ClamAV 0.90.1 Released

[CoolZero]

Hi all,

Just a notice to all.

ChangeLog:
http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog

Version 0.90.1:

This release includes various bugfixes and code enhancements. Important note: please run 'ldconfig' after installing this version.

* 0.90.1 (released with JS and PST code removed)
* shared/output.c: revert patch for bb#360 (didn't work properly when mprintf() was called from logg())
* clamd/server-th.c: make more attempts when cl_load returns CL_ELOCKDB
* libclamav/blob.h: NAME_MAX is now in others.h
* shared/misc: dircopy: use 0755 permissions for new directories (fixes possible permission problems with backup directories in freshclam)
* libclamav/lockdb.c: fix handling of read locks
* shared/output.c: fix handling of special characters in mprintf (bb#360)
* libclamav/mbox.c: Fix bug 358
* libclamav/pdf.c: Fix compilation error on machines without mmap()
* libclamav/unrar/unrar.c, unrarvm.c: better fix for bb#350
* libclamav/unrar/unrar.c: skip all files inside multi-volume solid archives (but still scan their metadata)
* libclamav/pdf.c: Try with both real and calculated Length fields, since the Length object can't always be trusted Improved backing out of unhandled formats (e.g. Predictor for images and embedded fonts)
* libclamav/unrar/unrar.c: improve handling of multi-volume archives: do not report CL_ESUPPORT, instead scan all complete files and do full metadata scan
* libclamav/others.h: update NAME_MAX block and add workaround for HP-UX (bb#367)
* libclamav/unrar/unrar.c: fix leak in cli_unrar_extract_next_prepare (bb#352)
* libclamav/unrar/unrar.c: fix rarvm memory leak (bb#350)
* libclamav/filetypes.c: comment out dead code (see bb#373), spotted by "alex"
* shared: merge win32 patches from NJH
* drop shared/memory.[ch]
* libclamav: minor cleanup (bb#247)
* libclamav/petite.c: invalid read in valgrind (bb#369)
* libclamav/pe.c: minor cleanup (bb#247)
* libclamav/scanners.c: fix small memory leak (bb#359)
* libclamav/pe.c: fix leaks on upack return (bb#351)
* libclamav/unzip.c: fix memory leak when extracting stored files
* libclamav/readdb.c,lockdb.c: merge win32 patches from NJH
* clamscan: merge win32 patches from NJH
* libclamav/pdf.c: Remove warning on FreeBSD4.11
* clamscan, clamdscan, clamconf: compile with CL_NOTHREADS defined
* libclamav: fix memory leaks in db handling code
* libclamav/mbox.c: Fix confusion when recursing to multipart/related
* configure, libclamav: add support for HP-UX 11.11 with native compiler (bb#180)
* configure: use -pthread also for FreeBSD 6.x
* libclamav/untar.c: Added extra functionality (bug 269) - based on patches from Andy Fiddaman
* clamav-milter/clamav-milter.c: Fix compilation error on Solaris (bug 347)
* clamd/scanner.c: fix compilation error on Solaris (bb#341)
* libclamav/mbox.c: Handle wide characters on Windows
* libclamav/tnef.c: Remove warning messages
* freshclam: merge win32 patches from NJH
* clamd/clamd.c: print some more information in Foreground mode (bb#317)
* shared/misc.c: drop rmdirs() and use cli_rmdirs() instead
* libclamav: new scan setting CL_SCAN_PDF
* clamd: new option ScanPDF (default: no)
* clamscan: new switch --no-pdf (PDF scanning enabled by default)
* docs: update
* libclamav: s/sanitiseFilename/cli_sanitise_filename/, patch from trog Changed some strdup to cli_strdup
* clamd: handle signals while polling in select mode
* clamav-milter/clamav-milter.c: Fix typo
* shared/misc.c: daemonize: don't re-utilize descriptor 0
* clamd: handle signals while polling the sockets in the main loop (bb#320)
* clamav-milter/clamav-milter.c: Better recovery when a remote clamd goes down
* libclamav/message.c: Better warning message, bug 311
* libclamav/pst.c: Include upstream patches
* libclamav/mbox.c: Fix bug 326, reported by Edvin
* clamav-milter/clamav-milter.c: Use logg() functions instead of syslog. Needed for code tidy, and also possibly fixes bug 332.
* libclamav/entconv.c: don't cache iconv_open() failures. (bb #329)
* configure: fix compilation errors on FreeBSD (bb#306)
* configure: add support for osf/tru64
* clamd: merge multiscan() with dirscan() (also closes bb#302)
* libclamav/others.c: increase f-level to activate RTF extractor
* clamd, clamconf: merge win32 patches from NJH
* libclamav/unrar: allow for sparc aligned access requirements (bb#304)
* libclamav/sis.c: improve debug messages
* libclamav/pe.c: improved broken detection - closes bb#305
* libclamav/lockdb.c: win32 fix (bb#255)
* libclamav/phish_*.c, regex_list.c: Remove obsolete $Log$ keyword.
* libclamav/filetypes.c: add more tags to HTML rule set (bb#218)
* libclamav/unzip.c: handle some deflate64 compressed files
* libclamav/entconv.c: Don't normalize buffer shorter than 2 bytes.
* libclamav/rtf.c: Fix possible memory leak, and add more sanity checks.
* libclamav/rtf.c: Don't spin on on cli_readn (bb#312) - patch from Edvin
* libclamav/regex_list.c: Close #303 - patch from Edvin
* libclamav/clamav-milter.c: Added support for sendmail 8.14, bug 267, patch from Andy Fiddaman
* libclamav/rtf.c: add more sanity checks (Edwin)
* freshclam/manager.c: fix warning message (bb#292)
* libclamav/mbox.c: Fixed bugs in the handling of boundary lines Improved handling of the warning messages associated with recursion limits Fixed handling of OK_ATTACHMENTS_NOT_SAVED in some larger files
* libclamav/entconv.c: fix incorrect use of isspace() in experimental code
* libclamav: fix some debug messages
* libclamav/mbox.c: Fix BeOS link error
* libclamav/phishcheck.c: Fix warning message, patch from Edvin
* libclamav/mbox.c,phishcheck.c: Fix compilation errors on BeOS

Many fixes, including for the FreeBSD users, witch really had some major problems with release of 0.90.

[@how@]

Thanks, update work fine.


Wael

[Imtek]

No upgrade problems here on CentOS 4.4, thanks CoolZero :cool:

[JDiel]

I still have problems (de)installing / updating ClamAV on Debian. Is there anyone out there using Debian and knows how to do this? I'd personally like to de-install ClamAV and reinstall 0.90.1.

Any suggestions are welcome.

Regards, Jeroen.

[CentOS5]

Hi

upgraded clamav to lastest in port and it seems to crash after about 30 min, have to kill process and restart or mail stops working as well, now removed clamav from exim.conf and stopped it, anyone else seen this, its the same on 3 servers i have. :mad:

[@how@]

try update script
will add clamd to services.status with clamd service.


Wael

[Icheb]

I still have problems (de)installing / updating ClamAV on Debian. Is there anyone out there using Debian and knows how to do this? I'd personally like to de-install ClamAV and reinstall 0.90.1.

Any suggestions are welcome.

Regards, Jeroen.

Try it with Debian's volitile repository.
Works fine here, however, had to manually update the clamav config...

[JDiel]

Thanks :) This worked just fine!

Regards, Jeroen.

[CoolZero]

Hi

upgraded clamav to lastest in port and it seems to crash after about 30 min, have to kill process and restart or mail stops working as well, now removed clamav from exim.conf and stopped it, anyone else seen this, its the same on 3 servers i have. :mad:

I had this too, witch port revision do you have?

This one:

http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/clamav/Makefile

0.90.1_1

Notice to _1

Should be running fine, I have this running on 30 servers now, without problems so far.

Then when upgraden remember to do:

portupgrade -R clamav

If you use portupgrade of course... ;)

Many users had issues, but most is because of old and outdated FreeBSD versions.

[Chrysalis]

to freebsd users a workaround that works well is to make clamav listen on local tcp port rather then using socket which is more efficient as well.

On freebsd 6.x and possibly 5.x also try using libthr instead of libpthread which helps greatly in reducing thread problems.

[rldev]

I get the follwoing errors using the update script:

Resolving tools.web4host.net... 69.41.170.217
Connecting to tools.web4host.net|69.41.170.217|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
09:01:02 ERROR 404: Not Found.

error: open of ./web4host.net-clamav.i386.rpm failed: No such file or directory
ERROR: Parse error at line 34: Option LogTime requires boolean argument.
ERROR: Can't open/parse the config file /etc/clamd.conf
ClamAV update process started at Wed Mar 21 09:01:02 2007
main.inc is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm)

daily.inc updated (version: 2892, sigs: 17199, f-level: 14, builder: sven)
Database updated (101150 signatures) from db.local.clamav.net (IP: 206.154.202.213)
freshclam: no process killed
ERROR: Parse error at line 34: Option LogTime requires boolean argument.
ERROR: Can't open/parse the config file /etc/clamd.conf

I wonder if I have conflicting versions. Should I remove all clam instances and start from scratch?

_____________________________

I fixed this up however the all in 1 script overwrote my /etc/clamd.conf

[CoolZero]

I get the follwoing errors using the update script:

Resolving tools.web4host.net... 69.41.170.217
Connecting to tools.web4host.net|69.41.170.217|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
09:01:02 ERROR 404: Not Found.

error: open of ./web4host.net-clamav.i386.rpm failed: No such file or directory
ERROR: Parse error at line 34: Option LogTime requires boolean argument.
ERROR: Can't open/parse the config file /etc/clamd.conf
ClamAV update process started at Wed Mar 21 09:01:02 2007
main.inc is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm)

daily.inc updated (version: 2892, sigs: 17199, f-level: 14, builder: sven)
Database updated (101150 signatures) from db.local.clamav.net (IP: 206.154.202.213)
freshclam: no process killed
ERROR: Parse error at line 34: Option LogTime requires boolean argument.
ERROR: Can't open/parse the config file /etc/clamd.conf

I wonder if I have conflicting versions. Should I remove all clam instances and start from scratch?

_____________________________

I fixed this up however the all in 1 script overwrote my /etc/clamd.conf

You are using this on FreeBSD? Just don't do that and use ports. This is much more stable.

[rldev]

no I'm using RHE3.

[Thomanji]

Hi,

I get an error when trying to run a virus scan from a virus scan for a file or directory. Please see blow:

[root@server root]# /usr/bin/clamdscan --quiet /usr/bin/php
ERROR: Parse error at line 34: Option LogTime requires boolean argument.

I would be very appreciative if anyone could assist me or give me some pointers on how to resolve this since it is a big impact to me since all files uploads use this to scan the files users upload.

I run RH ES3 on Apache 2.x and of course the latest clam av.

I hope you can help me.
Thom :confused:

[TeraSoft]

Got this error, using the update.script to update:
ClamAV update process started at Tue Apr 3 08:57:46 2007
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm)
daily.inc is up to date (version: 3005, sigs: 21514, f-level: 14, builder: ccordes)
LibClamAV Error: Database Directory: /usr/local/share/clamav not locked


ClamAV install/update done
[root@linux ~]#

[albatroz]

I am getting this same error ...
However everything was working fine ... until now

LibClamAV Error: Database Directory: /usr/local/share/clamav not locked

[CoolZero]

Have you tried the latest update? Because some major things are fixed there.

[albatroz]

I have noticed that regardless the error message... clamav is working fine

[modem]

I've never used ClamAV before and before I install it my questions are...

1.) Do I have to modify the exim.conf for exim to recognize ClamAV service?
2.) Are emails with viruses automatically deleted/rejected/forwarded to the user?
3.) What is the impact on memory/CPU for a dual P3 966mhz 2gb ram system that handles 5-10k emails a day?

[DutchTSE]

I've never used ClamAV before and before I install it my questions are...

1.) Do I have to modify the exim.conf for exim to recognize ClamAV service?
2.) Are emails with viruses automatically deleted/rejected/forwarded to the user?
3.) What is the impact on memory/CPU for a dual P3 966mhz 2gb ram system that handles 5-10k emails a day?
1. yes you have to add some rules
2. yes - deleted
3. dont really know the numbers, it is not that much, spamassassin takes more in my opinion

[jlasman]

You might want to look at the SpamBlocker3 version of DirectAdmin's exim.conf file; it works with a version of ClamAV to refuse to accept emails containing viruses. And it's designed to be very effective at memory efficiency and CPU load.

Look here (http://www.nobaloney.net/downloads/spamblocker/DirectAdminSpamBlocker3/) for more information. If you decide to use it you should carefully read all the help and README files to determine what changes you have to make to your system so it'll work.

Jeff

[-Tavo-]

Hello.
1º: I don't speak english very well because I'm from Argentina. I'm sorry.

I'm traying to install mailscanner working with ClamAV 0.90.1 (deamon) in Debian, but I have a problem. When clamav-wrapper call to clamd, it return 2 in $retval. The complete command line is "/usr/bin/clamdscan --no-summary --stdout"....and the Clamd don't check the files atached in the mails.

Any idea ???? Please helpme!!!....Thanks !!!!!!!!!!!


Thi is my clamav-wrapper:

###### IF YOU ARE RUNNING MAILSCANNER AS ROOT ######
# You need to set the following in MailScanner.conf so that external
# unpackers can be used...
# Incoming Work Group = clamav
# Incoming Work Permissions = 0640

#ClamUser="clamav"
#ClamGroup="clamav"

ScanOptions=""

ClamdScan=$1/bin/clamdscan
shift

if [ ! -x $ClamdScan ]; then
ClamdScan=/usr/bin/clamdscan
fi

if [ "x$1" = "x-IsItInstalled" ]; then
[ -x $ClamdScan ] && exit 0
exit 1
fi

# Add this for Solaris users so they can find whoami
#PATH=$PATH:/usr/ucb
#export PATH

$ClamdScan $ScanOptions "$1 "
retval=$?

echo "$ClamdScan $ExtraScanOptions $ScanOptions "$@"" >> /tmp/test.log
echo "Retval: $retval" >> /tmp/test.log

exit $retval





and write this /tmp/test.log:

/usr/bin/clamdscan --no-summary --stdout .
Retval: 2

[nailz]

I am getting this same error ...
However everything was working fine ... until now

LibClamAV Error: Database Directory: /usr/local/share/clamav not locked

Try removing the database lockfile:
rm /usr/local/share/clamav/.dbLock (or where yours is located, should be in the dir where the db is) and then restart clam.

[Duboux]

Why don't I see the email address the virus-email was going to ?

2007-08-03 19:48:19 1IH1BU-0002If-79 H=([212.36.195.206]) [212.36.195.206] F=<valdemar.dallimore@johncampbellbuilders.com> rejected after DATA: This message contains a virus or other harmful content (Trojan.Downloader-12155)
2007-08-03 16:55:40 1IGyZ2-0001Ve-6X H=gfiservers.gfi.com (S44374) [69.20.55.130] F=<emailtesting@gfi.com> rejected after DATA: This message contains a virus or other harmful content (GFI.VBS.Test)

[ah24]

On centos 4.4 still errors after instalation clamav:
I was install clamav from this post:
http://www.directadmin.com/forum/showthread.php?t=12099&highlight=clam


./update.script CLAMAV

at the end of install clamav:

./update.script: line 591: /usr/local/sbin/clamd: no such file or directory
./update.script: line 591: /usr/local/bin/freshclam: no such file or directory
clamd: no process killed
freshclam: no process killed
./update.script: line 591: /usr/local/bin/freshclam: no such file or directory
./update.script: line 591: /usr/local/sbin/clamd: no such file or directory
ClamAV auto start when server reboot
clamd: no process killed
freshclam: no process killed
./update.script: line 617: /usr/local/bin/freshclam: no such file or directory
./update.script: line 617: /usr/local/sbin/clamd: no such file or directory

[Chrysalis]

what does 'which clamd' show?

[ah24]

Hi Chrysalis look at my last post in http://www.directadmin.com/forum/showthread.php?t=10478&page=5&highlight=clam

[Chrysalis]

look at what? it doesnt answer my question.

[ah24]

On centos 4.4 still errors after instalation clamav:
I was install clamav from this post:
http://www.directadmin.com/forum/sho...highlight=clam


./update.script CLAMAV

at the end of install clamav:


Quote:
./update.script: line 591: /usr/local/sbin/clamd: no such file or directory
./update.script: line 591: /usr/local/bin/freshclam: no such file or directory
clamd: no process killed
freshclam: no process killed
./update.script: line 591: /usr/local/bin/freshclam: no such file or directory
./update.script: line 591: /usr/local/sbin/clamd: no such file or directory
ClamAV auto start when server reboot
clamd: no process killed
freshclam: no process killed
./update.script: line 617: /usr/local/bin/freshclam: no such file or directory
./update.script: line 617: /usr/local/sbin/clamd: no such file or directory"


and during restart clamd procss i have this: ((

[admin@ah24 ~]$ /etc/init.d/clamd restart
/etc/init.d/clamd: line 32: Killall: command not found
cat: /var/run/clamd.pid: no such file or directory
kill: usage: kill [-s sigspec | -n signum | -sigspec] [pid | job]... or kill -l [sigspec]


SupermanInNY, I exactly have this path /usr/local/updatescript
Problem is in file update.script. There are many errors with links
Is:
ln -s /etc/init.d/freshclam /sbin/freshclam
Should be:
ln -s /etc/init.d/freshclam /usr/local/bin/freshclam

Is:
ln -s /etc/init.d/clamd /sbin/clamd
Should be:
ln -s /etc/init.d/clamd /usr/local/sbin/clamd


DA says clamd cant start.

[jlasman]

Your link has an error in it and it doesn't work.

The last time I installed clamav was yesterday; I used the instructions found here (http://www.directadmin.com/forum/showthread.php?threadid=10478).

It worked.

Jeff

[ah24]

i have this errors during make this: ./configure --sysconfdir=/etc && make && make install
instructions ofcorse from: http://www.directadmin.com/forum/showthread.php?threadid=10478



config.status: creating docs/man/freshclam.conf.5
config.status: creating docs/man/sigtool.1
config.status: creating clamav-config.h
config.status: executing depfiles commands
make all-recursive
make[1]: Entering directory `/usr/local/updatescript/clamav-0.91.1'
Making all in libclamav
make[2]: Entering directory `/usr/local/updatescript/clamav-0.91.1/libclamav'
if /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-ac.lo -MD -MP -MF ".deps/matcher-ac.Tpo" -c -o matcher-ac.lo matcher-ac.c; \
then mv -f ".deps/matcher-ac.Tpo" ".deps/matcher-ac.Plo"; else rm -f ".deps/matcher-ac.Tpo"; exit 1; fi
mkdir .libs
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-ac.lo -MD -MP -MF .deps/matcher-ac.Tpo -c matcher-ac.c -fPIC -DPIC -o .libs/matcher-ac.o
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-ac.lo -MD -MP -MF .deps/matcher-ac.Tpo -c matcher-ac.c -o matcher-ac.o >/dev/null 2>&1
if /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-bm.lo -MD -MP -MF ".deps/matcher-bm.Tpo" -c -o matcher-bm.lo matcher-bm.c; \
then mv -f ".deps/matcher-bm.Tpo" ".deps/matcher-bm.Plo"; else rm -f ".deps/matcher-bm.Tpo"; exit 1; fi
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-bm.lo -MD -MP -MF .deps/matcher-bm.Tpo -c matcher-bm.c -fPIC -DPIC -o .libs/matcher-bm.o
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-bm.lo -MD -MP -MF .deps/matcher-bm.Tpo -c matcher-bm.c -o matcher-bm.o >/dev/null 2>&1
if /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-ncore.lo -MD -MP -MF ".deps/matcher-ncore.Tpo" -c -o matcher-ncore.lo matcher-ncore.c; \
then mv -f ".deps/matcher-ncore.Tpo" ".deps/matcher-ncore.Plo"; else rm -f ".deps/matcher-ncore.Tpo"; exit 1; fi
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-ncore.lo -MD -MP -MF .deps/matcher-ncore.Tpo -c matcher-ncore.c -fPIC -DPIC -o .libs/matcher-ncore.o
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher-ncore.lo -MD -MP -MF .deps/matcher-ncore.Tpo -c matcher-ncore.c -o matcher-ncore.o >/dev/null 2>&1
if /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher.lo -MD -MP -MF ".deps/matcher.Tpo" -c -o matcher.lo matcher.c; \
then mv -f ".deps/matcher.Tpo" ".deps/matcher.Plo"; else rm -f ".deps/matcher.Tpo"; exit 1; fi
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher.lo -MD -MP -MF .deps/matcher.Tpo -c matcher.c -fPIC -DPIC -o .libs/matcher.o
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./unrar -I./nsis -I/usr/local/include -g -O2 -MT matcher.lo -MD -MP -MF .deps/matcher.Tpo -c matcher.c -o matcher.o >/dev/null 2>&1 (CTRL+C)
make[2]: *** [matcher.lo] error 1
make[1]: *** [all-recursive] interrrupt
make: *** [all] interrupt



I have:
db4-4.2.52-7.1
db4-devel-4.2.52-7.1