ClamAV DB update leads to **UNCHECKED** in all messages

ClamAV DB Update leads to **UNCHECKED** in all messages

   KB 23064        Last updated on 10/24/2016  




0.00
(0 votes)

Purpose

A recent update to ClamAV's DB causes clam to not start up, leading to emails being marked as '**UNCHECKED**'

This affects ClamAV version 0.97.8, and therefore the Zimbra versions affected are 8.0.6 and below, including 7.x.

  • ZCS 8.0.7+, 8.6 and 8.7 are not affected.

Manually update of the db causes a memory allocation error and fills up the logs

Try to manually regenerating the DB leads to the following error:

[zimbra@zcs806 ~]$ /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
ClamAV update process started at Sat Oct 22 18:25:14 2016
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97.8-broken-compiler Recommended version: 0.99.2
DON'T PANIC! Read http://www.clamav.net/support/faq
Downloading main.cvd [100%]
main.cvd updated (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
Downloading daily.cvd [100%]
ERROR: During database load : WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net [...] WARNING: [LibClamAV] mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net
WARNING: Database successfully loaded, but there is stderr output
daily.cvd updated (version: 22410, sigs: 761318, f-level: 63, builder: neo)
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 283, sigs: 53, f-level: 63, builder: neo)
Database updated (4980161 signatures) from db.us.clamav.net (IP: 69.163.100.14)

Resolution

The recommended resolution is upgrade to at least Zimbra Collaboration 8.6 with the latest Patch

Disabling the antivirus

You can follow a workaround by disable the antivirus:

zmprov ms `zmhostname` -zimbraServiceEnabled antivirus
zmcontrol restart

But this workaround will let your Zimbra Collaboration Platform without an Antivirus, and we don't recommend it.

Manual upgrade of ClamAV component

For those who doesn't want to upgrade at the moment, you can follow the next wiki article, and do a manual upgrade of your ClamAV component

Additional Content

  • If you are affected by this issue, and need help to Upgrade, please contact Zimbra Professional Services team, and ask for the Zimbra Collaboration Upgrade Assessment
Verified Against: Zimbra Collaboration 8.0.6 and below Date Created: 10/22/2016
Article ID: https://wiki.zimbra.com/index.php?title=ClamAV_DB_update_leads_to_**UNCHECKED**_in_all_messages Date Modified: 10/24/2016



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Wiki/KB reviewed by Jorge Shashank Copyeditor Last edit by Jorge de la Cruz
Jump to: navigation, search