ClamAV DB update leads to **UNCHECKED** in all messages
ClamAV DB Update leads to **UNCHECKED** in all messages
A recent update to ClamAV's DB causes clam to not start up, leading to emails being marked as '**UNCHECKED**'
This affects ClamAV version 0.97.8, and therefore the Zimbra versions affected are 8.0.6 and below, including 7.x.
- ZCS 8.0.7+, 8.6 and 8.7 are not affected.
Manually update of the db causes a memory allocation error and fills up the logs
Try to manually regenerating the DB leads to the following error:
[zimbra@zcs806 ~]$ /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf ClamAV update process started at Sat Oct 22 18:25:14 2016 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.97.8-broken-compiler Recommended version: 0.99.2 DON'T PANIC! Read http://www.clamav.net/support/faq Downloading main.cvd [100%] main.cvd updated (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer) Downloading daily.cvd [100%] ERROR: During database load : WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net [...] WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net WARNING: Database successfully loaded, but there is stderr output daily.cvd updated (version: 22410, sigs: 761318, f-level: 63, builder: neo) Downloading bytecode.cvd [100%] bytecode.cvd updated (version: 283, sigs: 53, f-level: 63, builder: neo) Database updated (4980161 signatures) from db.us.clamav.net (IP: 184.108.40.206)
The recommended resolution is upgrade to at least Zimbra Collaboration 8.6 with the latest Patch
Disabling the antivirus
You can follow a workaround by disable the antivirus:
zmprov ms `zmhostname` -zimbraServiceEnabled antivirus zmcontrol restart
But this workaround will let your Zimbra Collaboration Platform without an Antivirus, and we don't recommend it.
Manual upgrade of ClamAV component
For those who doesn't want to upgrade at the moment, you can follow the next wiki article, and do a manual upgrade of your ClamAV component
- If you are affected by this issue, and need help to Upgrade, please contact Zimbra Professional Services team, and ask for the Zimbra Collaboration Upgrade Assessment