[clamav-users] Freshclam - can't apply latest patch 26246

[Andrew C Aitchison]

On Wed, 28 Jul 2021, Asenova, Elia via clamav-users wrote:

> Hello guys,
>
> This is related to a freshclam update problem that I have. Basically when running freshclam I get the following errors:
> ClamAV update process started at Wed Jul 28 14:30:20 2021
> daily database available for update (local version: 26209, remote version: 26246)
> Downloaded 22 patches for daily, which is fewer than the 37 expected patches.
> We'll settle for this partial-update, at least for now.
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> Testing database: '/var/lib/clamav/tmp.0c60a53c3f/clamav-c22814890a9b587d8060b5d43ce20d40.tmp-daily.cld' ...
> [LibClamAV] **************************************************
> [LibClamAV] ***  The virus database is older than 7 days!  ***
> [LibClamAV] ***   Please update it as soon as possible.    ***
> [LibClamAV] **************************************************
> Database test passed.
> daily.cld updated (version: 26231, sigs: 3996055, f-level: 63, builder: raynman)
> main database available for update (local version: 59, remote version: 61)
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> WARNING: Incremental update failed, trying to download main.cvd
> Testing database: '/var/lib/clamav/tmp.0c60a53c3f/clamav-abc29e83f1558f3534bfbeb8d1a81899.tmp-main.cvd' ...
> Database test passed.
> main.cvd updated (version: 61, sigs: 6607162, f-level: 90, builder: sigmgr)
> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
>
> It seems like daily.cld cannot be updated to the latest version, so it does a partial update. I tried running freshclam several times but same thing happens over and over again. Clamav version is 0.103.3 and daily db version is 26231 (instead of 26246).
> I saw an email on this topic in your mail archive (https://lists.clamav.net/pipermail/clamav-users/2021-July/011508.html<https://urldefense.com/v3/__https:/lists.clamav.net/pipermail/clamav-users/2021-July/011508.html__;!!MfzFaTml5A!wRTy_q1wySY-gPyDzwwYOQdV2UcN6jR4FGNN7xYXaDATx_zbNMz9waHWWle-9o8rjHk$>), but I do not see any resolution of the problem. Could you give an update on what is going on and when is this problem going to be resolved? Thank you!

This sounds about right.
A lot of signatures in daily 26231 were removed from daily 26232 or 26233
and added to main 60. There was a glitch and main 61 was created to flush
caches on some of the mirrors.

Not sure whether you sould do something, or wait patiently ...

-- 
Andrew C. Aitchison					Kendal, UK
 			andrew at aitchison.me.uk