[clamav-users] Fw: openSUSE-SU-2021:2242-1: important: Security update for clamav-database

2021-07-05 Thread Paul Kosinski via clamav-users 
Just FYI: this is the first time I remember seeing openSUSE notifying something 
about ClamAV.


Begin forwarded message:

Date: Mon,  5 Jul 2021 15:17:01 +0200 (CEST)
From: opensuse-secur...@opensuse.org
To: opensuse-security-annou...@opensuse.org
Subject: openSUSE-SU-2021:2242-1: important: Security update for clamav-database


   openSUSE Security Update: Security update for clamav-database
__

Announcement ID:openSUSE-SU-2021:2242-1
Rating: important
References: #1084929 
Affected Products:
openSUSE Leap 15.3
__

   An update that contains security fixes can now be installed.

Description:

   This update for clamav-database fixes the following issues:

   Changes in clamav-database:
   - database refresh on 2021-07-05 (bsc#1084929)


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended 
installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2021-2242=1



Package List:

   - openSUSE Leap 15.3 (noarch):

  clamav-database-202107050018-3.480.1


References:

   https://bugzilla.suse.com/1084929



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamav-freshclam service issue

2021-07-05 Thread ChandranManikandan via clamav-users 
Hi Eric,

Thanks for your help, I have done the first option and now the service has
started successfully.
But the clamav is out of date there. Any new update patch available for qmt.

Your ClamAV installation is OUTDATED!
Tue Jul  6 12:41:40 2021 -> ^Local version: 0.103.2 Recommended version:
0.103.3



On Tue, Jul 6, 2021 at 1:55 AM Eric Broch  wrote:

> You could also just delete file
>
> # rm /etc/cron.d/clamav-update
>
> but I imagine it will be there on next update.
>
>
> On 7/5/2021 11:53 AM, Eric Broch wrote:
>
> Freshclam doesn't start because databases are now updated by cron job
> '/etc/cron.d/clamav-update' in 'freshclam.service' file. If cron job file
> exists freshclam daemon is not necessary.
>
> Pick one of two options:
>
> 1)
>
> vi /usr/lib/systemd/system/clamav-freshclam.service
>
> replace
>
> ConditionPathExists=!/etc/cron.d/clamav-update
>
> with
>
> #ConditionPathExists=!/etc/cron.d/clamav-update
>
> vi /etc/cron.d/clamav-update
>
> replace
>
> 0  */3 * * * root /usr/share/clamav/freshclam-sleep > /dev/null
>
> with
>
> #0  */3 * * * root /usr/share/clamav/freshclam-sleep > /dev/null
>
> or
>
> 2)
>
> vi /usr/bin/toaststat
>
> replace
>
> for sv in clamd@scan clamav-freshclam spamassassin ... ... ...
>
> with
>
> for sv in clamd@scan spamassassin ... ... ...
>
>
> On 7/5/2021 1:18 AM, ChandranManikandan wrote:
>
> Hi Folks,
>
> Any way to resolve this issue clamav-freshclam service?
>
> When I ran the freshclam command, it showed the log without any issue, but
> when I ran toaststat it stopped.
>
>
>
> On Fri, Jul 2, 2021 at 12:17 PM ChandranManikandan 
> wrote:
>
>> Hi Eric,
>>
>> Am running Centos 7 64 Bit with the Qmailtoaster system. Usually update
>> through the command line .
>> I have seen the clamav 102-2.elf version update on my system in the
>> webmin control panel and updated through the panel.
>> The freshclam command is running without issue, but when I ran toaststat
>> clamav-freshclam was stopped and unable to be active and run.
>>
>> My output below.
>> *cat /usr/lib/systemd/system/clamav-freshclam.service*
>>
>> [Unit]
>> Description=ClamAV virus database updater
>> Documentation=man:freshclam(1) man:freshclam.conf(5)
>> https://www.clamav.net/documents
>> # If user wants it run from cron, don't start the daemon.
>> ConditionPathExists=!/etc/cron.d/clamav-update
>> Wants=network-online.target
>> After=network-online.target
>>
>> [Service]
>> ExecStart=/usr/bin/freshclam -d --foreground=true
>>
>> [Install]
>> WantedBy=multi-user.target
>>
>> *cat /etc/freshclam.conf*
>>
>> ## Example config file for freshclam
>> ## Please read the freshclam.conf(5) manual before editing this file.
>> ##
>>
>>
>> # Comment or remove the line below.
>> #Example
>>
>> # Path to the database directory.
>> # WARNING: It must match clamd.conf's directive!
>> # Default: hardcoded (depends on installation options)
>> #DatabaseDirectory /var/lib/clamav
>>
>> # Path to the log file (make sure it has proper permissions)
>> # Default: disabled
>> #UpdateLogFile /var/log/clamav/freshclam.log
>> #UpdateLogFile /var/log/freshclam.log
>>
>> # Maximum size of the log file.
>> # Value of 0 disables the limit.
>> # You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
>> # and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes).
>> # in bytes just don't use modifiers. If LogFileMaxSize is enabled,
>> # log rotation (the LogRotate option) will always be enabled.
>> # Default: 1M
>> LogFileMaxSize 2M
>>
>> # Log time with each message.
>> # Default: no
>> LogTime yes
>>
>> # Enable verbose logging.
>> # Default: no
>> LogVerbose yes
>>
>> # Use system logger (can work together with UpdateLogFile).
>> # Default: no
>> #LogSyslog yes
>>
>> # Specify the type of syslog messages - please refer to 'man syslog'
>> # for facility names.
>> # Default: LOG_LOCAL6
>> #LogFacility LOG_MAIL
>>
>> # Enable log rotation. Always enabled when LogFileMaxSize is enabled.
>> # Default: no
>> LogRotate yes
>>
>> # This option allows you to save the process identifier of the daemon
>> # Default: disabled
>> #PidFile /var/run/freshclam.pid
>>
>> # By default when started freshclam drops privileges and switches to the
>> # "clamav" user. This directive allows you to change the database owner.
>> # Default: clamav (may depend on installation options)
>> #DatabaseOwner clamupdate
>>
>> # Use DNS to verify virus database version. Freshclam uses DNS TXT records
>> # to verify database and software versions. With this directive you can
>> change
>> # the database verification domain.
>> # WARNING: Do not touch it unless you're configuring freshclam to use your
>> # own database verification domain.
>> # Default: current.cvd.clamav.net
>> #DNSDatabaseInfo current.cvd.clamav.net
>>
>> # database.clamav.net is now the primary domain name to be used
>> world-wide.
>> # Now that CloudFlare is being used as our Content Delivery Network (CDN),
>> # this one domain name works world-wide to direct freshclam to the closest
>> #

Re: [clamav-users] clamav-freshclam service issue

2021-07-05 Thread Eric Broch via clamav-users 

You could also just delete file

# rm /etc/cron.d/clamav-update

but I imagine it will be there on next update.


On 7/5/2021 11:53 AM, Eric Broch wrote:


Freshclam doesn't start because databases are now updated by cron job 
'/etc/cron.d/clamav-update' in 'freshclam.service' file. If cron job 
file exists freshclam daemon is not necessary.


Pick one of two options:

1)

vi /usr/lib/systemd/system/clamav-freshclam.service

replace

ConditionPathExists=!/etc/cron.d/clamav-update

with

#ConditionPathExists=!/etc/cron.d/clamav-update

vi /etc/cron.d/clamav-update

replace

0  */3 * * * root /usr/share/clamav/freshclam-sleep > /dev/null

with

#0  */3 * * * root /usr/share/clamav/freshclam-sleep > /dev/null

or

2)

vi /usr/bin/toaststat

replace

for sv in clamd@scan clamav-freshclam spamassassin ... ... ...

with

for sv in clamd@scan spamassassin ... ... ...


On 7/5/2021 1:18 AM, ChandranManikandan wrote:

Hi Folks,

Any way to resolve this issue clamav-freshclam service?

When I ran the freshclam command, it showed the log without any 
issue, but when I ran toaststat it stopped.




On Fri, Jul 2, 2021 at 12:17 PM ChandranManikandan > wrote:


Hi Eric,

Am running Centos 7 64 Bit with the Qmailtoaster system. Usually
update through the command line .
I have seen the clamav 102-2.elf version update on my system in
the webmin control panel and updated through the panel.
The freshclam command is running without issue, but when I ran
toaststat clamav-freshclam was stopped and unable to be active
and run.

My output below.
*cat /usr/lib/systemd/system/clamav-freshclam.service*

[Unit]
Description=ClamAV virus database updater
Documentation=man:freshclam(1) man:freshclam.conf(5)
https://www.clamav.net/documents 
# If user wants it run from cron, don't start the daemon.
ConditionPathExists=!/etc/cron.d/clamav-update
Wants=network-online.target
After=network-online.target

[Service]
ExecStart=/usr/bin/freshclam -d --foreground=true

[Install]
WantedBy=multi-user.target

*cat /etc/freshclam.conf*

## Example config file for freshclam
## Please read the freshclam.conf(5) manual before editing this file.
##


# Comment or remove the line below.
#Example

# Path to the database directory.
# WARNING: It must match clamd.conf's directive!
# Default: hardcoded (depends on installation options)
#DatabaseDirectory /var/lib/clamav

# Path to the log file (make sure it has proper permissions)
# Default: disabled
#UpdateLogFile /var/log/clamav/freshclam.log
#UpdateLogFile /var/log/freshclam.log

# Maximum size of the log file.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes).
# in bytes just don't use modifiers. If LogFileMaxSize is enabled,
# log rotation (the LogRotate option) will always be enabled.
# Default: 1M
LogFileMaxSize 2M

# Log time with each message.
# Default: no
LogTime yes

# Enable verbose logging.
# Default: no
LogVerbose yes

# Use system logger (can work together with UpdateLogFile).
# Default: no
#LogSyslog yes

# Specify the type of syslog messages - please refer to 'man syslog'
# for facility names.
# Default: LOG_LOCAL6
#LogFacility LOG_MAIL

# Enable log rotation. Always enabled when LogFileMaxSize is enabled.
# Default: no
LogRotate yes

# This option allows you to save the process identifier of the daemon
# Default: disabled
#PidFile /var/run/freshclam.pid

# By default when started freshclam drops privileges and switches
to the
# "clamav" user. This directive allows you to change the database
owner.
# Default: clamav (may depend on installation options)
#DatabaseOwner clamupdate

# Use DNS to verify virus database version. Freshclam uses DNS
TXT records
# to verify database and software versions. With this directive
you can change
# the database verification domain.
# WARNING: Do not touch it unless you're configuring freshclam to
use your
# own database verification domain.
# Default: current.cvd.clamav.net 
#DNSDatabaseInfo current.cvd.clamav.net


# database.clamav.net  is now the
primary domain name to be used world-wide.
# Now that CloudFlare is being used as our Content Delivery
Network (CDN),
# this one domain name works world-wide to direct freshclam to
the closest
# geographic endpoint.
# If the old db.XY.clamav.net  domains
are set, freshclam will automatically
# use database.clamav.net  instead.
DatabaseMirror

Re: [clamav-users] clamav-freshclam service issue

2021-07-05 Thread Eric Broch via clamav-users 
Freshclam doesn't start because databases are now updated by cron job 
'/etc/cron.d/clamav-update' in 'freshclam.service' file. If cron job 
file exists freshclam daemon is not necessary.


Pick one of two options:

1)

vi /usr/lib/systemd/system/clamav-freshclam.service

replace

ConditionPathExists=!/etc/cron.d/clamav-update

with

#ConditionPathExists=!/etc/cron.d/clamav-update

vi /etc/cron.d/clamav-update

replace

0  */3 * * * root /usr/share/clamav/freshclam-sleep > /dev/null

with

#0  */3 * * * root /usr/share/clamav/freshclam-sleep > /dev/null

or

2)

vi /usr/bin/toaststat

replace

for sv in clamd@scan clamav-freshclam spamassassin ... ... ...

with

for sv in clamd@scan spamassassin ... ... ...


On 7/5/2021 1:18 AM, ChandranManikandan wrote:

Hi Folks,

Any way to resolve this issue clamav-freshclam service?

When I ran the freshclam command, it showed the log without any issue, 
but when I ran toaststat it stopped.




On Fri, Jul 2, 2021 at 12:17 PM ChandranManikandan > wrote:


Hi Eric,

Am running Centos 7 64 Bit with the Qmailtoaster system. Usually
update through the command line .
I have seen the clamav 102-2.elf version update on my system in
the webmin control panel and updated through the panel.
The freshclam command is running without issue, but when I ran
toaststat clamav-freshclam was stopped and unable to be active and
run.

My output below.
*cat /usr/lib/systemd/system/clamav-freshclam.service*

[Unit]
Description=ClamAV virus database updater
Documentation=man:freshclam(1) man:freshclam.conf(5)
https://www.clamav.net/documents 
# If user wants it run from cron, don't start the daemon.
ConditionPathExists=!/etc/cron.d/clamav-update
Wants=network-online.target
After=network-online.target

[Service]
ExecStart=/usr/bin/freshclam -d --foreground=true

[Install]
WantedBy=multi-user.target

*cat /etc/freshclam.conf*

## Example config file for freshclam
## Please read the freshclam.conf(5) manual before editing this file.
##


# Comment or remove the line below.
#Example

# Path to the database directory.
# WARNING: It must match clamd.conf's directive!
# Default: hardcoded (depends on installation options)
#DatabaseDirectory /var/lib/clamav

# Path to the log file (make sure it has proper permissions)
# Default: disabled
#UpdateLogFile /var/log/clamav/freshclam.log
#UpdateLogFile /var/log/freshclam.log

# Maximum size of the log file.
# Value of 0 disables the limit.
# You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
# and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes).
# in bytes just don't use modifiers. If LogFileMaxSize is enabled,
# log rotation (the LogRotate option) will always be enabled.
# Default: 1M
LogFileMaxSize 2M

# Log time with each message.
# Default: no
LogTime yes

# Enable verbose logging.
# Default: no
LogVerbose yes

# Use system logger (can work together with UpdateLogFile).
# Default: no
#LogSyslog yes

# Specify the type of syslog messages - please refer to 'man syslog'
# for facility names.
# Default: LOG_LOCAL6
#LogFacility LOG_MAIL

# Enable log rotation. Always enabled when LogFileMaxSize is enabled.
# Default: no
LogRotate yes

# This option allows you to save the process identifier of the daemon
# Default: disabled
#PidFile /var/run/freshclam.pid

# By default when started freshclam drops privileges and switches
to the
# "clamav" user. This directive allows you to change the database
owner.
# Default: clamav (may depend on installation options)
#DatabaseOwner clamupdate

# Use DNS to verify virus database version. Freshclam uses DNS TXT
records
# to verify database and software versions. With this directive
you can change
# the database verification domain.
# WARNING: Do not touch it unless you're configuring freshclam to
use your
# own database verification domain.
# Default: current.cvd.clamav.net 
#DNSDatabaseInfo current.cvd.clamav.net


# database.clamav.net  is now the
primary domain name to be used world-wide.
# Now that CloudFlare is being used as our Content Delivery
Network (CDN),
# this one domain name works world-wide to direct freshclam to the
closest
# geographic endpoint.
# If the old db.XY.clamav.net  domains
are set, freshclam will automatically
# use database.clamav.net  instead.
DatabaseMirror database.clamav.net 

# How many attempts to make before giving up.
# Default: 3 (per mirror)
#MaxAttempts 5

# With this

Re: [clamav-users] clamav-freshclam service issue

2021-07-05 Thread G.W. Haywood via clamav-users 

Hello again,

On Mon, 5 Jul 2021, ChandranManikandan via clamav-users wrote:


Any way to resolve this issue clamav-freshclam service?


Did this not help at all?

https://marc.info/?l=clamav-users=162513359319903=2

--

73,
Ged.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamav-freshclam service issue

2021-07-05 Thread ChandranManikandan via clamav-users 
Hi Folks,

Any way to resolve this issue clamav-freshclam service?

When I ran the freshclam command, it showed the log without any issue, but
when I ran toaststat it stopped.



On Fri, Jul 2, 2021 at 12:17 PM ChandranManikandan 
wrote:

> Hi Eric,
>
> Am running Centos 7 64 Bit with the Qmailtoaster system. Usually update
> through the command line .
> I have seen the clamav 102-2.elf version update on my system in the webmin
> control panel and updated through the panel.
> The freshclam command is running without issue, but when I ran toaststat
> clamav-freshclam was stopped and unable to be active and run.
>
> My output below.
> *cat /usr/lib/systemd/system/clamav-freshclam.service*
>
> [Unit]
> Description=ClamAV virus database updater
> Documentation=man:freshclam(1) man:freshclam.conf(5)
> https://www.clamav.net/documents
> # If user wants it run from cron, don't start the daemon.
> ConditionPathExists=!/etc/cron.d/clamav-update
> Wants=network-online.target
> After=network-online.target
>
> [Service]
> ExecStart=/usr/bin/freshclam -d --foreground=true
>
> [Install]
> WantedBy=multi-user.target
>
> *cat /etc/freshclam.conf*
>
> ## Example config file for freshclam
> ## Please read the freshclam.conf(5) manual before editing this file.
> ##
>
>
> # Comment or remove the line below.
> #Example
>
> # Path to the database directory.
> # WARNING: It must match clamd.conf's directive!
> # Default: hardcoded (depends on installation options)
> #DatabaseDirectory /var/lib/clamav
>
> # Path to the log file (make sure it has proper permissions)
> # Default: disabled
> #UpdateLogFile /var/log/clamav/freshclam.log
> #UpdateLogFile /var/log/freshclam.log
>
> # Maximum size of the log file.
> # Value of 0 disables the limit.
> # You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes)
> # and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes).
> # in bytes just don't use modifiers. If LogFileMaxSize is enabled,
> # log rotation (the LogRotate option) will always be enabled.
> # Default: 1M
> LogFileMaxSize 2M
>
> # Log time with each message.
> # Default: no
> LogTime yes
>
> # Enable verbose logging.
> # Default: no
> LogVerbose yes
>
> # Use system logger (can work together with UpdateLogFile).
> # Default: no
> #LogSyslog yes
>
> # Specify the type of syslog messages - please refer to 'man syslog'
> # for facility names.
> # Default: LOG_LOCAL6
> #LogFacility LOG_MAIL
>
> # Enable log rotation. Always enabled when LogFileMaxSize is enabled.
> # Default: no
> LogRotate yes
>
> # This option allows you to save the process identifier of the daemon
> # Default: disabled
> #PidFile /var/run/freshclam.pid
>
> # By default when started freshclam drops privileges and switches to the
> # "clamav" user. This directive allows you to change the database owner.
> # Default: clamav (may depend on installation options)
> #DatabaseOwner clamupdate
>
> # Use DNS to verify virus database version. Freshclam uses DNS TXT records
> # to verify database and software versions. With this directive you can
> change
> # the database verification domain.
> # WARNING: Do not touch it unless you're configuring freshclam to use your
> # own database verification domain.
> # Default: current.cvd.clamav.net
> #DNSDatabaseInfo current.cvd.clamav.net
>
> # database.clamav.net is now the primary domain name to be used
> world-wide.
> # Now that CloudFlare is being used as our Content Delivery Network (CDN),
> # this one domain name works world-wide to direct freshclam to the closest
> # geographic endpoint.
> # If the old db.XY.clamav.net domains are set, freshclam will
> automatically
> # use database.clamav.net instead.
> DatabaseMirror database.clamav.net
>
> # How many attempts to make before giving up.
> # Default: 3 (per mirror)
> #MaxAttempts 5
>
> # With this option you can control scripted updates. It's highly
> recommended
> # to keep it enabled.
> # Default: yes
> #ScriptedUpdates yes
>
> # By default freshclam will keep the local databases (.cld) uncompressed to
> # make their handling faster. With this option you can enable the
> compression;
> # the change will take effect with the next database update.
> # Default: no
> #CompressLocalDatabase no
>
> # With this option you can provide custom sources for database files.
> # This option can be used multiple times. Support for:
> #   http(s)://, ftp(s)://, or file://
> # Default: no custom URLs
> #DatabaseCustomURL http://myserver.example.com/mysigs.ndb
> #DatabaseCustomURL https://myserver.example.com/mysigs.ndb
> #DatabaseCustomURL https://myserver.example.com:4567/whitelist.wdb
> #DatabaseCustomURL ftp://myserver.example.com/example.ldb
> #DatabaseCustomURL ftps://myserver.example.com:4567/example.ndb
> #DatabaseCustomURL file:///mnt/nfs/local.hdb
> # This option allows you to easily point freshclam to private mirrors.
> # If PrivateMirror is set, freshclam does not attempt to use DNS
> # to determine whether its databases are out-of-date, instead it will
> # use the