Dear Maintainer,


clamav-cvdupdate: has a runtime dependency on to-be-removed python3-pkg-resources.

pkg_resources module is removed in setuptools v84 (experimental)
which is planned to be part of forky

After a quick glance a the code, this dependecy seems totaly  unnecessary nowadays.

tchet@quieter:/tmp/clamav-cvdupdate-1.2.0$ grep pkg.res -r
debian/control:Depends: python3-pkg-resources, ${python3:Depends}, ${misc:Depends}
debian/changelog:  * Add missing depends on python3-pkg-resources
tchet@quieter:/tmp/clamav-cvdupdate-1.2.0$

See: /usr/bin/cvdupdate

# for compatibility with easy_install; see #2198
__requires__ = 'cvdupdate==1.2.0'

try:
    from importlib.metadata import distribution
except ImportError:
    try:
        from importlib_metadata import distribution
    except ImportError:
        from pkg_resources import load_entry_point



Greetings

Alexandre

This is a follow-up to 1083339

Dear maintainer,

I've prepared an NMU for clamav-cvdupdate (versioned as 1.2.0-1.1) and
uploaded it to untangle the ongoing setuptools 84 transition.

Regards.

diffstat for clamav-cvdupdate-1.2.0 clamav-cvdupdate-1.2.0

 changelog |    7 +++++++
 control   |    2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff -Nru clamav-cvdupdate-1.2.0/debian/changelog clamav-cvdupdate-1.2.0/debian/changelog
--- clamav-cvdupdate-1.2.0/debian/changelog	2026-02-17 23:02:54.000000000 +0100
+++ clamav-cvdupdate-1.2.0/debian/changelog	2026-09-12 15:27:53.000000000 +0200
@@ -1,3 +1,10 @@
+clamav-cvdupdate (1.2.0-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Drop unused python3-pkg-resources dependency (Closes: #1147255)
+
+ -- Alexandre Detiste <tchet@debian.org>  Sat, 12 Sep 2026 15:27:53 +0200
+
 clamav-cvdupdate (1.2.0-1) unstable; urgency=medium

   [ Debian Janitor ]
diff -Nru clamav-cvdupdate-1.2.0/debian/control clamav-cvdupdate-1.2.0/debian/control
--- clamav-cvdupdate-1.2.0/debian/control	2026-02-17 23:02:48.000000000 +0100
+++ clamav-cvdupdate-1.2.0/debian/control	2026-09-12 15:27:13.000000000 +0200
@@ -12,7 +12,7 @@

 Package: clamav-cvdupdate
 Architecture: all
-Depends: python3-pkg-resources, ${python3:Depends}, ${misc:Depends}
+Depends: ${python3:Depends}, ${misc:Depends}
 Description: ClamAV Private Database Mirror Updater Tool
  cvdupdate downloads the latest ClamAV databases along with the latest
  database patch files.

We believe that the bug you reported is fixed in the latest version of
clamav-cvdupdate, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1147255@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alexandre Detiste <tchet@debian.org> (supplier of updated clamav-cvdupdate package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 12 Sep 2026 15:27:53 +0200
Source: clamav-cvdupdate
Architecture: source
Version: 1.2.0-1.1
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org>
Changed-By: Alexandre Detiste <tchet@debian.org>
Closes: 1147255
Changes:
 clamav-cvdupdate (1.2.0-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Drop unused python3-pkg-resources dependency (Closes: #1147255)
Checksums-Sha1:
 62dee7dcf513bf9f745e3922f3db14e785888225 2123 clamav-cvdupdate_1.2.0-1.1.dsc
 a89adaeeb144ed574f995e76c2fa6337363fa795 3688 clamav-cvdupdate_1.2.0-1.1.debian.tar.xz
 faa956699d6903325e0448a3873b026f5159d20a 6668 clamav-cvdupdate_1.2.0-1.1_source.buildinfo
Checksums-Sha256:
 74d1a0a9a5c8d0ded20d5bc33034df799ff88ddd82ea2d75f154471498c4f883 2123 clamav-cvdupdate_1.2.0-1.1.dsc
 b87957b087efd83bdd2c8064ac5119e80d5bb95df8fa0d2f9aefd52c7fcb5d98 3688 clamav-cvdupdate_1.2.0-1.1.debian.tar.xz
 a4409781ea0b1e9a7feb2cfc3bb4246a57cc276a2cad6d7598766e5bb46ee0e8 6668 clamav-cvdupdate_1.2.0-1.1_source.buildinfo
Files:
 6c1dda14b51e06ff0779683ea0334a76 2123 utils optional clamav-cvdupdate_1.2.0-1.1.dsc
 6f99c87a594a95690408c694bef9899a 3688 utils optional clamav-cvdupdate_1.2.0-1.1.debian.tar.xz
 af4d91d02a9024cb5ec1b3f27e020e84 6668 utils optional clamav-cvdupdate_1.2.0-1.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=mNF1
-----END PGP SIGNATURE-----