[Pkg-clamav-devel] clamav in Bullseye

[Martin-Éric Racine]

ti 17. elok. 2021 klo 22.50 Sebastian Andrzej Siewior
(sebastian at breakpoint.cc) kirjoitti:
>
> On 2021-08-16 16:53:01 [+0300], Martin-Éric Racine wrote:
> > $ sudo freshclam
> > Mon Aug 16 16:52:00 2021 -> ClamAV update process started at Mon Aug
> > 16 16:52:00 2021
> > Mon Aug 16 16:52:00 2021 -> ^Your ClamAV installation is OUTDATED!
> > Mon Aug 16 16:52:00 2021 -> ^Local version: 0.103.2 Recommended version: 0.103.3
> > Mon Aug 16 16:52:00 2021 -> DON'T PANIC! Read
> > https://www.clamav.net/documents/upgrading-clamav
> > Mon Aug 16 16:52:00 2021 -> daily database available for update (local
> > version: 26206, remote version: 26265)
> > Current database is 59 versions behind.
> you are quite a few versions behind…
> > Downloading database patch # 26207...
> …
> > Downloading database patch # 26232...
> > Mon Aug 16 16:52:05 2021 -> !cdiff_apply: lseek(desc, -350, SEEK_END) failed
> > Mon Aug 16 16:52:05 2021 -> !downloadPatch: Can't apply patch
> > Mon Aug 16 16:52:05 2021 -> Downloaded 25 patches for daily, which is
> > fewer than the 59 expected patches.
> > Mon Aug 16 16:52:05 2021 -> We'll settle for this partial-update, at
> > least for now.
> > Mon Aug 16 16:52:06 2021 -> Testing database:
> > '/var/lib/clamav/tmp.b673d0e881/clamav-8f100ad0516663b9b4b7725e4492cbf6.tmp-daily.cld'
> > ...
> > Mon Aug 16 16:52:06 2021 -> ~[LibClamAV]
> > **************************************************
> > Mon Aug 16 16:52:06 2021 -> ~[LibClamAV] ***  The virus database is
> > older than 7 days!  ***
>
> Do you recover from this at all? Does it happen on evey run? Mine
> somehow recovered on its own. It appeared on Jul 15th (in my logs) and
> after (8 hours later so) it downloaded the daily.cvd and was done with it.
> If the problem remains I suggest to remove the database and fetch it
> again.
>
> See
>    https://www.mail-archive.com/clamav-users@lists.clamav.net/msg50747.html

I never recovered. I have no idea how often it happens. I just noticed
prior to upgrading to Bullseye that syslog regularly reports this, and
fled the bug accordingly.

> > Mon Aug 16 16:52:06 2021 -> ~[LibClamAV] ***   Please update it as
> > soon as possible.    ***
> > Mon Aug 16 16:52:06 2021 -> ~[LibClamAV]
> > **************************************************
> > Mon Aug 16 16:52:08 2021 -> ^[LibClamAV] hm_addhash_str: invalid hash
> > 2512df6c7973acedbd589e37da6c�c7a
> > Mon Aug 16 16:52:08 2021 -> ^[LibClamAV] cli_loadhash: Malformed hash
> > string at line 2967330
> > Mon Aug 16 16:52:08 2021 -> ^[LibClamAV] cli_loadhash: Problem parsing
> > database at line 2967330
> > Mon Aug 16 16:52:08 2021 -> ^[LibClamAV] Can't load daily.hsb: Invalid
> > argument passed to function
> > Mon Aug 16 16:52:08 2021 -> ^[LibClamAV] cli_tgzload: Can't load daily.hsb
> > Mon Aug 16 16:52:08 2021 -> ^[LibClamAV] Can't load
> > /var/lib/clamav/tmp.b673d0e881/clamav-8f100ad0516663b9b4b7725e4492cbf6.tmp-daily.cld:
> > Malformed database
>
> Is this a third-party database?

Nope. This is whatever the package configured.

Martin-Éric