[clamav-users] Freshclam updates problem

[Micah Snyder (micasnyd)]

Hi Paul, all:

We're triaging this issue now, also reported by a user on Discord.

We issue a zero-byte CDIFF database patch file whenever we want Freshclam to download a whole CVD instead of doing the incremental/patch update. 
Today we published a zero-byte patch file for both daily and main, as we've migrated about half of the daily signatures over to the main database.

Unfortunately it appears we have a bug in 0.102 and 0.103 where Freshclam will complain loudly about the zero-byte CDIFF patch file. I suspect we didn't notice it before because, despite the error message, Freshclam will still do the right thing (at least in 0.102). 

But it seems 0.103 has a second bug where it will patiently wait until it's at least 2 versions behind before it downloads the whole CVD database. This behavior is supposed to happen when a private mirror doesn't have the latest patch file yet, but wasn't supposed to happen for a zero-byte patch file. So we clearly have 2 bugs to fix ASAP.

The good news is, I believe that if we publish 1 more version of daily.cvd and main.cvd, we will see the 0.103 Freshclam clients all download the new daily & main and they'll be good again. I will work with our signature publishing team here to get an update for daily & main out as soon as we're able.

I'm sorry about the bug everyone. Thank you for your patience!

I will write again a soon as I have an update.

-Micah

> -----Original Message-----
> From: clamav-users <clamav-users-bounces at lists.clamav.net> On Behalf Of
> Paul Netpresto via clamav-users
> Sent: Wednesday, July 14, 2021 3:30 PM
> To: clamav-users at lists.clamav.net
> Cc: Paul Netpresto <paul at netpresto.co.uk>
> Subject: [clamav-users] Freshclam updates problem
> 
> Hello
> 
> This has started occurring on all our 103.2 systems.  Is this related to the " New
> Main & Daily CVD's are incoming" email from Joel earlier today
> 
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the daily database (versio
> n 26232). The server will likely have updated if you check again in a few hours.
> main database available for update (local version: 59, remote version: 60)
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the main database
> (version
>   60). The server will likely have updated if you check again in a few hours.
> bytecode.cld database is up-to-date (version: 333, sigs: 92, f-level:
> 63, builde
> r: awillia2)
> 
> 
> _______________________________________________
> 
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml