> While I applaud the re-use of existing components, requiring this > (minimum) version of libcurl will be a problem for redhat/centOS 7 > users: everybody is still on RHEL7 (RHEL8 is "just" released and still > lacks support from many vendors). > In RHEL/Centos, clamav is only packaged in EPEL, and EPEL packages > will never include packages that the base OS also provides (in this > case libcurl + libssh2 as a dependancy). This would mean that 0.102 > will never be available in RHEL7 (that is here until 2024). > So, maybe a solution could be to include libcurl in the clam distro > itself and build/use a static lib version of that (and not a shared > .so) in case the OS-version of libcurl is not sufficient? If not, EPEL > will never create an rpm for clamav 0.102, and that would leave a lot > of existing users "in the cold" and force them into using an "old" > version.
Franky, As has been stated numerous times, the minimum requirement for curl is ONLY to build with the OPTIONAL argument for on-access scanning. The ClamAV team is not responsible for 3rd party packages, if you want a static libcurl built you would need to contact the PACKAGE MAINTAINER. Which for RHEL appears to be a couple people. Look at the changelog: https://centos.pkgs.org/7/epel-x86_64/clamav-0.101.4-1.el7.x86_64.rpm.html Sure, it can be done.... for RHEL 6 they built a static version of zlib in the ClamAV package due to a bug with the OS version. But it is up to YOU to tell THEM... i.e. on Redhat's Bugzilla... Alternatively now that you know exactly what feature is being used, instead of building a full static version with clamav, you could request that feature be backported into the existing curl package (as a different route to achieve the same end-goal)... Additionally, you *can* install the latest Curl from a 3rd party repo: https://mirror.city-fan.org/ftp/contrib/sysutils/Mirroring/ And if you want to add the repo to yum: http://www.city-fan.org/ftp/contrib/yum-repo/ Ironic you are complaining about not getting a new version, when almost all packages in a RHEL distro are frozen versions (ex: curl) and merely receive backported bug fixes and features... It's not hard to update curl, I already did it on my EL6 system. I haven't updated ClamAV yet, I'm waiting for the stable release. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
