Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power


#Servers
#Opensource
 View Only
Back to discussions
Expand all | Collapse all

New version of ClamAV needed

  • 1.  New version of ClamAV needed

    Posted 02/10/22 09:13 AM
    Receiving Warnings that ClamAV is out of date when updating the ClamAV database but the system is running the latest version in the AIX Toolbox.

    Please update the version of ClamAV in the AIX Toolbox.

    # /opt/freeware/bin/freshclam -F
    ClamAV update process started at Thu Feb 10 08:04:05 2022
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.102.2 Recommended version: 0.103.5
    DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav

    root@awx:/home #/opt/freeware/bin/dnf info clamav
    Last metadata expiration check: 0:11:10 ago on Thu Feb 10 07:44:23 CST 2022.
    Installed Packages
    Name : clamav
    Version : 0.102.2
    Release : 1
    Architecture : ppc
    Size : 16 M
    Source : clamav-0.102.2-1.src.rpm
    Repository : @System
    From repo : AIX_Toolbox
    Summary : Antivirus Toolkit
    URL : http://www.clamav.net
    License : GPL-2.0-only
    Description : ClamAV is an antivirus engine designed for detecting trojans,
    : viruses, malware and other malicious threats. It is the de-facto
    : standard for mail gateway scanning. It provides a multi-threaded
    : scanning daemon, command line utilities for on-demand file scanning,
    : and a tool for automatic signature updates. The core ClamAV library
    : provides numerous file format detection mechanisms, file unpacking
    : support, archive support, and multiple signature languages for
    : detecting threats.

    Thank you for your help!

    Stan

    ------------------------------
    Stanley
    ------------------------------

    #AIXOpenSource


  • 2.  RE: New version of ClamAV needed

    Posted 02/10/22 09:49 AM
    Thanks for reporting. We will update it ASAP.

    ------------------------------
    Ayappan P
    ------------------------------



  • 3.  RE: New version of ClamAV needed

    Posted 03/09/22 06:16 AM
    Do you have an ETA for the delivery of version 0.103 to the AIX Toolbox

    ------------------------------
    Hector Speight
    ------------------------------

    Original Message


  • 4.  RE: New version of ClamAV needed

    Posted 03/14/22 01:16 PM
    The new version of ClamAV has new dependencies so it is taking time for us.
    We are working on the building new dependencies and newer version of package.
    Also there are some internal process. Our target is by end of this month or early next month.

    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 5.  RE: New version of ClamAV needed

    Posted 03/14/22 01:32 PM
    Thanks for the update

    ------------------------------
    Hector Speight
    ------------------------------

    Original Message


  • 6.  RE: New version of ClamAV needed

    Posted 05/02/22 09:14 AM
    Can we have an update on the release date of a new version of ClamAV?

    Thank you!

    Stan Speegle

    ------------------------------
    Stanley
    ------------------------------

    Original Message


  • 7.  RE: New version of ClamAV needed

    Posted 05/04/22 11:50 AM
    Hi Stanley, 
    We have built the new ClamAV and will upload in couple of days. 
    Hopefully you will have it by end of this week.

    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 8.  RE: New version of ClamAV needed

    Posted 05/09/22 03:46 AM
    clamav-0.104.2-1 is now available on AIX toolbox. You can use dnf/yum to update to latest level.

    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 9.  RE: New version of ClamAV needed

    Posted 05/12/22 01:53 PM
    Thank you for the new version of clamav. It installed with out any issues but I am receiving out of memory errors when scanning some files.

    Have you seen this issue before? The LPAR has plenty of RAM 10GB and there are no errors in the errpt.

    root@mh-p9-nim:/tmp #/opt/freeware/bin/clamscan -rv /opt/freeware/lib64/python3.7/ensurepip/_bundled/
    Loading: 16s, ETA: 0s [========================>] 8.62M/8.62M sigs
    Compiling: 6s, ETA: 0s [========================>] 41/41 tasks

    Scanning /opt/freeware/lib64/python3.7/ensurepip/_bundled/pip-20.1.1-py2.py3-none-any.whl
    calloc_problem: Not enough space
    LibClamAV Error: cli_calloc(): Can't allocate memory (60126208 bytes).
    LibClamAV Error: cli_ac_init: Can't allocate memory for data->lsigsuboff_(last|first)[0]
    /opt/freeware/lib64/python3.7/ensurepip/_bundled/pip-20.1.1-py2.py3-none-any.whl: Can't allocate memory ERROR
    Scanning /opt/freeware/lib64/python3.7/ensurepip/_bundled/setuptools-47.1.0-py3-none-any.whl
    calloc_problem: Not enough space
    LibClamAV Error: cli_calloc(): Can't allocate memory (60126208 bytes).
    LibClamAV Error: cli_ac_init: Can't allocate memory for data->lsigsuboff_(last|first)[0]
    /opt/freeware/lib64/python3.7/ensurepip/_bundled/setuptools-47.1.0-py3-none-any.whl: Can't allocate memory ERROR

    ----------- SCAN SUMMARY -----------
    Known viruses: 8616419
    Engine version: 0.104.2
    Scanned directories: 1
    Scanned files: 0
    Infected files: 0
    Total errors: 2
    Data scanned: 6.65 MB
    Data read: 1.97 MB (ratio 3.37:1)
    Time: 30.898 sec (0 m 30 s)

     These could just be normal errors on these files but I would like to know why,

    Thank you,

    Stan

    ------------------------------
    Stanley
    ------------------------------

    Original Message


  • 10.  RE: New version of ClamAV needed

    Posted 05/13/22 01:51 AM
    While running on my system I did not see any issue.
    It could be that in your system it needs to allocate more memory and probably ulimit is not enough.
    Can you try setting ulimit of data to unlimited and test.

    $ ulimit -d unlimited 


    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 11.  RE: New version of ClamAV needed

    Posted 05/13/22 04:54 AM
    Sanket,

    Many thanks for the updated clamAV which I've installed without any issues.

    When running clamscan, however, I'm getting an "Invalid instruction" message, please see below.

    Scanning /opt/freeware/bin/yumdownloader
/opt/freeware/bin/yumdownloader: OK
/opt/freeware/bin/zcat: Symbolic link
/opt/freeware/bin/zcmp: Symbolic link
/opt/freeware/bin/zdiff: Symbolic link
/opt/freeware/bin/zegrep: Symbolic link
/opt/freeware/bin/zfgrep: Symbolic link
/opt/freeware/bin/zforce: Symbolic link
/opt/freeware/bin/zgrep: Symbolic link
Scanning /opt/freeware/bin/zip
Illegal instruction(coredump)
# oslevel -s
7100-05-07-2038
# freeware/bin/clamscan -V
ClamAV 0.104.2/26539/Thu May 12 04:04:41 2022
#​

    Let me know if you need any additional info.

    Many thanks, Steve

    #AIXOpenSource


  • 12.  RE: New version of ClamAV needed

    Posted 05/16/22 01:34 PM
    Hi Steve,
    Can you please come up with a smaller test case or instruction to reproduce issue.
    On my system I could not find issue when scanning zip
    ​
    
# ls -l /opt/freeware/bin/zip
-rwxr-xr-x    1 root     system       243733 Nov 28 2019  /opt/freeware/bin/zip


# /opt/freeware/bin/clamscan -rv /opt/freeware/bin/zip
Loading:    21s, ETA:   0s [========================>]    8.62M/8.62M sigs
Compiling:   5s, ETA:   0s [========================>]       41/41 tasks

Scanning /opt/freeware/bin/zip
/opt/freeware/bin/zip: OK

----------- SCAN SUMMARY -----------
Known viruses: 8616419
Engine version: 0.104.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.48 MB
Data read: 0.23 MB (ratio 2.07:1)
Time: 27.244 sec (0 m 27 s)
Start Date: 2022:05:16 12:23:05
End Date:   2022:05:16 12:23:32


#​


    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 13.  RE: New version of ClamAV needed

    Posted 05/17/22 09:54 AM
    Hi Steve, 
    We are not able to recreate your issue. 
    Can you use --debug option, probably that will provide some details about the issue.

    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 14.  RE: New version of ClamAV needed

    Posted 05/17/22 12:25 PM
    Sanket,

    Here's the final section of the --debug.

    LibClamAV debug: Checking realpath of /opt/freeware/bin/yumdownloader
Scanning /opt/freeware/bin/yumdownloader
LibClamAV debug: Recognized ASCII text
LibClamAV debug: cache_check: 521c0049290d5f1109bbcacf312a2a39 is negative
LibClamAV debug: matcher_run: performing regex matching on full map: 0+13476(13476) >= 13476
LibClamAV debug: hashtab: Freeing hashset, elements: 0, capacity: 0
LibClamAV debug: in cli_scanscript()
LibClamAV debug: matcher_run: performing regex matching on full map: 0+9959(9959) >= 9959
LibClamAV debug: matcher_run: performing regex matching on full map: 0+9959(9959) >= 9959
LibClamAV debug: hashtab: Freeing hashset, elements: 0, capacity: 0
LibClamAV debug: hashtab: Freeing hashset, elements: 0, capacity: 0
LibClamAV debug: cli_magic_scan_desc: returning 0  at line 4857
LibClamAV debug: cache_add: 521c0049290d5f1109bbcacf312a2a39 (level 0)
/opt/freeware/bin/yumdownloader: OK
/opt/freeware/bin/zcat: Symbolic link
/opt/freeware/bin/zcmp: Symbolic link
/opt/freeware/bin/zdiff: Symbolic link
/opt/freeware/bin/zegrep: Symbolic link
/opt/freeware/bin/zfgrep: Symbolic link
/opt/freeware/bin/zforce: Symbolic link
/opt/freeware/bin/zgrep: Symbolic link
LibClamAV debug: Checking realpath of /opt/freeware/bin/zip
Scanning /opt/freeware/bin/zip
LibClamAV debug: Recognized binary data
LibClamAV debug: cache_check: 30cd9c5d5aab19d33065757272ed4456 is negative
LibClamAV debug: in cli_check_mydoom_log()
LibClamAV debug: Matched signature for file type ZIP-SFX at 213500
LibClamAV debug: matcher_run: performing regex matching on full map: 123072+120661(243733) >= 243733
LibClamAV debug: hashtab: Freeing hashset, elements: 0, capacity: 0
LibClamAV debug: CL_TYPE_ZIPSFX signature found at 213500
LibClamAV debug: in cli_unzip_single
LibClamAV debug: cli_unzip: local header - ZMDNAME:0:archive?  (y/n): :1680696684:1735289203:20612073:29513:0:1
LibClamAV debug: CDBNAME:CL_TYPE_ZIP:1735289203:archive?  (y/n): :1735289203:1680696684:0:0:543236211:0
LibClamAV debug: cli_unzip: local header - extra out of file
PuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYP