April 17, 2010

ClamAV 0.94 end of life

So - I was greeted today with a mail queue pilling up and the ClamAV daemon crashing

[email protected]:/# /etc/init.d/clamav-daemon start Starting ClamAV daemon: clamd LibClamAV Warning: *********************************************************** LibClamAV Warning: ***  This version of the ClamAV engine is outdated.     *** LibClamAV Warning: *** DON’T PANIC! Read http://www.clamav.net/support/faq *** LibClamAV Warning: *********************************************************** LibClamAV Error: cli_hex2str(): Malformed hexstring: This ClamAV version has reached End of Life! Please upgrade to version 0.95 or later. For more information see  www.clamav.net/eol-clamav-094 and www.clamav.net/download (length: 169) LibClamAV Error: Problem parsing database at line 742 LibClamAV Error: Can’t load /tmp/clamav-fc828b33b2c147c0486f8abb160d930e/daily.ndb: Malformed database LibClamAV Error: Can’t load /var/lib/clamav/daily.cvd: Malformed database ERROR: Malformed database

Yes, ClamAV end of life was announced in October last year but what escaped me was that since 15 April 2010, the CVD would contain a signature to disable your ClamAV install - so much to force you to upgrade :)

So on the run what do you do? Well clearly, delete the daily.cvd file and stop freshclamav to download the new signature.

[email protected]:/# /etc/init.d/clamav-freshclam stop && rm /var/lib/clamav/daily.cvd [email protected]:/# /etc/init.d/clamav-daemon start Starting ClamAV daemon: clamd LibClamAV Warning: *********************************************************** LibClamAV Warning: ***  This version of the ClamAV engine is outdated.     *** LibClamAV Warning: *** DON’T PANIC! Read http://www.clamav.net/support/faq *** LibClamAV Warning: *********************************************************** . [email protected]:/#

We are now back in business - note this is just a “on the run” solution and I would clearly need to upgrade the client now to 0.95

What about that postfix mail queue?

[email protected]:/# postsuper -r ALL && postqueue -f

Cheers,

Ali