here is the culprit -- one of my servers has high traffic, and this issue was
prevalent for the past over an year. i have simscan disabled on this server for
the past over 1 year.
----- Original Message -----
From: Joel Esler (jesler) [mailto:jes...@cisco.com]
Sent: Fri, 26 Jan 2018 20:14:45 +0000
Update on the recent "File Descriptors" issue in ClamAV
A signature introduced in daily.cvd version 24256 triggered bug that exists in
all current stable releases of ClamAV.
The symptoms on a Linux/Unix machine running clamd under heavy load results in
the system running out of file descriptors, because the file descriptors for
deleted temp files were not being closed. On Windows systems, a different
error occurred wherein the system reported “permission denied” errors when
closing (unlinking) the temp files.
The bug was reported as early as April 2016 here:
https://bugzilla.clamav.net/show_bug.cgi?id=11549. A patch for this bug was
applied towards the upcoming 0.100.0 feature release of ClamAV, but
unfortunately the fix didn’t make it into the recent 0.99.3 security patch
For the time-being, the offending signature was pulled as of daily.cvd version
24258, and changes to our backend processes have been implemented to prevent
this from happening again.
We apologize for the inconvenience this has caused. Future releases of ClamAV
will have a fix in place to prevent this issue from reocurring.
Joel Esler | Talos: Manager | jes...@cisco.com<mailto:jes...@cisco.com>
clamav-users mailing list
Help us build a comprehensive ClamAV guide:
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com