Your message dated Sat, 02 Sep 2023 12:17:13 +0000 with message-id <[email protected]> and subject line Bug#1044136: fixed in clamav 1.0.2+dfsg-1~deb12u1 has caused the Debian Bug report #1044136, regarding clamav-daemon: The server delivers "4.7.1 Tempfail- internal scan engine error" when sending with file attachments to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 1044136: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1044136 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: clamav-daemon Version: 1.0.1+dfsg-2 Severity: important Dear Maintainer, * What led up to the situation? Upgrading the dist from Debian 11 to Debian 12 results in the Clamav daemon being executable but not running: root@mx ~ # netstat -tulips | fgrep clamd => no output! * What exactly did you do (or not do) that was effective (or ineffective)? In this edition systemctl status clamav-daemon.service ● clamav-daemon.service - Clam AntiVirus userspace daemon Loaded: loaded (/lib/systemd/system/clamav-daemon.service; enabled; preset: enabled) Drop in: /etc/systemd/system/clamav-daemon.service.d └─extend.conf Active: active (running) since Fri 2023-08-11 10:13:54 CEST; 1h 35min ago TriggeredBy: ● clamav-daemon.socket Docs: man:clamd(8) man:clamd.conf(5) https://docs.clamav.net/ ... you can clearly see that the service is triggered by the associated socket! This was not the case with Debian Linux Bullseye! The only currently working solution is this: systemctl disable --now clamav-daemon.socket systemctl enable --now clamav-daemon.service For only one system upgrade, that's pretty sloppy. Why do I need the socket here if it runs better without it? -- Package-specific info: --- configuration --- Checking configuration files in /etc/clamav Config file: clamd.conf ----------------------- AlertExceedsMax disabled PreludeEnable disabled PreludeAnalyzerName = "ClamAV" LogFile = "/var/log/clamav/clamav.log" LogFileUnlock disabled LogFileMaxSize = "4294967295" LogTime = "yes" LogClean disabled LogSyslog disabled LogFacility = "LOG_LOCAL6" LogVerbose disabled LogRotate = "yes" ExtendedDetectionInfo = "yes" PidFile disabled TemporaryDirectory disabled DatabaseDirectory = "/var/lib/clamav" OfficialDatabaseOnly disabled LocalSocket = "/var/run/clamav/clamd.ctl" LocalSocketGroup = "clamav" LocalSocketMode = "666" FixStaleSocket = "yes" TCPSocket = "3310" TCPAddr = "127.0.0.1" MaxConnectionQueueLength = "15" StreamMaxLength = "26214400" StreamMinPort = "1024" StreamMaxPort = "2048" MaxThreads = "12" ReadTimeout = "180" CommandReadTimeout = "30" SendBufTimeout = "200" MaxQueue = "100" IdleTimeout = "30" ExcludePath disabled MaxDirectoryRecursion = "15" FollowDirectorySymlinks disabled FollowFileSymlinks disabled CrossFilesystems = "yes" SelfCheck = "3600" ConcurrentDatabaseReload = "yes" DisableCache disabled VirusEvent disabled ExitOnOOM disabled AllowAllMatchScan = "yes" Foreground disabled Debug disabled LeaveTemporaryFiles disabled GenerateMetadataJson disabled User = "clamav" Bytecode = "yes" BytecodeSecurity = "TrustSigned" BytecodeTimeout = "60000" BytecodeUnsigned disabled BytecodeMode = "Auto" DetectPUA disabled ExcludePUA disabled IncludePUA disabled ScanPE = "yes" ScanELF = "yes" ScanMail = "yes" ScanPartialMessages disabled PhishingSignatures = "yes" PhishingScanURLs = "yes" HeuristicAlerts = "yes" HeuristicScanPrecedence disabled StructuredDataDetection disabled StructuredMinCreditCardCount = "3" StructuredMinSSNCount = "3" StructuredSSNFormatNormal = "yes" StructuredSSNFormatStripped disabled ScanHTML = "yes" ScanOLE2 = "yes" AlertBrokenExecutables disabled AlertBrokenMedia disabled AlertEncrypted = "yes" StructuredCCOnly disabled AlertEncryptedArchive = "yes" AlertEncryptedDoc = "yes" AlertOLE2Macros disabled AlertPhishingSSLMismatch disabled AlertPhishingCloak disabled AlertPartitionIntersection disabled ScanPDF = "yes" ScanSWF = "yes" ScanXMLDOCS = "yes" ScanHWP3 = "yes" ScanArchive = "yes" ForceToDisk disabled MaxScanTime = "120000" MaxScanSize = "104857600" MaxFileSize = "26214400" MaxRecursion = "16" MaxFiles = "10000" MaxEmbeddedPE = "10485760" MaxHTMLNormalize = "10485760" MaxHTMLNoTags = "2097152" MaxScriptNormalize = "5242880" MaxZipTypeRcg = "1048576" MaxPartitions = "50" MaxIconsPE = "100" MaxRecHWP3 = "16" PCREMatchLimit = "10000" PCRERecMatchLimit = "5000" PCREMaxFileSize = "26214400" OnAccessMountPath disabled OnAccessIncludePath disabled OnAccessExcludePath disabled OnAccessExcludeRootUID disabled OnAccessExcludeUID disabled OnAccessExcludeUname disabled OnAccessMaxFileSize = "5242880" OnAccessDisableDDD disabled OnAccessPrevention disabled OnAccessExtraScanning disabled OnAccessCurlTimeout = "5000" OnAccessMaxThreads = "5" OnAccessRetryAttempts disabled OnAccessDenyOnError disabled DevACOnly disabled DevACDepth disabled DevPerformance disabled DevLiblog disabled DisableCertCheck disabled AlgorithmicDetection = "yes" BlockMax disabled PhishingAlwaysBlockSSLMismatch disabled PhishingAlwaysBlockCloak disabled PartitionIntersection disabled OLE2BlockMacros disabled ArchiveBlockEncrypted disabled Config file: freshclam.conf --------------------------- LogFileMaxSize = "4294967295" LogTime = "yes" LogSyslog disabled LogFacility = "LOG_LOCAL6" LogVerbose disabled LogRotate = "yes" PidFile disabled DatabaseDirectory = "/var/lib/clamav" Foreground disabled Debug disabled UpdateLogFile = "/var/log/clamav/freshclam.log" DatabaseOwner = "clamav" Checks = "24" DNSDatabaseInfo = "current.cvd.clamav.net" DatabaseMirror = "db.local.clamav.net", "database.clamav.net" PrivateMirror disabled MaxAttempts = "5" ScriptedUpdates = "yes" TestDatabases = "yes" CompressLocalDatabase disabled ExtraDatabase disabled ExcludeDatabase disabled DatabaseCustomURL disabled HTTPProxyServer disabled HTTPProxyPort disabled HTTPProxyUsername disabled HTTPProxyPassword disabled HTTPUserAgent disabled NotifyClamd = "/etc/clamav/clamd.conf" OnUpdateExecute disabled OnErrorExecute disabled OnOutdatedExecute disabled LocalIPAddress disabled ConnectTimeout = "30" ReceiveTimeout disabled Bytecode = "yes" clamav-milter.conf not found Software settings ----------------- Version: 1.0.1 Optional features supported: MEMPOOL AUTOIT_EA06 BZIP2 LIBXML2 PCRE2 ICONV JSON Database information -------------------- Database directory: /var/lib/clamav daily.cld: version 26999, sigs: 2039847, built on Sun Aug 13 09:36:35 2023 main.cld: version 62, sigs: 6647427, built on Thu Sep 16 14:32:42 2021 bytecode.cld: version 334, sigs: 91, built on Wed Feb 22 22:33:21 2023 Total number of signatures: 8687365 Platform information -------------------- uname: Linux 6.1.0-10-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.38-1 (2023-07-14) x86_64 OS: Linux, ARCH: x86_64, CPU: x86_64 Full OS version: Debian GNU/Linux 12 (bookworm) zlib version: 1.2.13 (1.2.13), compile flags: a9 platform id: 0x0a21a1a108000000000c0200 Build information ----------------- GNU C: 12.2.0 (12.2.0) sizeof(void*) = 8 Engine flevel: 161, dconf: 161 --- data dir --- total 645272 -rw-r--r-- 1 clamav clamav 1430528 Feb 22 23:02 bytecode.cld -rw-r--r-- 1 clamav clamav 195230720 Aug 13 11:00 daily.cld -rw-r--r-- 1 clamav clamav 69 May 16 2022 freshclam.dat -rw-r--r-- 1 clamav clamav 464053248 Sep 16 2021 main.cld -rw-r--r-- 1 root root 69 Aug 26 2021 mirrors.dat drwxr-xr-x 2 clamav clamav 4096 Aug 14 2021 tmp.5ef74 drwxr-xr-x 2 clamav clamav 4096 Aug 15 2021 tmp.7368d drwxr-xr-x 2 clamav clamav 4096 Aug 14 2021 tmp.7eecd drwxr-xr-x 2 clamav clamav 4096 Aug 15 2021 tmp.8083e drwxr-xr-x 2 clamav clamav 4096 Aug 17 2021 tmp.a8f83 -- System Information: Debian Release: 12.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-10-amd64 (SMP w/2 CPU threads; PREEMPT) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages clamav-daemon depends on: ii adduser 3.134 ii clamav-base 1.0.1+dfsg-2 ii clamav-freshclam [clamav-data] 1.0.1+dfsg-2 ii debconf [debconf-2.0] 1.5.82 ii dpkg 1.21.22 ii init-system-helpers 1.65.2 ii libc6 2.36-9+deb12u1 ii libclamav11 1.0.1+dfsg-2 ii libcurl4 7.88.1-10 ii libncurses6 6.4-4 ii libsystemd0 252.12-1~deb12u1 ii libtinfo6 6.4-4 ii procps 2:4.0.2-3 ii ucf 3.0043+nmu1 ii zlib1g 1:1.2.13.dfsg-1 Versions of packages clamav-daemon recommends: ii clamdscan 1.0.1+dfsg-2 Versions of packages clamav-daemon suggests: ii apparmor 3.0.8-3 pn clamav-docs <none> pn daemon <none> pn libclamunrar <none> -- debconf information: clamav-daemon/TCPSocket: 3310 clamav-daemon/debconf: true clamav-daemon/MaxThreads: 12 clamav-daemon/AllowAllMatchScan: true clamav-daemon/AddGroups: clamav-daemon/MaxConnectionQueueLength: 15 clamav-daemon/LogSyslog: false clamav-daemon/OnAccessMaxFileSize: 5M clamav-daemon/MaxZipTypeRcg: 1M clamav-daemon/SelfCheck: 3600 clamav-daemon/Bytecode: true clamav-daemon/LocalSocketGroup: clamav clamav-daemon/TCPAddr: 127.0.0.1 clamav-daemon/MaxDirectoryRecursion: 15 clamav-daemon/User: clamav clamav-daemon/MaxScriptNormalize: 5M clamav-daemon/MaxHTMLNoTags: 2M clamav-daemon/ForceToDisk: false clamav-daemon/LocalSocketMode: 666 clamav-daemon/FixStaleSocket: true clamav-daemon/ScanSWF: true clamav-daemon/BytecodeSecurity: TrustSigned clamav-daemon/StreamMaxLength: 25 clamav-daemon/LogFile: /var/log/clamav/clamav.log clamav-daemon/LogTime: true clamav-daemon/DisableCertCheck: false clamav-daemon/BytecodeTimeout: 60000 clamav-daemon/MaxEmbeddedPE: 10M clamav-daemon/FollowDirectorySymlinks: false clamav-daemon/LogRotate: true clamav-daemon/ScanArchive: true clamav-daemon/LocalSocket: /var/run/clamav/clamd.ctl clamav-daemon/ReadTimeout: 180 clamav-daemon/MaxHTMLNormalize: 10M clamav-daemon/FollowFileSymlinks: false clamav-daemon/ScanMail: true clamav-daemon/TcpOrLocal: TCP
--- End Message ---
--- Begin Message ---Source: clamav Source-Version: 1.0.2+dfsg-1~deb12u1 Done: Sebastian Andrzej Siewior <[email protected]> We believe that the bug you reported is fixed in the latest version of clamav, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sebastian Andrzej Siewior <[email protected]> (supplier of updated clamav package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Aug 2023 11:35:11 +0200 Source: clamav Architecture: source Version: 1.0.2+dfsg-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: ClamAV Team <[email protected]> Changed-By: Sebastian Andrzej Siewior <[email protected]> Closes: 949100 1030171 1044136 1050057 Changes: clamav (1.0.2+dfsg-1~deb12u1) bookworm; urgency=medium . * Import 1.0.2 (Closes: #1050057) - CVE-2023-20197 (Possible DoS in HFS+ file parser). - CVE-2023-20212 (Possible DoS in AutoIt file parser). * Use cmake for xml2 detection (Closes: #949100). * Replace tomsfastmath with OpenSSL's BN. * Don't enable clamonacc by default (Closes: #1030171). * Let the clamav-daemon.socket depend on the service file again (Closes: #1044136). Checksums-Sha1: 93892d03aa49f727faa6180a10170c58558288e4 2849 clamav_1.0.2+dfsg-1~deb12u1.dsc c845d2c777adda943e7421c601924e1bee1864a8 14134372 clamav_1.0.2+dfsg.orig.tar.xz b674a8c285c4085a1c32f873581972f2a8188058 230360 clamav_1.0.2+dfsg-1~deb12u1.debian.tar.xz Checksums-Sha256: 33f7f159150284286efe95193a64e4fb2c6bcfd8efe138533e909fa4170f761e 2849 clamav_1.0.2+dfsg-1~deb12u1.dsc 5b641fef85e25e0457edbeaa0e45bf94da6f9ad0fb1dfe7166dbd50ce0f34a00 14134372 clamav_1.0.2+dfsg.orig.tar.xz 71afe3b7908d428eb79d0233af4aa40691d43fec68add4a657262cdf1787c3d2 230360 clamav_1.0.2+dfsg-1~deb12u1.debian.tar.xz Files: b7fc78ff33e18bdc7c0136eafacac08c 2849 utils optional clamav_1.0.2+dfsg-1~deb12u1.dsc 73ff8d63727171ca7f586e2460b86caf 14134372 utils optional clamav_1.0.2+dfsg.orig.tar.xz e44d67319c8283ec8be6ec30428e3f00 230360 utils optional clamav_1.0.2+dfsg-1~deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmTrMXwACgkQBWQfF1cS +lsJwQwAi7GGndRf/BILORVIX0WKzoD1DUvjpz3PfjXanfWK78oseDxG0cAyPtzw aeUNpnMlanHRRP9112YaxneKS1PGFkUbkAYYHS6AQyxBQVr4QvR4AIwTH9kD/nii L1kNJao7tV/ZBZH76NDjEpx7B0v55rJclH9hJfUJbP1iRsfLtHr9u678vB/+AwWk xfTeedY4PRd4Nj3jTaiF301TGUr+e/3vDko0VM9k9cNJC5aOWkns8LdWJ2quiAei j9KDTkN3mgdJHBLAPfA71iZhLUidxpA9UGpnpBBDk2Lc7y0fWoY7gy5nyRVtQpNb HplGVKdwjy+6KGTK7ed3SvWKNhQz9p/2tUThfJTcMgtKfP8KsqiQD12zisokGX6l aLhz98co9NHXwBxllDD785ZoHXQxs3kqyjl4wS/l1+9ADv9mzch6tu2CUM7bkN45 1ak5EOv2HkyiIL1oM/9B94RgC+SgeiN/sv1yR7WXlY/Ar9mf5l2aOqnPCOyWBGUt kRT78vAf =NHU0 -----END PGP SIGNATURE-----
--- End Message ---
