Bug 13417 - Update request: clamav
Summary: Update request: clamav
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 4
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA3TOO advisory mga3-32-ok mga3-64-o...
Keywords: validated_update
Depends on: 13014
Blocks:
  Show dependency treegraph
 
Reported: 2014-05-20 12:39 CEST by Zoltan Balaton
Modified: 2014-06-27 17:27 CEST (History)
6 users (show)

See Also:
Source RPM: clamav-0.98.1-1.mga3.src.rpm
CVE:
Status comment:


Attachments

Description Zoltan Balaton 2014-05-20 12:39:14 CEST
Freshclam says:
    Software version from DNS: 0.98.3
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.98.1 Recommended version: 0.98.3

There's an update candidate in testing but it does not appear on the QA page among updates to be ready for testing. This is not the first time this happens, probably there's a problem in keeping the procedure somewhere.

Reproducible: 

Steps to Reproduce:
David Walser 2014-05-20 21:23:13 CEST

Depends on: (none) => 13014

Comment 1 Thomas Spuhler 2014-05-27 01:28:04 CEST
This is correct. I did the update and left for vacation. I write an update notice next week when I am back. I currently have only sporadic internet connection (or data connection)
Thomas

CC: (none) => thomas

Thomas Spuhler 2014-06-03 17:37:42 CEST

Status: NEW => ASSIGNED

Thomas Spuhler 2014-06-03 17:38:20 CEST

Assignee: bugsquad => thomas

Comment 2 Thomas Spuhler 2014-06-04 01:58:33 CEST
I have updated the package to version 0.98.3
The following RPMS are in mga3 updates_testing:
clamav-0.98.3-1.mga5.src.rpm
clamav-0.98.3-1.mga5.x86_64.rpm
clamd-0.98.3-1.mga5.x86_64.rpm
clamav-milter-0.98.3-1.mga5.x86_64.rpm
clamav-db-0.98.3-1.mga5.noarch.rpm
lib64clamav6-0.98.3-1.mga5.x86_64.rpm
lib64clamav-devel-0.98.3-1.mga5.x86_64.rpm
clamav-debuginfo-0.98.3-1.mga5.x86_64.rpm
and i586 packages accordingly

Assigning to QA

Assignee: thomas => qa-bugs

Comment 3 Thomas Spuhler 2014-06-04 02:00:30 CEST
(In reply to Thomas Spuhler from comment #2)
> I have updated the package to version 0.98.3
> The following RPMS are in mga3 updates_testing:
> clamav-0.98.3-1.mga5.src.rpm
> clamav-0.98.3-1.mga5.x86_64.rpm
> clamd-0.98.3-1.mga5.x86_64.rpm
> clamav-milter-0.98.3-1.mga5.x86_64.rpm
> clamav-db-0.98.3-1.mga5.noarch.rpm
> lib64clamav6-0.98.3-1.mga5.x86_64.rpm
> lib64clamav-devel-0.98.3-1.mga5.x86_64.rpm
> clamav-debuginfo-0.98.3-1.mga5.x86_64.rpm
> and i586 packages accordingly
> 
> Assigning to QA

Ooops, copied from the build in local cauldron. They all have mga3 extensions
Comment 4 Zoltan Balaton 2014-06-09 11:22:31 CEST
Tested on mga3-32.

After the update I still see this warning:

[LibClamAV] Detected duplicate databases /var/lib/clamav/daily.cvd and /var/lib/clamav/daily.cld, please manually remove one of them

which has gone away by itself after the next incremental update leaving only daily.cld. What seems to happen is that the freshclam run after the update could not download an incremental update for some reason and then downloaded daily.cvd instead. Then until downloading another incremental daily cdiff this warning appears and goes away when the incremental update is applied leaving only a daily.cld.

Other than that it seems to work and a scan has been run and found signatures.

Whiteboard: (none) => MGA3-32-OK

Comment 5 rexy 2014-06-11 19:11:08 CEST
Tested on mga4-64. All is ok on desktop and on gateway with havp (www.alcasar.net).

Thank you

CC: (none) => richard

Comment 6 claire robinson 2014-06-11 19:12:45 CEST
Did you mean mga3 64 rexy?
Comment 7 rexy 2014-06-12 00:29:33 CEST
No i mean mga4. Indeed, we also need this update on mageia4.
test with RPM on mga4 updates_testing
- on gateway server (alcasar) with havp --> ok
- on desktop (console and clamtk) --> ok
Comment 8 Zoltan Balaton 2014-06-17 11:20:30 CEST
    Software version from DNS: 0.98.4
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.98.3 Recommended version: 0.98.4
Comment 9 rexy 2014-06-17 23:12:07 CEST
Hope to test the new RPM soon. It will be perfect if the packager of "clamtk" also updates he's RPM (5.01 --> 5.07). Thanks a lot
Comment 10 Rémi Verschelde 2014-06-22 13:10:54 CEST
There seems indeed to be an update candidate for clamav 0.98.4 in Mageia 4, and I suppose it's the same for Mageia 3.

Adding the feedback marker for now. Thomas, could you give us an advisory together with an updated list of the packages that should be tested? If the update also concerns Mageia 4, please set the bug version tag to "4" and add "MGA3TOO" to the keywords.

CC: (none) => remi
Whiteboard: MGA3-32-OK => feedback

Comment 11 Rémi Verschelde 2014-06-22 14:08:48 CEST
Just saw your request to remove clamav's update candidate because of a wrong release tag, so I guess you are working on this update :-)

Please don't forget to give us an advisory, though.
Comment 12 Thomas Spuhler 2014-06-22 17:13:53 CEST
(In reply to Rémi Verschelde from comment #11)
> Just saw your request to remove clamav's update candidate because of a wrong
> release tag, so I guess you are working on this update :-)
> 
> Please don't forget to give us an advisory, though.

Sure will as soon as the packages are done.
Comment 13 Thomas Spuhler 2014-06-22 23:07:18 CEST
I have updated the package to version 0.98.4
The following RPMS are in mga3 and mga4 updates_testing:
clamav-0.98.4-1.mga4.src.rpm
clamav-0.98.4-1.mga4.x86_64.rpm
clamd-0.98.4-1.mga4.x86_64.rpm
clamav-milter-0.98.4-1.mga4.x86_64.rpm
clamav-db-0.98.4-1.mga4.noarch.rpm
lib64clamav6-0.98.4-1.mga4.x86_64.rpm
lib64clamav-devel-0.98.4-1.mga4.x86_64.rpm
clamav-debuginfo-0.98.4-1.mga4.x86_64.rpm
and i586 packages accordingly.

I didn't do any testing, but will let it run on my mga4, 64bit mailserver

Version: 3 => 4
Whiteboard: feedback => mga3 too

Comment 14 Thomas Spuhler 2014-06-22 23:08:36 CEST
(In reply to rexy from comment #9)
> Hope to test the new RPM soon. It will be perfect if the packager of
> "clamtk" also updates he's RPM (5.01 --> 5.07). Thanks a lot

Please file a separate bug report for this.
Comment 15 claire robinson 2014-06-23 23:01:17 CEST
Thomas, we currently have two bugs assigned to QA for mga4 clamav updates.

There is now this one and bug 13014.

Could you choose one only please and write an advisory text. This one now gives more recent package versions.
Comment 16 claire robinson 2014-06-23 23:03:03 CEST
Also this bug has 'mga3 too' in the whiteboard, which should be MGA3TOO really. 

Is this bug actually for updates to both mga3 and mga4 or should the 'mga3 too' be removed and this be just an update to mga4.
Comment 17 Zoltan Balaton 2014-06-23 23:43:59 CEST
I've originaly reported this for mga3 requesting an update of clamav. As far as I know the other bug was already there and was unrelated (about interaction with amavisd) until it was found that mga4 might need a clamav update too. I don't know why the two bugs are dependent though.
Comment 18 Thomas Spuhler 2014-06-24 17:16:43 CEST
(In reply to claire robinson from comment #16)
> Also this bug has 'mga3 too' in the whiteboard, which should be MGA3TOO
> really. 
> 
> Is this bug actually for updates to both mga3 and mga4 or should the 'mga3
> too' be removed and this be just an update to mga4.

This is actually for both, mga4 and mga3.

Hardware: i586 => All
Whiteboard: mga3 too => MGA3TOO

Comment 19 William Kenney 2014-06-24 18:47:15 CEST
In VirtualBox, M3, KDE, 32-bit

Package(s) under test:
clamav

install clamav

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.1-1.mga3.i586 is already installed

Update with freshclam

creates:
[root@localhost wilcal]# cd /var/lib/clamav
[root@localhost clamav]# ls -al
total 87980
drwxr-xr-x  3 clamav clamav     4096 Jun 24 09:32 ./
drwxr-xr-x 43 root   root       4096 Jun 24 09:29 ../
-rw-r--r--  1 clamav clamav    73081 Jun 24 09:32 bytecode.cvd
-rw-r--r--  1 clamav clamav 25276745 Jun 24 09:32 daily.cvd
-rw-r--r--  1 clamav clamav 64720632 Sep 20  2013 main.cvd
-rw-------  1 clamav clamav      312 Jun 24 09:32 mirrors.dat

run clamscan

[wilcal@localhost ~]$ clamscan -r -i
LibClamAV Warning: **************************************************
LibClamAV Warning: ***  The virus database is older than 7 days!  ***
LibClamAV Warning: ***   Please update it as soon as possible.    ***
LibClamAV Warning: **************************************************

----------- SCAN SUMMARY -----------
Known viruses: 1990521
Engine version: 0.97.8
Scanned directories: 425
Scanned files: 785
Infected files: 0
Data scanned: 206.05 MB
Data read: 281.91 MB (ratio 0.73:1)
Time: 18.663 sec (0 m 18 s)

install clamav from updates_testing

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.4-1.mga3.i586 is already installed

Update with freshclam - database up-to-date

run clamscan

[root@localhost wilcal]# clamscan -r -i

----------- SCAN SUMMARY -----------
Known viruses: 3419704
Engine version: 0.98.4
Scanned directories: 1392
Scanned files: 1925
Infected files: 0
Data scanned: 404.73 MB
Data read: 382.07 MB (ratio 1.06:1)
Time: 29.959 sec (0 m 29 s)

Successful clamscan.

CC: (none) => wilcal.int

Comment 20 William Kenney 2014-06-24 19:08:25 CEST
In VirtualBox, M3, KDE, 32-bit

Package(s) under test:
clamav

install clamav

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.1-1.mga3.x86_64 is already installed

Update with freshclam

creates:
[root@localhost wilcal]# cd /var/lib/clamav
[root@localhost clamav]# ls -l
total 87972
-rw-r--r-- 1 clamav clamav    73081 Jun 24 09:58 bytecode.cvd
-rw-r--r-- 1 clamav clamav 25276745 Jun 24 09:58 daily.cvd
-rw-r--r-- 1 clamav clamav 64720632 Sep 20  2013 main.cvd
-rw------- 1 clamav clamav      312 Jun 24 09:58 mirrors.dat

run clamscan

[root@localhost tmp]# clamscan -r -i

----------- SCAN SUMMARY -----------
Known viruses: 3419704
Engine version: 0.98.1
Scanned directories: 1
Scanned files: 0
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 6.171 sec (0 m 6 s)

install clamav from updates_testing

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.4-1.mga3.x86_64 is already installed

Update with freshclam - database up-to-date

run clamscan

[root@localhost wilcal]# clamscan -r -i

----------- SCAN SUMMARY -----------
Known viruses: 3419704
Engine version: 0.98.4
Scanned directories: 893
Scanned files: 1441
Infected files: 0
Data scanned: 367.18 MB
Data read: 346.63 MB (ratio 1.06:1)
Time: 29.260 sec (0 m 29 s)

Successful clamscan.
Comment 21 William Kenney 2014-06-24 20:10:39 CEST
(In reply to William Kenney from comment #20)

> In VirtualBox, M3, KDE, 32-bit

correct to:

In VirtualBox, M3, KDE, 64-bit
Comment 22 William Kenney 2014-06-24 22:37:14 CEST
In VirtualBox, M4, KDE, 32-bit

Package(s) under test:
clamav

install clamav

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.1-1.mga4.i586 is already installed

Update with freshclam

creates:
[root@localhost wilcal]# cd /var/lib/clamav
[root@localhost clamav]# ls -al
total 87980
drwxr-xr-x  3 clamav clamav     4096 Jun 24 11:21 ./
drwxr-xr-x 45 root   root       4096 Jun 24 11:13 ../
-rw-r--r--  1 clamav clamav    73081 Jun 24 11:21 bytecode.cvd
-rw-r--r--  1 clamav clamav 25276745 Jun 24 11:21 daily.cvd
-rw-r--r--  1 clamav clamav 64720632 Sep 20  2013 main.cvd
-rw-------  1 clamav clamav      312 Jun 24 11:21 mirrors.dat

run clamscan

[wilcal@localhost ~]$ clamscan -r -i

----------- SCAN SUMMARY -----------
Known viruses: 3419704
Engine version: 0.98.1
Scanned directories: 2
Scanned files: 4
Infected files: 0
Data scanned: 24.29 MB
Data read: 85.89 MB (ratio 0.28:1)
Time: 7.603 sec (0 m 7 s)

install clamav from updates_testing

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.4-1.mga4.i586 is already installed

Update with freshclam - database up-to-date

run clamscan

[root@localhost wilcal]# clamscan -r -i

----------- SCAN SUMMARY -----------
Known viruses: 3419704
Engine version: 0.98.4
Scanned directories: 3548
Scanned files: 37384
Infected files: 0
Data scanned: 8473.45 MB
Data read: 150785.87 MB (ratio 0.06:1)
Time: 2193.042 sec (36 m 33 s)

Successful clamscan but took 36 minutes.
Comment 23 William Kenney 2014-06-24 22:37:53 CEST
In VirtualBox, M4, KDE, 64-bit

Package(s) under test:
clamav

install clamav

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.1-1.mga4.x86_64 is already installed

Update with freshclam

creates:
[root@localhost wilcal]# cd /var/lib/clamav
[root@localhost clamav]# ls -al
total 87980
drwxr-xr-x  3 clamav clamav     4096 Jun 24 12:29 ./
drwxr-xr-x 45 root   root       4096 Jun 24 12:26 ../
-rw-r--r--  1 clamav clamav    73081 Jun 24 12:29 bytecode.cvd
-rw-r--r--  1 clamav clamav 25276745 Jun 24 12:29 daily.cvd
-rw-r--r--  1 clamav clamav 64720632 Sep 20  2013 main.cvd
-rw-------  1 clamav clamav      312 Jun 24 12:29 mirrors.dat

run clamscan

[wilcal@localhost ~]$ clamscan -r -i

----------- SCAN SUMMARY -----------
Known viruses: 3419704
Engine version: 0.98.1
Scanned directories: 2
Scanned files: 4
Infected files: 0
Data scanned: 24.29 MB
Data read: 85.89 MB (ratio 0.28:1)
Time: 6.963 sec (0 m 6 s)

install clamav from updates_testing

[root@localhost wilcal]# urpmi clamav
Package clamav-0.98.4-1.mga4.x86_64 is already installed

Update with freshclam - database up-to-date

run clamscan

[root@localhost wilcal]# clamscan -r -i

----------- SCAN SUMMARY -----------
Known viruses: 3419704
Engine version: 0.98.4
Scanned directories: 3200
Scanned files: 36664
Infected files: 0
Data scanned: 8474.38 MB
Data read: 150520.06 MB (ratio 0.06:1)
Time: 2272.836 sec (37 m 52 s)

Successful clamscan but took almost 38 minutes.
Comment 24 William Kenney 2014-06-24 22:39:20 CEST
I guess I'm ok with this if someone would explain
why the updated version took so long to scan.
Comment 25 claire robinson 2014-06-25 00:16:52 CEST
Just the number of scanned files it looks like Bill. You probably ran clamscan from different directories. The last one scanned 36664 files/8Gb of data compared to previously only 2 files/24Mb of data.
Comment 26 William Kenney 2014-06-25 01:27:04 CEST
So can we say this one's good to go?
Comment 27 claire robinson 2014-06-25 19:20:56 CEST
Yes I think so. Zoltan, any objections?

Thomas could you provide an advisory text please.

Thanks
Comment 28 Thomas Spuhler 2014-06-25 22:27:02 CEST
Advisory:
This updates the antivirus software to the latest upstream version 0.98.4.

Updated packages in core/updates_testing:
clamav-0.98.4-1.mga3.src.rpm  
clamav-0.98.4-1.mga3.i586.rpm
clamav-db-0.98.4-1.mga3.noarch.rpm 
clamav-milter-0.98.4-1.mga3.i586.rpm
clamd-0.98.4-1.mga3.i586.rpm 
libclamav-devel-0.98.4-1.mga3.i586.rpm 
libclamav6-0.98.4-1.mga3.i586.rpm
and relevant 64bit rpms
Comment 29 claire robinson 2014-06-25 22:35:17 CEST
Just use one bug per update please Thomas, as mentioned before, and compile what is being fixed into one advisory.

so..

Advisory:
This updates the antivirus software to the latest upstream version 0.98.4.
It also fixes the problem of not being able to run clamd as User Clamav.



I'll reassign the other bug back to you, you can close it then when this one has been pushed. You can use the 'Blocks' and 'Depends on' fields on the bug reports. This one is already correctly set as 'Depends on: 13014'.
Comment 30 claire robinson 2014-06-25 22:37:21 CEST
We can add this to the advisory references:
https://bugs.mageia.org/show_bug.cgi?id=13014
Comment 31 Zoltan Balaton 2014-06-26 10:30:59 CEST
No objections. I've installed the latest packages and run a successful scan but I upgraded from the previous Testing packages so I don't report it as a test.

There's still the warning about multiple virus databases after update that has to be solved by hand or one has to wait until the next update to clear things up. It would be nice if this could be fixed in some future update but that's not something that should hold this update back.
Comment 32 claire robinson 2014-06-26 14:35:03 CEST
Great, let's do it then.

Validating. Advisory uploaded.

Could sysadmin please push to 3 & 4 updates

Thanks

Keywords: (none) => validated_update
Whiteboard: MGA3TOO => MGA3TOO advisory mga3-32-ok mga3-64-ok mga4-32-ok mga4-64-ok
CC: (none) => sysadmin-bugs

Comment 33 claire robinson 2014-06-26 14:35:25 CEST
bug 13014 can also be closed when this one is pushed.
Comment 34 Thomas Backlund 2014-06-27 17:27:28 CEST
Update pushed:
http://advisories.mageia.org/MGAA-2014-0137.html

Status: ASSIGNED => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.