[clamav-users] Freshclam - can't apply latest patch 26246

[Micah Snyder (micasnyd)]

Hi Elia,

I would need to see the log messages from your subsequent updates to be sure what's going wrong. The logs you shared in your initial email show a bug but subsequent freshclam runs _should_ work.
If you want, the verbose log may reveal something.

Like Joel suggested, it may be the ReceiveTimeout issue discussed here: https://blog.clamav.net/2021/07/psa-freshclam-database-download-issue.html
Regardless, I think that deleting your daily.cld database (/var/lib/clamav/daily.cld) and trying again should get you back in business.

Sorry about the trouble.

Regards,
Micah

From: clamav-users <clamav-users-bounces at lists.clamav.net> On Behalf Of Asenova, Elia via clamav-users
Sent: Wednesday, July 28, 2021 8:15 AM
To: clamav-users at lists.clamav.net
Cc: Asenova, Elia <Elia.Asenova at experian.com>; Solakov, Panayot <Panayot.Solakov at experian.com>
Subject: [clamav-users] Freshclam - can't apply latest patch 26246

Hello guys,

This is related to a freshclam update problem that I have. Basically when running freshclam I get the following errors:
ClamAV update process started at Wed Jul 28 14:30:20 2021
daily database available for update (local version: 26209, remote version: 26246)
Downloaded 22 patches for daily, which is fewer than the 37 expected patches.
We'll settle for this partial-update, at least for now.
ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch
Testing database: '/var/lib/clamav/tmp.0c60a53c3f/clamav-c22814890a9b587d8060b5d43ce20d40.tmp-daily.cld' ...
[LibClamAV] **************************************************
[LibClamAV] ***  The virus database is older than 7 days!  ***
[LibClamAV] ***   Please update it as soon as possible.    ***
[LibClamAV] **************************************************
Database test passed.
daily.cld updated (version: 26231, sigs: 3996055, f-level: 63, builder: raynman)
main database available for update (local version: 59, remote version: 61)
ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Testing database: '/var/lib/clamav/tmp.0c60a53c3f/clamav-abc29e83f1558f3534bfbeb8d1a81899.tmp-main.cvd' ...
Database test passed.
main.cvd updated (version: 61, sigs: 6607162, f-level: 90, builder: sigmgr)
bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)

It seems like daily.cld cannot be updated to the latest version, so it does a partial update. I tried running freshclam several times but same thing happens over and over again. Clamav version is 0.103.3 and daily db version is 26231 (instead of 26246).
I saw an email on this topic in your mail archive (https://lists.clamav.net/pipermail/clamav-users/2021-July/011508.html<https://urldefense.com/v3/__https:/lists.clamav.net/pipermail/clamav-users/2021-July/011508.html__;!!MfzFaTml5A!wRTy_q1wySY-gPyDzwwYOQdV2UcN6jR4FGNN7xYXaDATx_zbNMz9waHWWle-9o8rjHk$>), but I do not see any resolution of the problem. Could you give an update on what is going on and when is this problem going to be resolved? Thank you!

Best Regards,
Elia Asenova

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210728/6b16dfa7/attachment.htm>