Re: [clamav-users] ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versions published

2024-09-05 Thread Michael Orlitzky via clamav-users
On Thu, 2024-09-05 at 15:58 +, Micah Snyder (micasnyd) wrote: Warning: veering wildly off-topic below. I know rust isn't going away, I just like to hear myself talk. > Depending on countless hours of work from volunteers to maintain an OS-level > package for every library dependency seems u

Re: [clamav-users] ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versions published

2024-09-05 Thread Micah Snyder (micasnyd) via clamav-users
hem) ClamAV Development Talos Cisco Systems, Inc. H From: Michael Orlitzky Sent: Thursday, September 5, 2024 11:35 AM To: Micah Snyder (micasnyd) ; clamav-users@lists.clamav.net Subject: Re: [clamav-users] ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versio

Re: [clamav-users] ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versions published

2024-09-05 Thread Michael Orlitzky via clamav-users
On Thu, 2024-09-05 at 15:27 +, Micah Snyder (micasnyd) wrote: > Michael, > > We didn't change anything in under /libclamav/regex in 0.103.12. This is > unrelated to the release. > > But also... We maintain 0.103 for folks who can't upgrade to newer major > versions of software. > gcc-14.2 i

Re: [clamav-users] ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versions published

2024-09-05 Thread Micah Snyder (micasnyd) via clamav-users
9:55 AM To: clamav-users@lists.clamav.net Cc: Michael Orlitzky Subject: Re: [clamav-users] ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versions published On Wed, 2024-09-04 at 19:19 +, Micah Snyder (micasnyd) via clamav- users wrote: > Read this online at > https://blog.cl

Re: [clamav-users] ClamAV 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch versions published

2024-09-05 Thread Michael Orlitzky via clamav-users
On Wed, 2024-09-04 at 19:19 +, Micah Snyder (micasnyd) via clamav- users wrote: > Read this online at > https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html > > Today, we are publishing the 1.4.1, 1.3.2, 1.0.7, and 0.103.12 security patch > versions. v0.103.12 fails t

Re: [clamav-users] ClamAV on Windows

2024-08-21 Thread Eigeldinger Simon via clamav-users
Hi Brendan, Actually the latter. I already looked a bit at the manpage and the help text of clamscan. And maybe some other recommendations you might find that Windows users might find useful. Greetings, Simon Von: Brendan Bell (brebell) Gesendet: Mittwoch, 21. August 2024 16:09 An: clamav-users

Re: [clamav-users] ClamAV on Windows

2024-08-21 Thread Brendan Bell (brebell) via clamav-users
Welcome Simon! Just to clarify are you asking for help on how to adjust the default size for files scanned or are you asking for advice on size limit recommendations and the thoughts behind those recommendations? Brendan From: clamav-users on behalf of Eige

Re: [clamav-users] Clamav and auto updating

2024-07-30 Thread Masaru Nomiya via clamav-users
Hello, In the Message; Subject: [clamav-users] Clamav and auto updating Message-ID : Date & Time: Tue, 30 Jul 2024 22:58:57 + [AH] == Arlo Hill via clamav-users has written: AH> Hello, AH> We are using Ansible to update the ClamAV databases AH> automatically, I know there

Re: [clamav-users] Clamav and auto updating

2024-07-30 Thread Scott Kitterman via clamav-users
This is what CVD update is for: https://github.com/Cisco-Talos/cvdupdate Scott K On July 31, 2024 2:39:41 AM UTC, Maarten Broekman via clamav-users wrote: >Your best bet would be to have freshclam running on one machine and have the >rest use the Ansible playbook to pull from that “freshclam

Re: [clamav-users] Clamav and auto updating

2024-07-30 Thread Maarten Broekman via clamav-users
Your best bet would be to have freshclam running on one machine and have the rest use the Ansible playbook to pull from that “freshclam machine”. Or, if you want to keep it all Ansible, have the playbook pull the definitions vis freshclam on one machine and then copy to all the others. -Maart

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-25 Thread Gary R. Schmidt via clamav-users
On 25/07/2024 01:03, Giacomazzi Gabriele Antonio wrote: That's the strangest reply i ever received in a community lol. You're new. Fortunately my boss is not only paper and stuff, he is very technical. So are they. They are not VMs, they are physical PCs. We are required to get the ISO 270

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-24 Thread Micah Snyder (micasnyd) via clamav-users
Talos Cisco Systems, Inc. From: Giacomazzi Gabriele Antonio Sent: Wednesday, July 24, 2024 10:54 AM To: Micah Snyder (micasnyd) Cc: ClamAV users ML Subject: Re: [clamav-users] clamav preventing CLion from working properly So your advice is to just don't use t

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-24 Thread Giacomazzi Gabriele Antonio via clamav-users
That's the strangest reply i ever received in a community lol. Fortunately my boss is not only paper and stuff, he is very technical. They are not VMs, they are physical PCs. We are required to get the ISO 27001 certification, so we need to install anti-viruses on all employees workstations. The o

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-24 Thread Gary R. Schmidt via clamav-users
On 25/07/2024 00:26, Giacomazzi Gabriele Antonio wrote: Hi, thanks for replying. The on-access feature it's required by the company i work for. I don't understand where the problem is since i've done the same configuration on all workstations, but in some of them there is this problem. Oh, g

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-24 Thread Giacomazzi Gabriele Antonio via clamav-users
sers < > clamav-users@lists.clamav.net> > *Sent:* Wednesday, July 24, 2024 10:26 AM > *To:* ClamAV users ML > *Cc:* Giacomazzi Gabriele Antonio < > gabrieleantonio.giacoma...@stud.itsaltoadriatico.it> > *Subject:* Re: [clamav-users] clamav preventing CLion from working >

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-24 Thread Micah Snyder (micasnyd) via clamav-users
k. Micah Snyder (they/them) ClamAV Development Talos Cisco Systems, Inc. From: clamav-users on behalf of Giacomazzi Gabriele Antonio via clamav-users Sent: Wednesday, July 24, 2024 10:26 AM To: ClamAV users ML Cc: Giacomazzi Gabriele Antonio Subject: Re: [clamav-users] clam

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-24 Thread Giacomazzi Gabriele Antonio via clamav-users
Hi, thanks for replying. The on-access feature it's required by the company i work for. I don't understand where the problem is since i've done the same configuration on all workstations, but in some of them there is this problem. Regards, Gabriele Il giorno mer 24 lug 2024 alle ore 15:45 Gary R.

Re: [clamav-users] clamav preventing CLion from working properly

2024-07-24 Thread Gary R. Schmidt via clamav-users
On 24/07/2024 23:35, Giacomazzi Gabriele Antonio via clamav-users wrote: Hi everyone, I'm running into some problems with clamav and CLion. For context, we are talking about a workstation running fedora 40. I activated clamonacc and, since I was monitoring /home and every CLion project was in t

Re: [clamav-users] ClamAV 1.4.0 release candidate now available!

2024-05-14 Thread Andy Ragusa (aragusa) via clamav-users
ildebrandt via clamav-users Sent: Monday, May 13, 2024 11:27 AM To: Micah Snyder (micasnyd) via clamav-users Cc: Ralf Hildebrandt Subject: Re: [clamav-users] ClamAV 1.4.0 release candidate now available! * Micah Snyder (micasnyd) via clamav-users : > The ClamAV 1.4.0 release candidate is

Re: [clamav-users] ClamAV 1.4.0 release candidate now available!

2024-05-13 Thread Ralf Hildebrandt via clamav-users
* Micah Snyder (micasnyd) via clamav-users : > The ClamAV 1.4.0 release candidate is now available. I upgraded today and got a log message I've never seen before: Mon May 13 17:18:37 2024 -> WARNING: Last cf-ray not present in freshclam.dat. Mon May 13 17:18:37 2024 -> freshclam daemon 1.4.0-rc

Re: [clamav-users] ClamAV.0.103.11 as clamav-0.103.11-1.aix7.1.ppc.rpm fails to install on AIX7.2 on non AIX dependencies like vim

2024-05-02 Thread Andrew C Aitchison via clamav-users
On Thu, 2 May 2024, Andrew C Aitchison wrote (but the list bounced): On Thu, 2 May 2024, Brendan Walsh via clamav-users wrote: Hi guys, I have been trying to install the IBM version of ClamAV.0.103.11 which I downloaded from IBMs open source page : https://www.ibm.com/support/pages/node/8837

Re: [clamav-users] ClamAV 1.0.X for EPEL 7 & 8

2024-04-29 Thread Orion Poplawski via clamav-users
On 4/29/24 03:14, Marc wrote: > >> >> With the help of John Sullivan and Sérgio M. Basto we have gotten the >> Fedora ClamAV 1.0.X package in shape to be built for EPEL 7 and 8. We >> have a COPR available now with builds of 1.0.6 ready for testing here: >> > > Hi Orion, I wrote Sergio a few mon

Re: [clamav-users] ClamAV 1.0.X for EPEL 7 & 8

2024-04-29 Thread Orion Poplawski via clamav-users
On 4/29/24 03:03, Ben Argyle wrote: > I'd be extremely grateful if you could consider EPEL 9 as well, please! EPEL 9 already has ClamAV 1.0.5, with 1.0.6 on its way: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-25c9732d41 > -Original Message- > From: clamav-users On Behalf O

Re: [clamav-users] ClamAV 1.0.X for EPEL 7 & 8

2024-04-29 Thread Thomas Cameron via clamav-users
Huge +1 for EPEL for RHEL 9, please. We use it for mail services, and having an EPEL package would be *awesome* to me. -- Thomas On 4/29/24 04:03, Ben Argyle via clamav-users wrote: I'd be extremely grateful if you could consider EPEL 9 as well, please! With thanks, Ben -Original Messag

Re: [clamav-users] ClamAV 1.0.X for EPEL 7 & 8

2024-04-29 Thread Marc via clamav-users
> > With the help of John Sullivan and Sérgio M. Basto we have gotten the > Fedora ClamAV 1.0.X package in shape to be built for EPEL 7 and 8. We > have a COPR available now with builds of 1.0.6 ready for testing here: > Hi Orion, I wrote Sergio a few months ago about implementing ip/port look

Re: [clamav-users] ClamAV 1.0.X for EPEL 7 & 8

2024-04-29 Thread Ben Argyle via clamav-users
I'd be extremely grateful if you could consider EPEL 9 as well, please! With thanks, Ben -Original Message- From: clamav-users On Behalf Of Orion Poplawski via clamav-users Sent: 27 April 2024 01:06 To: ClamAV users ML Cc: Orion Poplawski Subject: [clamav-users] ClamAV 1.0.X for EPEL

Re: [clamav-users] ClamAV Scan Loop - Massive Amount of Logs Being Generated

2024-04-03 Thread Dr Rainer Woitok via clamav-users
Nick, On Tuesday, 2024-04-02 19:07:56 +, you wrote: > ... > 1. clamscan --exclude-dir=/tmp/ > 2. clamscan --exclude-dir=/tmp/* > 3. clamscan --exclude-dir="^/tmp/" What you specify here are regular expressions matching the path to a di- rectory, but a trailing slash is never part o

Re: [clamav-users] ClamAV 1.3.0 feature release and 1.2.2, 1.0.5 security patch release!

2024-02-07 Thread Micah Snyder (micasnyd) via clamav-users
Correct. Micah Snyder ClamAV Development Talos Cisco Systems, Inc. From: clamav-users on behalf of Arjen de Korte via clamav-users Sent: Wednesday, February 7, 2024 12:12 PM To: ClamAV users ML Cc: Arjen de Korte Subject: Re: [clamav-users] ClamAV 1.3.0

Re: [clamav-users] ClamAV 1.3.0 feature release and 1.2.2, 1.0.5 security patch release!

2024-02-07 Thread Arjen de Korte via clamav-users
Citeren "Micah Snyder (micasnyd) via clamav-users" : [...] * 0.104 (all patch versions) * 0.105 (all patch versions) * 1.0.0 through 1.0.4 (LTS) * 1.1 (all patch versions) * 1.2.0 and 1.2.1 Do I understand correctly that 0.103 LTS is not affected by this?

Re: [clamav-users] clamav now has a tempfail?

2024-02-02 Thread Postmaster via clamav-users
thanks On Thu, Nov 23, 2023 at 09:43:27AM +0100, Matus UHLAR - fantomas (uh...@fantomas.sk) wrote: > On 23.11.23 15:06, Postmaster via clamav-users wrote: > > Running ClamAV 1.0.1/27101 on AlmaLinux release 8.8 with sendmail > > 8.15.2-34.el8 > > I have extra milters: opendkim, mimedefang > >

Re: [clamav-users] ClamAV 1.3.0 release candidate published

2024-01-30 Thread Arjen de Korte via clamav-users
Citeren Arjen de Korte via clamav-users : Citeren "Micah Snyder (micasnyd) via clamav-users" : Tip: If you are downloading the source from the GitHub release page, the package labeled "clamav-1.3.0-rc.tar.gz" does not require an internet connection to build. All dependencies are included

Re: [clamav-users] ClamAV 1.3.0 second release candidate published!

2024-01-29 Thread Micah Snyder (micasnyd) via clamav-users
hulze Subject: Re: [clamav-users] ClamAV 1.3.0 second release candidate published! Am 24.01.24 um 23:09 schrieb Micah Snyder (micasnyd) via clamav-users: > We are excited to announce the ClamAV 1.3.0 release candidate. Hello, at least I could confirm, the build issue [1] was fixed. Build w

Re: [clamav-users] ClamAV 1.3.0 second release candidate published!

2024-01-29 Thread A. Schulze via clamav-users
Am 24.01.24 um 23:09 schrieb Micah Snyder (micasnyd) via clamav-users: We are excited to announce the ClamAV 1.3.0 release candidate. Hello, at least I could confirm, the build issue [1] was fixed. Build with rust-1.75.0 works fine on an isolated build host. Unfortunately, I can't spent ti

Re: [clamav-users] ClamAV database and memory comsumption

2024-01-08 Thread Brendan Bell (brebell) via clamav-users
Jonathan, Thanks for reaching out. We recommend you use all of the Clam AV signatures as such we don't have a smaller version to provide. I spoke with some of the team and the two suggestions recommended that may help youare: In freshclam.conf, you can set "TestDatabases no" to prevent freshcla

Re: [clamav-users] clamav-safebrowsing status

2024-01-05 Thread newcomer01 via clamav-users
sorry, safe browsing is never support (and updated) anymore since google has change the type of license. Maybe you find a commercial solution which is suitable for you. kind greetings Marc Von / From: Clamav User Mailinglist An / To: Newcomer01

Re: [clamav-users] Clamav does not recognize known viruses

2023-12-21 Thread newcomer01 via clamav-users
Hi Sebastian, here on Ubuntu LTS i have the same issue. Check the permission for: -  /etc/init.d/clamav-deamon - /etc/init.d/clamav-freshclam By unknown reasons, they have the wrong permission by default. It must have 0755, then it works well! kind greetings Marc Von / From: Clamav User Mai

Re: [clamav-users] ClamAV 1.3.0 release candidate published

2023-12-18 Thread Micah Snyder (micasnyd) via clamav-users
2023 2:25 PM To: ClamAV users ML Cc: Steve Basford Subject: Re: [clamav-users] ClamAV 1.3.0 release candidate published On 15 December 2023 16:49:49 "Micah Snyder \(micasnyd\) via clamav-users" wrote * Fixed an issue decrypting some PDF's with an empty password. Hi Mic

Re: [clamav-users] ClamAV 1.3.0 release candidate published

2023-12-18 Thread Micah Snyder (micasnyd) via clamav-users
Cc: A. Schulze Subject: Re: [clamav-users] ClamAV 1.3.0 release candidate published Am 15.12.23 um 22:19 schrieb Arjen de Korte via clamav-users: > Unfortunately, the above doesn´t seem to work, the package fails to build > without an internet connection:> > [ 25s]

Re: [clamav-users] ClamAV 1.3.0 release candidate published

2023-12-18 Thread A. Schulze via clamav-users
Am 15.12.23 um 22:19 schrieb Arjen de Korte via clamav-users: Unfortunately, the above doesn´t seem to work, the package fails to build without an internet connection:> [   25s] Updating git repository `https://github.com/Cisco-Talos/onenote.rs.git` Hello, confirmed: build without intern

Re: [clamav-users] ClamAV 1.3.0 release candidate published

2023-12-15 Thread Arjen de Korte via clamav-users
Citeren "Micah Snyder (micasnyd) via clamav-users" : Tip: If you are downloading the source from the GitHub release page, the package labeled "clamav-1.3.0-rc.tar.gz" does not require an internet connection to build. All dependencies are included in this package. But if you download the

Re: [clamav-users] ClamAV 1.3.0 release candidate published

2023-12-15 Thread Steve Basford via clamav-users
On 15 December 2023 16:49:49 "Micah Snyder \(micasnyd\) via clamav-users" wrote Fixed an issue decrypting some PDF's with an empty password. Hi Micah, Just tested and it's decoding URLs now :) I also wanted to say a huge Thank You for all the programming bug fixes/new features and support wo

Re: [clamav-users] clamav now has a tempfail?

2023-11-23 Thread Matus UHLAR - fantomas
On 23.11.23 15:06, Postmaster via clamav-users wrote: Running ClamAV 1.0.1/27101 on AlmaLinux release 8.8 with sendmail 8.15.2-34.el8 I have extra milters: opendkim, mimedefang I see this in my maillog: Nov 23 14:55:16 korolev sendmail[870567]: 3AN3tFIF870567: Milter add: header: X-Scanned-By:

Re: [clamav-users] ClamAV 1.2.1, 1.1.3, 1.0.4, 0.103.11 patch versions published

2023-10-26 Thread Kevin O'Connor via clamav-users
t; Date: Wed, 25 Oct 2023 16:34:46 -0400 > > From: Kevin O'Connor via clamav-users > > To: ClamAV users ML > > Cc: Kevin O'Connor > > Subject: Re: [clamav-users] ClamAV 1.2.1, 1.1.3, 1.0.4, > > 0.103.11 patch versions published > > > &g

Re: [clamav-users] ClamAV 1.2.1, 1.1.3, 1.0.4, 0.103.11 patch versions published

2023-10-25 Thread Robert M. Stockmann via clamav-users
On Wed, 25 Oct 2023, Kevin O'Connor via clamav-users wrote: > Date: Wed, 25 Oct 2023 16:34:46 -0400 > From: Kevin O'Connor via clamav-users > To: ClamAV users ML > Cc: Kevin O'Connor > Subject: Re: [clamav-users] ClamAV 1.2.1, 1.1.3, 1.0.4, > 0.103.11

Re: [clamav-users] ClamAV 1.2.1, 1.1.3, 1.0.4, 0.103.11 patch versions published

2023-10-25 Thread Kevin O'Connor via clamav-users
Hi Micah, I'm assuming that this is the report of an updated 0.103.11: $ /usr/sbin/clamd --version ClamAV 1.0.3/27072/Wed Oct 25 07:45:37 2023 Is that correct?.. it was difficult to tell from the links. Kevin On Wed, Oct 25, 2023 at 2:13 PM Micah Snyder (micasnyd) via clamav-users < clamav-us

Re: [clamav-users] ClamAV Issue - 127.0.0.1:3310 Connection refused

2023-08-23 Thread Adam Sweet via clamav-users
On 22/08/2023 20:09, Mona AlRekabi via clamav-users wrote: Kindly, find the attached file. This log file looks fine. Clamd is starting and binding to 127.0.0.1:3310. I'm still not clear what the client application is, but you say it's running on the same host as ClamAV so it should work. "

Re: [clamav-users] ClamAV Issue - 127.0.0.1:3310 Connection refused

2023-08-22 Thread Joel Esler via clamav-users
Yup. Looks like your FreshClam can’t reach the internet. Or DNS is messed up. Or something. > On Aug 22, 2023, at 3:10 PM, Mona AlRekabi wrote: > > Kindly, find the attached file > ___ Manage your clamav-users mailing list subscription / unsubsc

Re: [clamav-users] ClamAV Issue - 127.0.0.1:3310 Connection refused

2023-08-22 Thread Joel Esler via clamav-users
Is perhaps your freshclam update attempting to connect to localhost or something?— Sent from my iPhoneOn Aug 22, 2023, at 03:54, Mona AlRekabi via clamav-users wrote:Dear,   Kindly, we installed ClamAV Antivirus on Windows Server and we face the following issue:   No connection could be made beca

Re: [clamav-users] ClamAV Issue - 127.0.0.1:3310 Connection refused

2023-08-22 Thread Mona AlRekabi via clamav-users
Kindly, in general if you can tell me what is the cause of the issue: No connection could be made because the target machine actively refused it 127.0.0.1:3310 في ثلاثاء، ٢٢ أغسطس، ٢٠٢٣ في ٤:١٢ م، كتب Adam Sweet via clamav-users < clamav-users@lists.clamav.net>: > On 22/08/2023 08:53, Mona AlRe

Re: [clamav-users] ClamAV Issue - 127.0.0.1:3310 Connection refused

2023-08-22 Thread Mona AlRekabi via clamav-users
Kindly, the CamAV is installed in Window Server and the user try to access an application hosted on this Server. >From time to time, this issue display: No connection could be made because the target machine actively refused it 127.0.0.1:3310 Moreover, I have the Clamd and Freshclam log files. Wh

Re: [clamav-users] ClamAV Issue - 127.0.0.1:3310 Connection refused

2023-08-22 Thread Adam Sweet via clamav-users
On 22/08/2023 08:53, Mona AlRekabi via clamav-users wrote: Dear, Kindly, we installed ClamAV Antivirus on Windows Server and we face the following issue: No connection could be made because the target machine actively refused it 127.0.0.1:3310 Please, provide us w

Re: [clamav-users] ClamAV 1.2.0 release candidate now available

2023-08-04 Thread Michael Orlitzky via clamav-users
On Fri, 2023-08-04 at 18:38 +, Micah Snyder (micasnyd) via clamav- users wrote: > > * The suggested path for the clamd.pid and clamd.sock file in the sample > configs have been updated to reflect the recommended locations for these > files in the Docker images. These are: > > * /

Re: [clamav-users] ClamAV Current CDN Rate Limit

2023-07-18 Thread Andrew C Aitchison via clamav-users
On Tue, 18 Jul 2023, Jaspreet Nahal via clamav-users wrote: Hi, I'm building an application using ClamAV as our AV of choice and trying to evaluate the different approaches to avoiding hitting the CDN more than what is absolutely necessary. As a part of this quest, would you be able to share ho

Re: [clamav-users] ClamAV Current CDN Rate Limit

2023-07-18 Thread newcomer01 via clamav-users
don't know about a rate limit. You should not update more then once an hour, or you get blocked from cdn for the next 24 hours - that's fact. Von / From: Clamav User Mailinglist An / To: Newcomer01 CC / CC: Jaspreet Nahal

Re: [clamav-users] ClamAV on RHEL9 with FIPS enabled

2023-07-13 Thread Vu, Hong-Duc V. via clamav-users
Hi Micah, Thanks for the update. I'll be keeping an eye on this one but I don't plan needing to use this version of Red Hat for a little bit. RHEL 8 with FIPS seems to work fine with clamav. ___ Manage your clamav-users mailing list subscription / u

Re: [clamav-users] ClamAV on RHEL9 with FIPS enabled

2023-07-11 Thread Micah Snyder (micasnyd) via clamav-users
Apologies for the delayed response. We are only just starting to discuss a possibility of a new CVD (signed signature database archive) format internally. Sorry I cannot promise anything in terms of timeline. -Micah Micah Snyder ClamAV Development Talos Cisco Systems, Inc. __

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Paul Netpresto
Hi Steve I am sure I can get to the bottom of how/what db was malformed. I am more concerned on how clamd behaves when reloading db's hits an issue and there is no previous  DB instance  available. I am 99% sure clamd simply terminated prior to multi instance DB images being introduced . Now

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
On 24 May 2023 21:57:33 Steve Basford via clamav-users wrote: Could you do a ls of the clamav database folder... So I can see what databases you are using Sorry all should have been of list... Duh ;) Cheers, Steve Twitter: @sanesecurity ___ Manage

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
Could you do a ls of the clamav database folder... So I can see what databases you are using Does the database name appear in the logs when clamd.con # Enable verbose logging. # Default: no LogVerbose yes If you run clamscan -- database=clamav database folder test.file does it report database

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Paul Netpresto
Hi Steve Note it would be nice if clamd said which db it did not like .. I reckon the start of the problem is "Database reload failed, keeping the previous instance" when there is no previous instance. Mon May 22 13:04:40 2023 -> Reading databases from /var/lib/clamav/ Mon May 22 13:05:01 202

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
On 24 May 2023 18:52:04 Paul Netpresto wrote: Hi I have found that 1.0.1 and 0.103.8 both behave badly if they find a malformed db. Agreed freshclam checks out the clamav/cisco db's. I have yet to determine what unofficial db caused the failure. They should all have been verified before be

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
On 24 May 2023 18:52:04 Paul Netpresto wrote: Hi I have found that 1.0.1 and 0.103.8 both behave badly if they find a malformed db. Agreed freshclam checks out the clamav/cisco db's. I have yet to determine what unofficial db caused the failure. They should all have been verified before be

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Alexeyd 1000 via clamav-users
Hello! I believe this is how to contact the customer care. I was wondering whether or not ClamAV has real time protection for your system? And if so, how do I turn it on? I can't find it in my GUI settings and it does not seem to be running either way. Thanks! Alex On Wed, May 24, 2023, 12:00 AM P

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Paul Netpresto
Hi I have found that 1.0.1 and 0.103.8 both behave badly if they find a malformed db. Agreed freshclam checks out the clamav/cisco db's. I have yet to determine what unofficial db caused the failure. They should all have been verified before being placed in /var/lib/clamav/ Clamd ends up on

Re: [clamav-users] ClamAV 1.0.1

2023-05-23 Thread Steve Basford via clamav-users
On 23 May 2023 21:59:22 Paul Netpresto wrote: Hello What should the behaviour of a running clamd be when it comes across a malformed database during a signature-reload. Clamd.conf has setting "ConcurrentDatabaseReload no" Regards Paul Hi Paul, Is there is a malformed database freshclam w

Re: [clamav-users] ClamAV 1.1.0 released

2023-05-04 Thread Micah Snyder (micasnyd) via clamav-users
10:21 AM To: clamav-users@lists.clamav.net Cc: A. Schulze Subject: Re: [clamav-users] ClamAV 1.1.0 released Am 01.05.23 um 23:19 schrieb Micah Snyder (micasnyd) via clamav-users: > The ClamAV 1.1.0 feature release is now stable and available fordownload on > ClamAV.net <https://www.c

Re: [clamav-users] ClamAV 1.1.0 released

2023-05-02 Thread A. Schulze via clamav-users
Am 01.05.23 um 23:19 schrieb Micah Snyder (micasnyd) via clamav-users: The ClamAV 1.1.0 feature release is now stable and available fordownload on ClamAV.net Hello Micah, Did you update the gpg signing-key? Was the "Talos PGP Public Key" from https://www

Re: [clamav-users] Clamav EOL Policy and Signatures

2023-03-24 Thread Scott Kitterman via clamav-users
That sounds like things are on the right track. I appreciate the feedback. For Debian, we want to always release with the latest clamav LTS and support it through the lifecycle of a Debian release. We can, if needed move to a newer release, particularly if libclamav binary compatibility is mai

Re: [clamav-users] Clamav EOL Policy and Signatures

2023-03-24 Thread Micah Snyder (micasnyd) via clamav-users
Hi Scott, > First, I see the planned EOL data on clamav.net is the same as then. Is the assessment about extending the support period still ongoing? We discussed it and agreed to a 1-year extension for 0.103 LTS (specifically) but not all LTS versions. We have a blog draft in review at this mom

Re: [clamav-users] ClamAV EOL of 0.104.x versions

2023-03-23 Thread Micah Snyder (micasnyd) via clamav-users
, March 23, 2023 1:38 PM To: clamav-users@lists.clamav.net Cc: Scott Kitterman Subject: Re: [clamav-users] ClamAV EOL of 0.104.x versions On Thursday, March 23, 2023 4:23:28 PM EDT Micah Snyder (micasnyd) via clamav- users wrote: > Read this online at > https://blog.clamav.net/2023/03/clam

Re: [clamav-users] ClamAV EOL of 0.104.x versions

2023-03-23 Thread Scott Kitterman via clamav-users
On Thursday, March 23, 2023 4:23:28 PM EDT Micah Snyder (micasnyd) via clamav- users wrote: > Read this online at > https://blog.clamav.net/2023/03/clamav-eol-of-0104x-versions.html > > > Effective March 28, 2023, ClamAV 0.104.0 (and all patch versions) will no > longer be supported in accordan

Re: [clamav-users] ClamAV critical vulnerability

2023-03-02 Thread Matus UHLAR - fantomas
On 02.03.23 13:27, Michael Kyriacou via clamav-users wrote: Does anybody know if the 0.104.2 version of clamav for AIX addresses CVE-2023-20032? https://lists.clamav.net/pipermail/clamav-announce/2023/70.html ClamAV 0.104 has reached end-of-life according to the ClamAV End of Life (EOL) p

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-21 Thread Eric Tykwinski via clamav-users
> -Original Message- > From: clamav-users On Behalf Of Scott > Kitterman via clamav-users > Sent: Monday, February 20, 2023 2:18 PM > To: ClamAV users ML > Cc: Scott Kitterman > Subject: Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions > p

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-21 Thread Matus UHLAR - fantomas
On Mon, 20 Feb 2023 14:11:10 +0200 Brent Clark via clamav-users wrote: Anyone on Debian Buster and Bullseye? How serious is this? Does anyone have any suggestions. Cause there is no packages available. If anyone can share their thoughts / experiences. the packages for clamav 0.103.8 are now

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Paul Kosinski via clamav-users
I am using ClamAV 0.103.6 on Buster, but I have always built it from source (since way before Cisco and even SourceFire), hence I'm a bit obsolete. I did this -- and still do it -- because ClamAV has always been a bit experimental. Thus I install each version under "/opt/clamav.d/version" so I

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Scott Kitterman via clamav-users
No. Ubuntu package maintenance is separate from Debian's. Scott K On February 20, 2023 6:57:46 PM UTC, Newcomer01 via clamav-users wrote: >Does this mean, it affects the Ubuntu LTS too? This would be really great! > >Am 20. Februar 2023 19:44:51 schrieb Scott Kitterman via clamav-users >: > >

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Newcomer01 via clamav-users
Does this mean, it affects the Ubuntu LTS too? This would be really great! Am 20. Februar 2023 19:44:51 schrieb Scott Kitterman via clamav-users : LTS team uploaded it today, so it should be available for Buster shortly, if it isn't already. Scott K On Monday, February 20, 2023 7:41:16 AM E

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Scott Kitterman via clamav-users
LTS team uploaded it today, so it should be available for Buster shortly, if it isn't already. Scott K On Monday, February 20, 2023 7:41:16 AM EST Scott Kitterman via clamav-users wrote: > Packages for Bullseye are available in bullseye -proposed-updates. Buster > is now supported by the Debia

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Arnaud Jacques
Hi, Le 20/02/2023 à 13:11, Brent Clark via clamav-users a écrit : Good day Guys Anyone on Debian Buster and Bullseye? How serious is this? Does anyone have any suggestions. Cause there is no packages available. Package is available (0.103.8) in Bulleye proposed update : https://tracker.debia

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Scott Kitterman via clamav-users
Packages for Bullseye are available in bullseye -proposed-updates. Buster is now supported by the Debian LTS team and I don't know their plans. Scott K On February 20, 2023 12:11:10 PM UTC, Brent Clark via clamav-users wrote: >Good day Guys > >Anyone on Debian Buster and Bullseye? > >How seri

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Brent Clark via clamav-users
Good day Guys Anyone on Debian Buster and Bullseye? How serious is this? Does anyone have any suggestions. Cause there is no packages available. If anyone can share their thoughts / experiences. Regards Brent On 2023/02/18 21:13, unison.subject_0t--- via clamav-users wrote: Vulnerabilities*

Re: [clamav-users] ClamAV & Fedora 37 - Long Initialization Time at Boot

2023-02-18 Thread Orion Poplawski via clamav-users
On 2/14/23 14:15, Tim Carr via clamav-users wrote: Hello, all. Running a recently-upgraded Fedora 37 server image, and I’ve noticed that the clamd@scan.service is taking about a minute to get running after a reboot. My boot times before were less than a minute, but now that service is really st

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-18 Thread unison.subject_0t--- via clamav-users
Vulnerabilities* — Sent from my iPhone > On Feb 18, 2023, at 13:54, Joel Esler wrote: > > 100.3 hasn’t been supported in years. There’s lots of our abilities that > affect the version. > >> On Feb 18, 2023, at 13:36, George.G via clamav-users >> wrote: >> >>  >> Hello, >> >> I would

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-18 Thread unison.subject_0t--- via clamav-users
100.3 hasn’t been supported in years. There’s lots of our abilities that affect the version. > On Feb 18, 2023, at 13:36, George.G via clamav-users > wrote: > >  > Hello, > > I would like to ask whether these two new vulnerabilities affect the version > 0.100.3. > > Thank you > _

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-15 Thread Newcomer01 via clamav-users
Unfortunately Ubuntu (22.04.1) has not released 0.103.7 since today... We are on 0.103.6 and get always warnings from feshclam that we use an outdated version 😔 Don't know, when Ubuntu will push this fixed version. I will really update, but when we don't get the new packages... Am 15. Febr

Re: [clamav-users] clamav-users Digest, Vol 219, Issue 5

2023-02-13 Thread Lyle Giese via clamav-users
I am running a new Debian 11 box here.  When I run apt search clamav It shows 0.103.7 which is newer than 0.103.2 clamav/stable 0.103.7+dfsg-0+deb11u1 amd64  anti-virus utility for Unix - command-line interface clamav-base/stable 0.103.7+dfsg-0+deb11u1 all  anti-virus utility for Unix - base p

Re: [clamav-users] clamav-users Digest, Vol 219, Issue 5

2023-02-13 Thread Mike Lieberman
It was suggested that: "If FreshClam is failing and you're not sure why, you may run freshclam -v for "Verbose Mode" to see the HTTP request & response details (ClamAV 0.102+)." And that: "[If] running a version of FreshClam/ClamAV lower than 0.103.2? If so, you should immediately upgrade to at

Re: [clamav-users] ClamAV Private Mirror Question

2023-01-30 Thread newcomer01--- via clamav-users
lamdscan this dates while running? Regards, Marc Von / From: Micah Snyder (Micasnyd) <mailto:micas...@cisco.com> An / To: Newcomer01 <mailto:newcome...@posteo.de> Gesendet / Sent: Montag, Januar 30, 2023 um 20:16 (at 08:16 PM) +0100 Betreff / Subject: Re: [clamav-users] ClamAV Private Mi

Re: [clamav-users] ClamAV Private Mirror Question

2023-01-30 Thread Micah Snyder (micasnyd) via clamav-users
Cisco Systems, Inc. From: clamav-users on behalf of newcomer01 via clamav-users Sent: Monday, January 30, 2023 10:43 AM To: ClamAV User Mailinglist Cc: newcomer01 Subject: Re: [clamav-users] ClamAV Private Mirror Question additional you can do this little

Re: [clamav-users] ClamAV Private Mirror Question

2023-01-30 Thread newcomer01 via clamav-users
newcome...@posteo.de> CC / CC: Micah Snyder \(Micasnyd\) <mailto:micas...@cisco.com>, Bryan Whipkey <mailto:cloud81...@live.com> Gesendet / Sent: Montag, Januar 30, 2023 um 18:33 (at 06:33 PM) +0100 Betreff / Subject: Re: [clamav-users] ClamAV Private Mirror Question Hello, You can use this c

Re: [clamav-users] ClamAV Private Mirror Question

2023-01-30 Thread Micah Snyder (micasnyd) via clamav-users
Hello, You can use this command to print the build information which will include the date it was published: sigtool --info /path/to/database​ For example: ❯ sigtool --info /var/lib/clamav/daily.cld File: /var/lib/clamav/daily.cld Build time: 30 Jan 2023 03:24 -0500 Version: 26797 Signatures:

Re: [clamav-users] ClamAV Private Mirror Question

2023-01-30 Thread Marc
> > I have setup a private mirror for ClamAV. I have pointed it to the private > mirror on freshclam.conf. My question is how do i test this to make sure I am > pulling the most up to date definitions from the private mirror to the server > being scanned? Thanks in advance. > turn off gateway /

Re: [clamav-users] ClamAV logs JAVA System

2023-01-30 Thread newcomer01 via clamav-users
i'am not trained in java but i can explain what you can do in UNIX Systems: for example: if [ "VAR" = "VAL" ]; then     # create new clamscan.conf     # unlink "old" clamscan.conf     unlink /etc/clamav/clamscan.conf     # check retval from unlink     RETVAL_ULI="$?"     if [ "$RETVAL_ULI"

Re: [clamav-users] ClamAV logs JAVA System

2023-01-30 Thread newcomer01 via clamav-users
mybe you can rename the original log name (clamscan.log) with the needed one after the scan process is done Von / From: Clamav User Mailinglist An / To: Newcomer01 CC / CC: Antonio Galdieri

Re: [clamav-users] [Clamav-devel] Second ClamAV 1.0.0 release candidate AND updated packages for 0.105.1

2022-11-25 Thread Mark Allan via clamav-users
I thought there was an issue with v1.0 rc2, as a comparison with a previous installation (0.104.1) on the same machine showed massively increased scan times. After about an hour of digging and laboriously comparing output from clamscan --debug, as well as the man pages and clamd.conf, I finally

Re: [clamav-users] ClamAV scan time improvement

2022-11-09 Thread Vijay Kumar Kamannavar via clamav-users
Hello Andrew, Thanks for your suggestions. *On my (old) machine it takes 3minutes* May I know the machine configuration where clamdscan and clamd daemon are running? Are both client and server running on the same machine? is cache enabled in your case? We have a VM with size 500GB (all 500GB is

Re: [clamav-users] ClamAV scan time improvement

2022-11-09 Thread Andrew C Aitchison via clamav-users
On Tue, 8 Nov 2022, Vijay Kumar Kamannavar via clamav-users wrote: Hello Team, We are leveraging ClamAV agent for our vm's malware detection. we tried to scan a vm with 30GB used space and it took approx 1.30Hrs(we tried to capture certain file extensions to reduce number of files and passed

Re: [clamav-users] ClamAV signatures have been released to detect malware exploiting CVE-2022-3602 and CVE-2022-3786 OpenSSL 3.0.x security vulnerabilities

2022-11-08 Thread Turritopsis Dohrnii Teo En Ming via clamav-users
lamav-users on behalf of > Turritopsis Dohrnii Teo En Ming via clamav-users < > clamav-users@lists.clamav.net> > *Sent:* Monday, November 7, 2022 5:21 AM > *To:* ClamAV users ML > *Cc:* Turritopsis Dohrnii Teo En Ming ; > c...@teo-en-ming-corp.com > *Subject:* Re: [clamav-

Re: [clamav-users] ClamAV signatures have been released to detect malware exploiting CVE-2022-3602 and CVE-2022-3786 OpenSSL 3.0.x security vulnerabilities

2022-11-08 Thread Micah Snyder (micasnyd) via clamav-users
lamav-users Sent: Monday, November 7, 2022 5:21 AM To: ClamAV users ML Cc: Turritopsis Dohrnii Teo En Ming ; c...@teo-en-ming-corp.com Subject: Re: [clamav-users] ClamAV signatures have been released to detect malware exploiting CVE-2022-3602 and CVE-2022-3786 OpenSSL 3.0.x security vulnerabil

Re: [clamav-users] ClamAV scan time improvement

2022-11-08 Thread Arnaud Jacques
Hello, Le 08/11/2022 à 19:02, Vijay Kumar Kamannavar via clamav-users a écrit : Hello Team, We are leveraging ClamAV agent for our vm's malware detection. we tried to scan a vm with 30GB used space and it took approx 1.30Hrs(we tried to capture certain file extensions to reduce number of fil

  1   2   3   4   5   6   7   8   9   10   >