ClamAV DB update leads to **UNCHECKED** in all messages

Revision as of 23:06, 23 October 2016 by Jorge de la Cruz (talk | contribs)

ClamAV DB Update leads to **UNCHECKED** in all messages

   KB 23064        Last updated on 2016-10-23  




0.00
(0 votes)

Purpose

A recent update to ClamAV's DB causes clam to not start up, leading to emails being marked as '**UNCHECKED**'

This affects ClamAV version 0.97.8, and therefore the Zimbra versions affected are 8.0.6 and below, including 7.x.

  • ZCS 8.0.7+, 8.6 and 8.7 are not affected.

Manually update of the db causes a memory allocation error and fills up the logs

Try to manually regenerating the DB leads to the following error:

[zimbra@zcs806 ~]$ /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
ClamAV update process started at Sat Oct 22 18:25:14 2016
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97.8-broken-compiler Recommended version: 0.99.2
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main.cvd [100%]
main.cvd updated (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
Downloading daily.cvd [100%]
ERROR: During database load : WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net [...] WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net
WARNING: Database successfully loaded, but there is stderr output
daily.cvd updated (version: 22410, sigs: 761318, f-level: 63, builder: neo)
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 283, sigs: 53, f-level: 63, builder: neo)
Database updated (4980161 signatures) from db.us.clamav.net (IP: 69.163.100.14)

Resolution

The recommended resolution is upgrade to at least Zimbra Collaboration 8.6 with the latest Patch

Disabling the antivirus

You can follow a workaround by disable the antivirus:

zmprov ms `zmhostname` -zimbraServiceEnabled antivirus
zmcontrol restart

But this workaround will let your Zimbra Collaboration Platform without an Antivirus, and we don't recommend it.

===Manual upgrade of ClamAV component For those who doesn't want to upgrade at the moment, you can follow the next wiki article, and do a manual upgrade of your ClamAV component

Additional Content

  • If you are affected by this issue, and need help to Upgrade, please contact Zimbra Professional Services team, and ask for the Zimbra Collaboration Upgrade Assessment
Verified Against: Zimbra Collaboration 8.0.6 and below Date Created: 22/10/2016
Article ID: https://wiki.zimbra.com/index.php?title=ClamAV_DB_update_leads_to_**UNCHECKED**_in_all_messages Date Modified: 2016-10-23



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Wiki/KB reviewed by Jorge Shashank Copyeditor Last edit by Jorge de la Cruz
Jump to: navigation, search