Your message dated Wed, 30 Jul 2008 09:35:35 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Closing bugs for no longer existing packages
has caused the Debian Bug report #245119,
regarding sylpheed-claws-clamav: clamav plugin doesn't detect some email with
Worm.Sober.F (detected by clamscan)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
245119: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=245119
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: sylpheed-claws-clamav
Version: 0.9.10claws-1
Severity: normal
I'm receiveing some emails with the virus Worm.Sober.F that clamav scan
detect very well:
[EMAIL PROTECTED]:~$ clamscan --mbox Worm.Sober.F_email.txt
Worm.Sober.F_email.txt: Worm.Sober.F FOUND
----------- SCAN SUMMARY -----------
Known viruses: 21163
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.04 MB
I/O buffer size: 131072 bytes
Time: 0.476 sec (0 m 0 s)
But sylpheed-claws with the plugin clamav doesn't detect the virus
into the emails. It seems that the virus uses a different kind of
mime-attaching that the plugin doesn't manage. Note that the clamav
works very well with other virus-emails (that use classic mime-attachment
format).
The infected mail can be found to the temporary URL:
http://www.marioland.it/tmp/Worm.Sober.F_email.txt.gz
This is the debug-output of SC during the pop-phase of this email:
Message: Connecting to POP3 server: XXXXXXXXXXXXXXXXXXX...
session.c:150:session (0x84451a0): connected
[10:29:38] POP3< +OK POP3 Ready euclid 00019ecf
[10:29:38] POP3> STLS
[10:29:38] POP3< +OK Begin TLS negotiation, mate
ssl.c:87:Setting TLSv1 client method
ssl.c:104:Connessione SSL usando DES-CBC3-SHA
[10:29:38] POP3> USER XXXXXXXXX
[10:29:39] POP3< +OK USER XXXXXXXXXX set, mate
[10:29:39] POP3> PASS ********
[10:29:39] POP3< +OK You are so in
[10:29:39] POP3> STAT
[10:29:39] POP3< +OK 1 59536
[10:29:39] POP3> UIDL
[10:29:39] POP3< +OK Unique-ID listing follows
[10:29:39] POP3> LIST
[10:29:39] POP3< +OK Mailbox scan listing follows
[10:29:39] POP3> RETR 1
[10:29:39] POP3< +OK 59536 octets
Sylpheed-WARNING **: Invalid date: Fri, 16 Apr 2004 20.30.25
msgcache.c:87:Cache size: 1 messages, 259 byte
procmsg.c:1300:Unsetting flags for message 3 in folder processing
procmsg.c:1266:Setting flags for message 3 in folder processing
[10:29:40] POP3> DELE 1
[10:29:40] POP3< +OK Message deleted
[10:29:40] POP3> QUIT
[10:29:40] POP3< +OK Sayonara
session.c:269:session (0x84451a0): closed
folder.c:1431:Scanning folder processing for cache changes.
mh.c:215:mh_get_last_num(): Scanning processing ...
message/rfc822 (offset:0 length:58748 encoding: 2)
multipart/mixed (offset:576 length:58172 encoding: 0)
text/plain (offset:651 length:485 encoding: 0)
clamav_plugin.c:115:Scanning message 3 for viruses
clamav_plugin.c:133:Database loaded (containing in
total 21163 signatures)
clamav_plugin.c:83:Scanning
/home/mario/.sylpheed-claws/mimetmp/00000008.mimetmpclamav_plugin.c:89:No virus
detected.
clamav_plugin.c:83:Scanning
/home/mario/.sylpheed-claws/mimetmp/00000009.mimetmpclamav_plugin.c:89:No virus
detected.
clamav_plugin.c:83:Scanning
/home/mario/.sylpheed-claws/mimetmp/0000000a.mimetmpclamav_plugin.c:89:No virus
detected.
matcher.c:348:Command exit code: 256
mh.c:393:Copying message processing/3 to inbox ...
Sylpheed-WARNING **: Invalid date: Fri, 16 Apr 2004
20.30.25
msgcache.c:87:Cache size: 6 messages, 2138 byte
procmsg.c:1300:Unsetting flags for message 115 in
folder inbox
procmsg.c:1266:Setting flags for message 115 in folder
inbox
summaryview.c:976:Esamino la cartella (inbox)...
summaryview.c:2262: Setting summary from message
data...summaryview.c:2334:done.
summaryview.c:2337: msgid hash table size = 5
summaryview.c:2339: subject hash table size = 4
summaryview.c:2193:Sorting
summary...summaryview.c:2208:done.
summaryview.c:1175:
msgcache.c:108:Cache size: 0 messages, 0 byte
session.c:269:session (0x84451a0): closed
session.c:191:session (0x84451a0): destroyed
inc.c:1295:added timer = 1110
playing /usr/share/sounds/email.wav
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.4-smeagol
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED]
Versions of packages sylpheed-claws-clamav depends on:
ii clamav 0.67-7 Antivirus scanner for Unix
ii libc6 2.3.2.ds1-11 GNU C Library: Shared libraries an
ii libclamav1 0.67-7 Virus scanner library
ii libglib1.2 1.2.10-9 The GLib library of C routines
ii libgtk1.2 1.2.10-16 The GIMP Toolkit set of widgets fo
ii libx11-6 4.3.0-7 X Window System protocol client li
ii libxext6 4.3.0-7 X Window System miscellaneous exte
ii libxi6 4.3.0-7 X Window System Input extension li
ii sylpheed-claws 0.9.10claws-1 Bleeding edge version of the Sylph
ii xlibs 4.3.0-7 X Window System client libraries m
-- no debconf information
--- End Message ---
--- Begin Message ---
Hi all,
Apologies if you receive this mail twice or more.
You're receiving this mail because you or somebody using your mail
address filed a bug on Debian BTS against sylpheed-claws or
sylpheed-claws-<something> package. If you didn't do you can ignore
the rest of the message ;-)
The sylpheed-claws and related packages has been dropped by upstream
and also removed from Debian from some time ago. They won't be
available in next stable release (lenny).
If you still use it *please* switch to the much improved claws-mail or
claws-mail-<something> package [0], which is the current
implementation.
NOTE: If the bug being closed still exist in claws-mail or
claws-mail-<something> please create a _new_ bug for claws-mail
package describing how to reproduce it. Current sources have been
greatly modified since sylpheed-claws stage, but it's important you
verify the bug doesn't happen with claws-mail and also file the bug
otherwise, so it can be fixed before next stable release.
WARNING: your bug may have been forwarded upstream, before creating
new bug reports check the status on upstream's bugzilla (URL is in the
bug page).
Thanks in advance and best regards,
[0] Supposing it exists now, because some have been removed too
because of licensing or other issues.
--
Ricardo Mones
http://people.debian.org/~mones
«Q: What do agnostic, insomniac dyslexics do at night? A: Stay awake
and wonder if there's a dog.»
--- End Message ---
