[clamav-users] Read the signature in cdiff file.

2018-01-29 Thread Arul Raj
Hi Team, Can you please share, how to read the cdiff signature file in human-readable format. - Arulraj I ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a com

Re: [clamav-users] Read the signature in cdiff file.

2018-01-29 Thread Al Varnell
Just trying to figure out why anybody would ever need to. As soon as they are downloaded they are immediately integrated into the appropriate .cld file where they can be read. Subscribe to the clamav-virusdb e-mail list if you want to see a list of what signatures are contained in a particular

Re: [clamav-users] Read the signature in cdiff file.

2018-01-29 Thread Arul Raj
Yes after downloaded they are immediately integrated into the appropriate .cld file. Just to my knowledge, i want to know what type of signature content added. For Example. In version 22445 contains some signature and the next version 22446 version dropped that signature. If I search for that drop

Re: [clamav-users] Read the signature in cdiff file.

2018-01-29 Thread Reindl Harald
Am 29.01.2018 um 11:24 schrieb Arul Raj: Yes after downloaded they are immediately integrated into the appropriate .cld file. Just to my knowledge, i want to know what type of signature content added. For Example. In version 22445 contains some signature and the next version 22446 version drop

Re: [clamav-users] Read the signature in cdiff file.

2018-01-29 Thread Mark Allan
I agree with Al - I can't really see why anyone would need to do this, but I've been dealing a lot with cdiff and script files lately, so I know exactly how to do what you're asking! At the start of each cdiff file is a header which reads something like this: ClamAV-Diff:24263:17164: It'

[clamav-users] Daily version 24256

2018-01-29 Thread Carlos García Gómez
Hi, I´m thinking about http://blog.clamav.net/2018/01/update-on-recent-file-descriptors-issue.html I would like to reproduce the problem again to force the error in order to be able to establish a system alarms or warnings with Nagios scripting Anybody knows how can I get daily.cld version

Re: [clamav-users] Daily version 24256

2018-01-29 Thread Steve Basford
>I would like to reproduce the problem again to force the error in order to >be able to establish a system alarms or warnings with Nagios scripting >Anybody knows how can I get daily.cld version 24256? Any link to download >it? You could create this: badsig.ldb: Vbs.Downloader.Generic-6431223-0

Re: [clamav-users] CVE-2017-6419 patched in 0.99.3?

2018-01-29 Thread Micah Snyder (micasnyd)
This was an oversight on my part. I recently took over the lead developer role for ClamAV. I made an effort to address a set up vulns that were approaching the traditional 90 day disclosure window. As I was preparing the patch, I was informed that there were a couple of other missing CVE pat

[clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Frank Elsner
Hello, I try to compile clamav on my fulle updates fedora 27 system but it fails with .. checking for xmlTextReaderRead in -lxml2... yes configure: Compiling and linking with libxml2 from /usr checking for OpenSSL installation... configure: error: OpenSSL not found. I don't understand this as O

Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Reindl Harald
Am 29.01.2018 um 15:44 schrieb Frank Elsner: I try to compile clamav on my fulle updates fedora 27 system but it fails with why in the world? dnf --enablerepo=updates-testing upgrade clamav\* https://koji.fedoraproject.org/koji/buildinfo?buildID=1021024 Package Name clamav Version 0.99.3 R

Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Micah Snyder (micasnyd)
Fedora must have an install location for openssl-devel that isn’t found by the configure script. To address the issue right now, you can add the following flag to your configure arguments --with-openssl=/path/to/openssl/install For example if the headers for openssl were in /usr/local/include/op

Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Reindl Harald
* Mon Jul 17 2017 Sérgio Basto - 0.99.2-9 - Add patch for openssl-1.1 no idea what sane reasons are there to compile at your own but why don#t you then just start with the feodra src.rpm and it's patches Am 29.01.2018 um 15:56 schrieb Reindl Harald: Am 29.01.2018 um 15:44 schrieb Frank Elsn

Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Reindl Harald
Am 29.01.2018 um 15:56 schrieb Micah Snyder (micasnyd): Fedora must have an install location for openssl-devel that isn’t found by the configure script. the install location on Fedora is fine for every software out there which supports openssl 1.1 and according to the changelog there are s

Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Brian Morrison
On Mon, 29 Jan 2018 15:57:50 +0100 Reindl Harald wrote: > no idea what sane reasons are there to compile at your own but why > don#t you then just start with the feodra src.rpm and it's patches People seem unaware of the ease of building and rebuilding rpms using Mock, or just getting the updates

Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Micah Snyder (micasnyd)
Ah crap... you’re right, Reindl. I somehow skipped past the version number. openssl 1.1 isn’t supported in 0.99.2 and 0.99.3. It should work in the latest dev branch and previous beta (unstable), although the code base uses deprecated functions and won’t build if you’re using stricter configu

Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Reindl Harald
Am 29.01.2018 um 16:28 schrieb Micah Snyder (micasnyd): Ah crap... you’re right, Reindl. I somehow skipped past the version number. openssl 1.1 isn’t supported in 0.99.2 and 0.99.3. It should work in the latest dev branch and previous beta (unstable), although the code base uses deprecated

[clamav-users] ClamAV failed to scan files in /tmp folder

2018-01-29 Thread cpass test
Hello, I installed the ClamAV on my linux server and configured a Moodle LMS to use the ClamAV. They have a plugin in Moodle for it. Here are the parameters for connecting to ClamAV: Running method: Unix domain

Re: [clamav-users] ClamAV failed to scan files in /tmp folder

2018-01-29 Thread Reindl Harald
Am 29.01.2018 um 20:27 schrieb cpass test: configured a Moodle LMS to use the ClamAV. They have a plugin in Moodle for it. Here are the parameters for connecting to ClamAV: Unix domain socket: /var/run/clamd.scan/clamd.sock The clamd server is running and the socket really exist in specified

[clamav-users] GPG key where? (was: Re: GPG signature problem with clamav-0.99.2.tar.gz)

2018-01-29 Thread Tomasz Papszun
On Fri, 30 Jun 2017 at 20:12:11 +, Joel Esler (jesler) wrote: > Jim, > > Thanks. This look like the vulndev key. The correct key is on the contact > page of Talosintelligence.com. > > We'll take a look here. Hi, Joel. I went to http://www.clamav.net/downloads, got http://www.clamav.n

Re: [clamav-users] GPG key where? (was: Re: GPG signature problem with clamav-0.99.2.tar.gz)

2018-01-29 Thread SCOTT PACKARD
https://talosintelligence.com/about click on box "Talos PGP Public Key". Maybe that one works? If it was its own URL I'd include it, but it looks like it's javascript, in the same page. Regards, Scott > -Original Message- > From: clamav-users [mailto:clamav-users-boun...@lists.clamav.n

Re: [clamav-users] GPG key where? (was: Re: GPG signature problem with clamav-0.99.2.tar.gz)

2018-01-29 Thread Joel Esler (jesler)
That's the correct one, thank you Scott. -- Joel Esler | Talos: Manager | jes...@cisco.com On Jan 29, 2018, at 6:13 PM, SCOTT PACKARD mailto:scott.pack...@raytheon.com>> wrote: https://talosintelligence.com/about click on box "Talos PGP Public Key". Maybe that one

Re: [clamav-users] GPG key where? (was: Re: GPG signature problem with clamav-0.99.2.tar.gz)

2018-01-29 Thread Tomasz Papszun
On Mon, 29 Jan 2018 at 23:28:42 +, Joel Esler (jesler) wrote: > That's the correct one, thank you Scott. > > -- > Joel Esler | Talos: Manager | jes...@cisco.com > > > On Jan 29, 2018, at 6:13 PM, SCOTT PACKARD > mailto:scott.pack...@raytheon.com>> wrote: > > https:

Re: [clamav-users] GPG key where? (was: Re: GPG signature problem with clamav-0.99.2.tar.gz)

2018-01-29 Thread Paul Kosinski
I tend to get keys via GPG's "--recv-key" command, since it often is not clear from the Web site where to get the key. E.g., when "gpg --verify" reports the key is missing, the command below will usually retrieve it (when it is provided, of course, with the right fingerprint in place of "BCA5BFAD"