clamAV update

[SBNDawg]

I just update MailScanner, FE and thought I would finally ask for help on this annoyance. ClamAV always has an upgrade button visible. When it finishes going through the process. Here's the end of the info:

removed directory: `/usr/src/clamav-0.97/test/.split'
removed `/usr/src/clamav-0.97/test/Makefile.in'
removed `/usr/src/clamav-0.97/test/Makefile.am'
removed directory: `/usr/src/clamav-0.97/test'
removed `/usr/src/clamav-0.97/contrib/safe_clamd/safe_clamd'
removed directory: `/usr/src/clamav-0.97/contrib/safe_clamd'
removed `/usr/src/clamav-0.97/contrib/cleanup-partial.pl'
removed directory: `/usr/src/clamav-0.97/contrib'
removed `/usr/src/clamav-0.97/clamav-config.in'
removed directory: `/usr/src/clamav-0.97'
removed `/usr/src/clamav-0.97.tar.gz'
sh: /usr/local/bin/freshclam: No such file or directory
`/usr/mscpanel/clamd' -> `/etc/init.d/clamd'
Stopping clamd: [FAILED]
Starting clamd: [FAILED]

Tidying up...

Shutting down MailScanner daemons:
MailScanner:[ OK ]
Waiting for MailScanner to stop..
Starting MailScanner daemons:
MailScanner: [ OK ]

...All done.

I can do very basic stuff on a Linux box (I'm a Windows Net Admin). Can some one point me in the right direct to fix this please.

Thanks,
-Roger

[SBNDawg]

Well you can teach an old dawg new tricks. I manged to fix it myself by reinstalling clamav. There's hope after all...

[mikelegg]

I've just started having this problem on one machine when trying to upgrade to 97.1.

The installer doesn't report any errors, but when it reaches the end it says

Code: Select all

WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97 Recommended version: 0.97.1

The only thing that makes this server different from all of my others is that we trialled CloudLinux on it and then removed it. Perhaps it left something behind that is interfering with the Clam AV upgrade

The installer output is below ...

Code: Select all

 Main
ConfigServer MailScanner Front-End
Retrieving new ClamAV package...

...0%
...100%

Unpacking, building and installing new ClamAV package...

Retrieving ClamAV tarball from Sourceforge...

checking build system type... x86_64-unknown-linux-gnu
checking host system type... x86_64-unknown-linux-gnu
checking target system type... x86_64-unknown-linux-gnu
creating target.h - canonical system defines
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking how to create a ustar tar archive... gnutar
checking for gawk... (cached) gawk
checking whether ln -s works... yes
checking whether make sets $(MAKE)... (cached) yes
checking for style of include used by make... GNU
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... gcc3
checking for a sed that does not truncate output... /bin/sed
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for fgrep... /bin/grep -F
checking for ld used by gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking the maximum length of command line arguments... 98304
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for ar... ar
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from gcc object... ok
checking how to run the C preprocessor... /lib/cpp
/usr/local/etc/freshclam.conf converted
removed `/usr/src/clamav-0.97.1/libclamunrar/unrar.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarfilter.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/libclamunrar.map'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarhlp.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrar15.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrar20.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarvm.h'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrar15.h'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarvm.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarcmd.h'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarcmd.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarhlp.h'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarfilter.h'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrar20.h'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarppm.c'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrarppm.h'
removed `/usr/src/clamav-0.97.1/libclamunrar/unrar.h'
removed directory: `/usr/src/clamav-0.97.1/libclamunrar'
removed `/usr/src/clamav-0.97.1/aclocal.m4'
removed `/usr/src/clamav-0.97.1/COPYING.llvm'
removed `/usr/src/clamav-0.97.1/database/main.cvd'
removed `/usr/src/clamav-0.97.1/database/daily.cvd'
removed `/usr/src/clamav-0.97.1/database/Makefile.am'
removed `/usr/src/clamav-0.97.1/database/Makefile.in'
removed directory: `/usr/src/clamav-0.97.1/database'
removed `/usr/src/clamav-0.97.1/COPYING.lzma'
removed `/usr/src/clamav-0.97.1/configure.in'
removed `/usr/src/clamav-0.97.1/COPYING.sha256'
removed `/usr/src/clamav-0.97.1/sigtool/vba.h'
removed `/usr/src/clamav-0.97.1/sigtool/sigtool.c'
removed `/usr/src/clamav-0.97.1/sigtool/COPYING'
removed `/usr/src/clamav-0.97.1/sigtool/Makefile.am'
removed `/usr/src/clamav-0.97.1/sigtool/vba.c'
removed `/usr/src/clamav-0.97.1/sigtool/Makefile.in'
removed directory: `/usr/src/clamav-0.97.1/sigtool'
removed `/usr/src/clamav-0.97.1/FAQ'
removed `/usr/src/clamav-0.97.1/COPYING.bzip2'
removed `/usr/src/clamav-0.97.1/clamav-config.h.in'
removed `/usr/src/clamav-0.97.1/COPYING.unrar'
removed `/usr/src/clamav-0.97.1/test/README'
removed `/usr/src/clamav-0.97.1/test/Makefile.am'
removed `/usr/src/clamav-0.97.1/test/Makefile.in'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam_cache_emax.tgzab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.exe.binhexaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.tar.gzab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.ea06.exeaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam-v3.rarab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.sisaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.7zaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam_IScab_int.exeab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.exe.binhexab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.bin-be.cpioab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.pdfab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.arjab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.odc.cpioab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.bin-be.cpioaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.bin-le.cpioaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam.cabab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam-pespin.exeaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam-aspack.exeab'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam-petite.exeaa'
removed `/usr/src/clamav-0.97.1/test/.split/split.clam_ISmsi_ext.exeab'

[ similar lines removed to get the post under 60000 characters]

removed `/usr/src/clamav-0.97.1/clamd/dazukoio.h'
removed `/usr/src/clamav-0.97.1/clamd/clamuko.h'
removed directory: `/usr/src/clamav-0.97.1/clamd'
removed directory: `/usr/src/clamav-0.97.1'
removed `/usr/src/clamav-0.97.1.tar.gz'
ClamAV update process started at Sun Jun 19 09:05:19 2011
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97 Recommended version: 0.97.1
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven)
daily.cld is up to date (version: 13212, sigs: 127454, f-level: 60, builder: guitar)
bytecode.cld is up to date (version: 143, sigs: 40, f-level: 60, builder: edwin)
`/usr/mscpanel/clamd' -> `/etc/init.d/clamd'
Stopping clamd: [  OK  ]
Starting clamd: [  OK  ]

Tidying up...

Shutting down MailScanner daemons:
         MailScanner:[  OK  ]
         Waiting for MailScanner to stop..
Starting MailScanner daemons:
         MailScanner:       [  OK  ]

...All done.

© 2004 - 2011, ConfigServer Services (Way to the Web Limited)

[mikelegg]

At http://www.clamav.net/lang/en/support/faq/faq-upgrade/ it says ...

make sure that you haven’t got old libraries (libclamav.so*) lying around your filesystem. You can verify it using: $ ldd `which freshclam`

When I run ldd /usr/local/bin/freshclam I get ...

Code: Select all

linux-vdso.so.1 =>  (0x00007fff5b333000)
libclamav.so.6 => /usr/local/lib64/libclamav.so.6 (0x00002b311f7e2000)
libz.so.1 => /lib64/libz.so.1 (0x0000003f4ea00000)
libresolv.so.2 => /lib64/libresolv.so.2 (0x00000035d4400000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00000035cb200000)
libc.so.6 => /lib64/libc.so.6 (0x00000035ca600000)
libbz2.so.1 => /usr/lib64/libbz2.so.1 (0x00000035df000000)
libm.so.6 => /lib64/libm.so.6 (0x00000035caa00000)
libdl.so.2 => /lib64/libdl.so.2 (0x00000035cae00000)
/lib64/ld-linux-x86-64.so.2 (0x00000035ca200000)

So it looks like there are a lot of old libraries lying around .... just a bit nervous about deleting libraries on a production machine.

[mikelegg]

As an experiment, I tried renaming libclamav.so.6 and then running the upgrade.

The upgrade errored with

/usr/local/bin/freshclam: error while loading shared libraries: libclamav.so.6: cannot open shared object file: No such file or directory

So I misunderstood what ldd does - it apparently shows the libraries that are required and the ClamAV site is rather misleading when it defines old libraries as "libclamav.so*" because clearly there are files that fit that description that are NOT old.

So if ldd shows libraries that are required, then a whole lot of guess work is required to work out which ones are not required. Again not much fun on a production machine.