Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 02 Dec 2022 14:27:45 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 268069] security/clamav: 1.0.0 does no work with cld and cvd files
Message-ID:  <bug-268069-7788-Lfew5oyg60@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-268069-7788@https.bugs.freebsd.org/bugzilla/>
References:  <bug-268069-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D268069

--- Comment #13 from fsbruva@yahoo.com ---
I am thinking this is some kind of latent dependency issue. I was able to
install, update and run clamav 1.0.0 in another 12.3-RELEASE amd64 jail on =
the
same machine. Differences are the successful jail never had clamav before, =
and
different ports installed. I will look through the clamav build logs to see=
 if
I can spot differences.

(In reply to Yasuhiro Kimura from comment #9)
> Would you please provide the result of `sha256 /var/db/clamav/*` ?

daily.cvd version: 26737
main.cld version: 62
bytecode.cld version: 333

SHA256 (/var/db/clamav/bytecode.cvd) =3D
aa5222822ba8b87cd319d9b00ef82e93b85f8c1c134b4465cad095368a0ab8b1
SHA256 (/var/db/clamav/daily.cvd) =3D
fc5e16e3862d39b9b219469cc902e7e7fbb0f70f02a86ac050ac2db08cbb1557
SHA256 (/var/db/clamav/freshclam.dat) =3D
a6343045528f703d92f40b3d7f421d01db71c6252b1f4efb69ef51486804b82d
SHA256 (/var/db/clamav/main.cvd) =3D
9520cc7827ddc5267684f2c5c7044cf2df1f62606ca81402cbeae12183763a90


user@machine:/var/db/clamav # service clamav-clamd start
Starting clamav_clamd.
LibClamAV Error: Can't load /var/db/clamav/daily.cvd: Can't verify database
integrity
LibClamAV Error: cli_loaddbdir: error loading database /var/db/clamav/daily=
.cvd
ERROR: Can't verify database integrity
/usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd

I tried running freshclam 1.0.0, and got this:

user@machine:/var/db/clamav # freshclam
ClamAV update process started at Fri Dec  2 08:58:50 2022
daily database available for update (local version: 26737, remote version:
26738)
Current database is 1 version behind.
Downloading database patch # 26738...
WARNING: [LibClamAV] CVD verification failed for: daily.cvd
ERROR: mkdir_and_chdir_for_cdiff_tmp: Can't unpack daily.cvd into
/var/db/clamav/tmp.f3e98ef3c4/clamav-2e2434f3e48000b9eac28f6f03a601ac.tmp
The database server doesn't have the latest patch for the daily database
(version 26738). The server will likely have updated if you check again in a
few hours.
main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90,
builder: sigmgr)
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63,
builder: awillia2)

Note the problem with unpacking daily.cvd.=20
I have /var/db/clamav/ owned by clamav:clamav, with 755 permissions.

I removed clamav 1.0.0, and re-installed 0.105.1_5. When I tried to start
clamav 0.105.1 with these same files, I got:

user@machine:/var/db/clamav # service clamav-clamd start
Starting clamav_clamd.
LibClamAV Error: Can't load /var/db/clamav/daily.cvd: Can't verify database
integrity
LibClamAV Error: cli_loaddbdir: error loading database /var/db/clamav/daily=
.cvd
ERROR: Can't verify database integrity
/usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd

So I ran freshclam 0.105.1, and got this:

root@condor_www:/var/db/clamav # freshclam
ClamAV update process started at Fri Dec  2 09:05:31 2022
daily database available for update (local version: 26737, remote version:
26738)
Current database is 1 version behind.
Downloading database patch # 26738...
Time:    0.3s, ETA:    0.0s [=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D>]    8.52KiB/8.52KiB
Testing database:
'/var/db/clamav/tmp.6c1cb80df0/clamav-e65ae6b9ff22c449bf0ae6fd199bcf07.tmp-=
daily.cld'
...
Database test passed.
daily.cld updated (version: 26738, sigs: 2013306, f-level: 90, builder:
raynman)
main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90,
builder: sigmgr)
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63,
builder: awillia2)

File hashes are now:
SHA256 (/var/db/clamav/bytecode.cvd) =3D
aa5222822ba8b87cd319d9b00ef82e93b85f8c1c134b4465cad095368a0ab8b1
SHA256 (/var/db/clamav/daily.cld) =3D
0aefe922fbe12376d83d8b3c0e59dcdb75c77588bd790b03879de148ecfdae6f
SHA256 (/var/db/clamav/freshclam.dat) =3D
a6343045528f703d92f40b3d7f421d01db71c6252b1f4efb69ef51486804b82d
SHA256 (/var/db/clamav/main.cvd) =3D
9520cc7827ddc5267684f2c5c7044cf2df1f62606ca81402cbeae12183763a90

And clamav 0.105.1 started successfully. Stop clamav service, deinstalled
clamav 0.105, built clamav 1.0.0 from ports, installed, and saw same error =
with
starting clamav-clamd service.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-268069-7788-Lfew5oyg60>