Re: [clamav-users] clamav-0.98.3 does not pass vulnerability scan

2014-05-20 Thread Steve Basford
to the mail server. If there is an antivirus filter, it may start eating huge amounts of CPU or memory. Source: http://openvas.komma-nix.de/index.php?oid=11036 VirusTotal Report 42.zip as Agnitum Trojan.ZipBomb.D20140519 AntiVir Bomb/Libit.A20140520 BitDefender

Re: [clamav-users] clamav-0.98.3 does not pass vulnerability scan

2014-05-20 Thread Matus UHLAR - fantomas
The file 42.zip was sent 2 times. If there is an antivirus in your MTA, it might have crashed. Please check its status right now, as it is not possible to do so remotely Vulnerability Detection Method Details: SMTP antivirus scanner DoS (OID: 1.3.6.1.4.1.25623.1.0.11036) On 20.05.14 11:22,

Re: [clamav-users] clamav-0.98.3 does not pass vulnerability scan

2014-05-20 Thread anctop
Both clamav-milter clamd were still working after the attack by the scan. Our config files assume default values for recursive scanning. I'd like to know if the recursion depth is lowered, will clamd fail to detect those viruses deeply hidden in nested directories ? The file 42.zip was sent 2

Re: [clamav-users] clamav-0.98.3 does not pass vulnerability scan

2014-05-20 Thread Matus UHLAR - fantomas
On 20.05.14 16:22, anctop wrote: Both clamav-milter clamd were still working after the attack by the scan. Our config files assume default values for recursive scanning. I'd like to know if the recursion depth is lowered, will clamd fail to detect those viruses deeply hidden in nested

[clamav-users] clamav-0.98.1 crashing

2014-05-20 Thread Richard Mealing
Hi, I'm using clamd with mailscanner and it keeps crashing. What is the best way to debug this? Thanks, Rich ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml

Re: [clamav-users] [Clamav-devel] ClamAV®: ClamAV 0.98.4rc1 is now available!

2014-05-20 Thread Mark Allan
I may have been a bit hasty with this. It appears there's another issue with clamd. I'm receiving reports of clamd crashing when attempting to parse email in an incredibly large (1.15 GB) Thunderbird mailbox file. This particular report is from 0.98.3, but the user is reporting it still

Re: [clamav-users] [Clamav-devel] ClamAV(R): ClamAV 0.98.4rc1 is now available!

2014-05-20 Thread Shawn Webb
Hey Mark, Is there a way you could get me the sample? Thanks, Shawn On Tue, May 20, 2014 at 6:49 AM, Mark Allan markjal...@blueyonder.co.ukwrote: I may have been a bit hasty with this. It appears there's another issue with clamd. I'm receiving reports of clamd crashing when attempting

Re: [clamav-users] [Clamav-devel] ClamAV(R): ClamAV 0.98.4rc1 is now available!

2014-05-20 Thread Mark Allan
Hi Shawn, By the sample do you mean the 1.15 GB file? If so, that's the user's personal email mailbox so I can't imagine he'd be willing to share it. If you mean a 0.98.4-rc1 crash log, I've just asked him again, so hopefully he'll be able to find it. Mark On 20 May 2014, at 02:14 pm,

Re: [clamav-users] [Clamav-devel] ClamAV(R): ClamAV 0.98.4rc1 is now available!

2014-05-20 Thread Stuart Henderson
On 2014/05/20 14:27, Mark Allan wrote: Hi Shawn, By the sample do you mean the 1.15 GB file? If so, that's the user's personal email mailbox so I can't imagine he'd be willing to share it. If you mean a 0.98.4-rc1 crash log, I've just asked him again, so hopefully he'll be able to find

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-20 Thread Shawn Webb
On Mon, May 19, 2014 at 2:52 PM, MarkusGMX markus@gmx.at wrote: Am 16/05/14 17:57, schrieb Alexander Tampermeier: Sadly, the libxml2-error still persists in v0.98.4-rc1. Hope, it can be fixed soon. [...] :-( I am also waiting for a bugfix for the build process.

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-20 Thread Alexander Tampermeier
Shawn, v0.98.4-rc1 now compiled perfectly with the patch applied. Thanks for the great support Alexander Am 20.05.2014 16:53, schrieb Shawn Webb: On Mon, May 19, 2014 at 2:52 PM, MarkusGMX markus@gmx.at wrote: Am 16/05/14 17:57, schrieb Alexander Tampermeier: Sadly, the

Re: [clamav-users] clamav-0.98.1 crashing

2014-05-20 Thread Steven Morgan
Hi Rich, Any details will help for starters, such as a stack trace of the crash, clamav version, OS version, processor architecture, clamav debug logs, etc. Also, you could try the 0.98.4 release candidate, which is a bug fix release. It is here:

Re: [clamav-users] clamav-0.98.1 crashing

2014-05-20 Thread Richard Mealing
Thank you Steve, I'm not sure if there is a problem but I would like to know why I see my clamd stops then starts every 10 minutes. During this period, I see the following debug output and I wondering what this means - fds_poll_recv: timeout after 600 seconds I thought it was something to do

Re: [clamav-users] clamav-0.98.1 crashing

2014-05-20 Thread Steven Morgan
I do not see anything wrong in that output. Anyway, clamd does not restart by itself. There was a user who reported something similar a few weeks ago and it turned out to be his crond setup: https://bugzilla.clamav.net/show_bug.cgi?id=10952 If that is of no help, we need more info in order to

Re: [clamav-users] [Clamav-devel] ClamAV(R): ClamAV 0.98.4rc1 is now available!

2014-05-20 Thread Al Varnell
I think there may be some confusion here. There have been three users report crashed clamd with Thunderbird, but I believe the INBOX files concerned were all less than the 25MB limit at the time. In my case, I had never used Thunderbird and installed it simply for test purposes. So as the

Re: [clamav-users] [Clamav-devel] ClamAV(R): ClamAV 0.98.4rc1 is now available!

2014-05-20 Thread Steven Morgan
Hi, It would help a lot and eliminate much guesswork if someone who has this problem could build a debug version of clamav, as in: ./configure --enable-debug [other flags] CFLAGS='-g -O0' and reproduce the problem with clamd running under gdb (sudo gdb clamd) with the clamd.conf statement:

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-20 Thread Paul Kosinski
It isn't just libxml2. I'm getting the equivalent errors for libbz2 and libz as well. This is with *both* 0.98.3 and 0.98.4rc1. This is when trying to build for 64 bits, on a 64-bit openSuSE 12.3 system which has both the 64-bit and 32-bit 'devel' packages installed. Has ClamAV ever been built