eric

here is the culprit -- one of my servers has high traffic, and this issue was 
prevalent for the past over an year. i have simscan disabled on this server for 
the past over 1 year.

rajesh

----- Original Message -----
From: Joel Esler (jesler) [mailto:jes...@cisco.com]
To: clamav-us...@lists.clamav.net,clamav-de...@lists.clamav.net
Sent: Fri, 26 Jan 2018 20:14:45 +0000
Subject:



http://blog.clamav.net/2018/01/update-on-recent-file-descriptors-issue.html

Update on the recent "File Descriptors" issue in ClamAV
A signature introduced in daily.cvd version 24256 triggered bug that exists in 
all current stable releases of ClamAV.

The symptoms on a Linux/Unix machine running clamd under heavy load results in 
the system running out of file descriptors, because the file descriptors for 
deleted temp files were not being closed.  On Windows systems, a different 
error occurred wherein the system reported “permission denied” errors when 
closing (unlinking) the temp files.

The bug was reported as early as April 2016 here: 
https://bugzilla.clamav.net/show_bug.cgi?id=11549. A patch for this bug was 
applied towards the upcoming 0.100.0 feature release of ClamAV, but 
unfortunately the fix didn’t make it into the recent 0.99.3 security patch 
release.

For the time-being, the offending signature was pulled as of daily.cvd version 
24258, and changes to our backend processes have been implemented to prevent 
this from happening again.

We apologize for the inconvenience this has caused. Future releases of ClamAV 
will have a fix in place to prevent this issue from reocurring.



--
Joel Esler | Talos: Manager | jes...@cisco.com<mailto:jes...@cisco.com>






_______________________________________________
clamav-users mailing list
clamav-us...@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Reply via email to