I am waiting for 1.5.x to be available from Fedora as well. Can you please help me understand which new packages are being pulled-in and timelines to expect? When I tried to build by myself the only non-crates.io requirements was clam-sigutil. I was wondering what else I missed out since that has an impact on timeline expectations.

Releases retrieved: 1.4.5, 1.5.3
Upstream release that is considered latest: 1.5.3
Current version/release in rawhide: 1.4.4-1.fc45
URL: https://www.clamav.net

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/291/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/clamav

Scratch build failed. Details below:

BuilderException: Build failed:
Command '['rpmbuild', '-D', '_sourcedir .', '-D', '_topdir .', '-bs', '/var/tmp/thn-_u1app92/clamav.spec']' returned non-zero exit status 1.

StdOut:
setting SOURCE_DATE_EPOCH=1782864000
error: Bad file: clamav-1.5.3-norar.tar.xz: No such file or directory

RPM build errors:
    Bad file: clamav-1.5.3-norar.tar.xz: No such file or directory


Traceback:
  File "/usr/local/lib/python3.14/site-packages/hotness/use_cases/package_scratch_build_use_case.py", line 55, in build
    result = self.builder.build(request.package, request.opts)
  File "/usr/local/lib/python3.14/site-packages/hotness/builders/koji.py", line 251, in build
    raise BuilderException(
        str(exc), value=output, std_out=std_out, std_err=std_err
    )

If you think this issue is caused by some bug in the-new-hotness, please report it on the-new-hotness issue tracker: https://github.com/fedora-infra/the-new-hotness/issues

Created attachment 2147304 [details]
Update to 1.5.3 (#2339830)