ClamAV DB update leads to **UNCHECKED** in all messages

Revision as of 16:39, 22 October 2016 by Jorge de la Cruz (talk | contribs) (Created page with "{{BC|Certified}} __FORCETOC__ <div class="col-md-12 ibox-content"> =ClamAV DB Update leads to **UNCHECKED** in all messages = {{KB|{{ZC}}|{{ZCS 8.0}}|{{ZCS 7.0}}||}} {{WIP}}...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

ClamAV DB Update leads to **UNCHECKED** in all messages

   KB 23064        Last updated on 2016-10-22  




0.00
(0 votes)


Purpose

A recent update to ClamAV's DB causes clam to not start up, leading to emails being marked as '**UNCHECKED**'

This affects ClamAV version 0.97.8, and therefore the Zimbra versions affected are 8.0.6 and below, including 7.x.

  • ZCS 8.0.7+, 8.6 and 8.7 are not affected.

Manually regenerating the DB leads to the following error:

[zimbra@zcs806 ~]$ /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
ClamAV update process started at Sat Oct 22 18:25:14 2016
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97.8-broken-compiler Recommended version: 0.99.2
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main.cvd [100%]
main.cvd updated (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
Downloading daily.cvd [100%]
ERROR: During database load : WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net [...] WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net
WARNING: Database successfully loaded, but there is stderr output
daily.cvd updated (version: 22410, sigs: 761318, f-level: 63, builder: neo)
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 283, sigs: 53, f-level: 63, builder: neo)
Database updated (4980161 signatures) from db.us.clamav.net (IP: 69.163.100.14)

Resolution

The only fix for now is upgrade to at least Zimbra Collaboration 8.0.9, but we encourage you to upgrade to Zimbra Collaboration 8.6 and the latest Patch.

Our Technical Support Engineers might have found a workaround by disable the antivirus:

zmprov ms `zmhostname` -zimbraServiceEnabled antivirus
zmcontrol restart

But this workaround will let your Zimbra Collaboration Platform without an Antivirus, and we don't recommend it.

Additional Content

  • No related content
Verified Against: Zimbra Collaboration 8.0.6 and below Date Created: 22/10/2016
Article ID: https://wiki.zimbra.com/index.php?title=ClamAV_DB_update_leads_to_**UNCHECKED**_in_all_messages Date Modified: 2016-10-22



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Wiki/KB reviewed by Jorge Shashank Copyeditor Last edit by Jorge de la Cruz
Jump to: navigation, search