Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 Feb 2011 09:23:17 GMT
From:      Michael Scheidell <scheidell@secnap.net>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/154608: security/clamav 0.97 does not recognize old database?
Message-ID:  <201102090923.p199NHAP044433@red.freebsd.org>
Resent-Message-ID: <201102090930.p199UCeq077877@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         154608
>Category:       ports
>Synopsis:       security/clamav 0.97 does not recognize old database?
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Feb 09 09:30:12 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Michael Scheidell
>Release:        7.3 amd
>Organization:
SECNAP Network Security
>Environment:
7.3 amd64 release-p1
>Description:
running clamav with 'extra' signatures via clamav-unofficial sigs.
updates portstree, then rebuilt and reinstelled clamav:

portsnap fetch update
service clamav-clamd stop
service clamav-freshclam stop

portupgrade -p clamav
service clamav-clamd start

got this:
Starting clamav_clamd.
LibClamAV Error: cli_loadhash: Invalid value for the size field
LibClamAV Error: cli_loadhash: Problem parsing database at line 13624
LibClamAV Error: Can't load /var/db/clamav/securiteinfohtml.hdb: Malformed database
ERROR: Malformed database

no fix (sorry) no patch yet, but thought it should be documented to avoid any mail server outages.

possible fix? wipe out /var/db/clamav and rebuild first?

will test in sandbox later.

>How-To-Repeat:

portsnap fetch update
service clamav-clamd stop
service clamav-freshclam stop

portupgrade -p clamav
service clamav-clamd start

clamscan same thing:

clamscan MegaSAS.log
LibClamAV Error: cli_loadhash: Invalid value for the size field
LibClamAV Error: cli_loadhash: Problem parsing database at line 13624
LibClamAV Error: Can't load /var/db/clamav/securiteinfohtml.hdb: Malformed database
ERROR: Malformed database


>Fix:
? remove securitieinfohtml.hdb?
is it a clamav problem? or securitie?

 rm /var/db/clamav/securiteinfohtml.hdb
clamscan MegaSAS.log
MegaSAS.log: OK


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201102090923.p199NHAP044433>