[clamav-users] Last ClamAV compatible with x32

Mon Apr 12 15:22:38 UTC 2021

After installing again the last ClamAV and update the OS to latest updates for RHEL 6.7 x32, now the AV is downloading the ddbb but fail on CVD header and delete the ddbb
I got the next errors:

< HTTP/1.1 200 OK
< Date: Mon, 12 Apr 2021 14:59:29 GMT
< Content-Type: application/octet-stream
< Content-Length: 105721076
< Connection: close
< Set-Cookie: __cfduid=dd5480dce0f742e9038b59665b424d3351618239569; expires=Wed, 12-May-21 14:59:29 GMT; path=/; domain=.clamav.net; HttpOnly; SameSite=Lax
< Last-Modified: Mon, 12 Apr 2021 11:05:00 GMT
< ETag: "6074295c-64d2cf4"
< Expires: Tue, 13 Apr 2021 02:59:29 GMT
< Cache-Control: public, max-age=43200
< CF-Cache-Status: HIT
< Age: 1170
< Accept-Ranges: bytes
< cf-request-id: 09683157fa0000ff0c6c851000000001
< Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< Strict-Transport-Security: max-age=15552000
< X-Content-Type-Options: nosniff
< Server: cloudflare
< CF-RAY: 63ed519fed30ff0c-MAD
<
Time:    2.7s, ETA:    0.0s [========================>]  100.82MiB/100.82MiB
* Closing connection #0
Mon Apr 12 16:59:32 2021 -> ^[LibClamAV] cli_cvdload: Corrupted CVD header
Mon Apr 12 16:59:32 2021 -> !Verification: Malformed database
Mon Apr 12 16:59:32 2021 -> Giving up on https://database.clamav.net...
Mon Apr 12 16:59:32 2021 -> !Update failed for database: daily
Mon Apr 12 16:59:32 2021 -> !Database update process failed: Invalid or corrupted CVD/CLD database
Mon Apr 12 16:59:32 2021 -> !Update failed.

I've made some investigation and the people on google says that this is a BUG with zlib, and the last zlib for RHEL 6.7 x32 fail to correctly decompress the CVD signature database.

A solution is to use a newer version of zlib but I'm not able to find a newer version of zlib for this version of RHEL 6.7 x32. Newer than the one for the RHEL repositories.

Any advice?

Regards.

[X]

Sorin Petrut Niculae
GMV Aerospace and Defence

Administrador de sistemas e infraestructura /
IT systems & infrastructure administrator

GMV
Isaac Newton, 11
P.T.M. Tres Cantos
28760 Madrid

España
Tel. +34 91 807 21 00
Fax +34 91 807 21 99
www.gmv.com<http://www.gmv.com/>

[X]<http://www.facebook.com/infoGMV>

[X]<http://www.twitter.com/infoGMV_es>

[X]<http://www.youtube.com/infoGMV>

[X]<https://www.linkedin.com/company/gmv>

[X]<http://www.gmv.com/en/RSS>

[X]<http://www.gmv.com/blog_gmv/language/en/>

P Please consider the environment before printing this e-mail.
________________________________
De: clamav-users <clamav-users-bounces at lists.clamav.net> en nombre de Eero Volotinen <eero.volotinen at iki.fi>
Enviado: lunes, 12 de abril de 2021 16:13:05
Para: ClamAV users ML
Cc: G.W. Haywood
Asunto: Re: [clamav-users] Last ClamAV compatible with x32

Sounds like some strict security policy requirement.

It's possible to install working av on system.

Eero

On Mon, Apr 12, 2021 at 5:03 PM G.W. Haywood via clamav-users <clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>> wrote:
Hi there,

On Mon, 12 Apr 2021, Sorin Petrut Niculae via clamav-users wrote:

> I hace a critical system with rhel 6.7 x32 and it's impossible to
> upload it to a newer version of rhel and I need to find a solution
> to install ClamAV on that system.

Just in case you're thinking that installing ClamAV on a system which
you do not keep up to date is some kind of alternative to keeping the
system up to date, it is nothing of the kind.  Not even close.

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>
https://lists.clamav.net/mailman/listinfo/clamav-users<https://urldefense.com/v3/__https://lists.clamav.net/mailman/listinfo/clamav-users__;!!MvyJQugb!TVMgD8RkxjYzr7I17sUAJwOv91Zeaj8m-jDF8zqT1PJvq1p7AXM-EsVfBkxC$>

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq<https://urldefense.com/v3/__https://github.com/vrtadmin/clamav-faq__;!!MvyJQugb!TVMgD8RkxjYzr7I17sUAJwOv91Zeaj8m-jDF8zqT1PJvq1p7AXM-EpylPQYz$>

http://www.clamav.net/contact.html#ml<https://urldefense.com/v3/__http://www.clamav.net/contact.html*ml__;Iw!!MvyJQugb!TVMgD8RkxjYzr7I17sUAJwOv91Zeaj8m-jDF8zqT1PJvq1p7AXM-EuDnQQPD$>

P Please consider the environment before printing this e-mail.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210412/31d5e246/attachment.htm>