[Pkg-clamav-devel] Bug#1064955: doppelstern.hdb removed from sanesecurity databases, cron mailing every hour
Matus UHLAR - fantomas
uhlar at fantomas.sk
Wed Feb 28 09:52:11 GMT 2024
Package: clamav-unofficial-sigs
Version: 3.7.2-2.1
the database doppelstern.hdb was removed as reported by sanesecurity.
This results into error mail from cron reporting:
Subject: Cron <clamav at mail> [ -x /usr/sbin/clamav-unofficial-sigs ] && /usr/sbin/clamav-unofficial-sigs
Sanesecurity GPG Signature test FAILED on doppelstern.hdb database - SKIPPING
the file contains:
3b583df09ec829197e03819fddf45f84:180:Doppelstern.hdb.Is.Dead.RIP
Please remove the doppelstern.hdb from clamav-unofficial-sigs.conf,
installed as:
/usr/share/clamav-unofficial-sigs/conf.d/00-clamav-unofficial-sigs.conf
I am attaching patch to do that.
The intermediate workaround it to put into /etc/clamav-unofficial-sigs.conf
ss_dbs="
blurl.ndb
junk.ndb
jurlbl.ndb
phish.ndb
rogue.hdb
sanesecurity.ftm
scam.ndb
sigwhitelist.ign2
spamattach.hdb
spamimg.hdb
winnow.attachments.hdb
winnow_bad_cw.hdb
winnow_extended_malware.hdb
winnow_malware.hdb
winnow_malware_links.ndb
bofhland_cracked_URL.ndb
bofhland_malware_attach.hdb
bofhland_malware_URL.ndb
bofhland_phishing_URL.ndb
crdfam.clamav.hdb
phishtank.ndb
porcupine.ndb
"
--
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759
-------------- next part --------------
A non-text attachment was scrubbed...
Name: clamav-unofficial-sigs.conf.patch
Type: text/x-diff
Size: 354 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-clamav-devel/attachments/20240228/eadd4626/attachment.patch>
More information about the Pkg-clamav-devel
mailing list