SOLVED Clamav update question

[Elizabeta]

Hello,

I have a cPanel version v68.0.33. I have the following installed via WHM -> Manage Plugins ClamAV 0.99.2 . The checkbox is 'ticked' for "Install and keep updated".

In logs clam-update.log there is notification since Fri Jan 26 2018
ClamAV update process started at Fri Jan 26 01:54:56 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.99.2 Recommended version: 0.99.3
DON'T PANIC! Read ClamavNet
main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr)
daily.cld is up to date (version: 24255, sigs: 1835431, f-level: 63, builder: neo)
bytecode.cld is up to date (version: 319, sigs: 75, f-level: 63, builder: neo)

When I try command
rpm -qa | grep clam
cpanel-clamav-0.99.2-2.cp1164.x86_64
cpanel-clamav-virusdefs-0.99.2-2.cp1164.x86_64

I have read that only in next version cPanel 70 70 Change Log - Change Logs - cPanel Documentation this is “Update cpanel-clamav to 0.99.3-3.cp1170.”

How can I doing update clamav without installing cPanel on new version? Do I must to update the plugin and/or clamav? Because is set to periodically update on my machine.

Best regards,
Elizabeta Krešo

 

[rpvw]

You will have to wait for cPanel to update clamav if you want to continue using the supplied plugin

Apparently cPanel build their own version of clamav and release it as a cPanel plugin. cPanel have updated clamav to 0.99.3-3.cp1170 in version 70.0.16 so, when the version 70 eventually gets released and we update to it, we shall only be one version out of date as clamav is now at 0.99.4

I have never understood why the cPanel clamav builds took so long to get released to updates.

In this day and age of incessant exploits and compromises, I would have thought that a fundamental selling point for cPanel would have been to maintain security related products like clamav right up-to-date, so that web hosts could use that fact as part of their own marketing portfolio.

 

[Elizabeta]

rpvw thank you for your explanation.

But, what is recommendation about update clamav?

Do I must manually via command line update it to version clamav 0.99.4 (at the moment this is recommended version)?

Just one clarification more. When I do upgrade cPanel on version 70, do clamav automatically be updated on version 0.99.3?

Best regards,
Elizabeta Krešo

 

[cPanelMichael]

Hello,

The previous post is correct in that you must wait until your system uses cPanel version 70 before the newer version of ClamAV is available. It's tentatively planned for publication to the Release build tier next month.

@rpvw, internal case CPANEL-18950 was opened to include ClamAV version 0.99.4. Testing is complete and it's planned for publication with the next cPanel & WHM version 70 build.

Thanks!

 

[cPanelMichael]

Just one clarification more. When I do upgrade cPanel on version 70, do clamav automatically be updated on version 0.99.3?

Yes, that's correct. It's not possible to update to the newer version before your server updates to cPanel & WHM version 70.

Thank you.

 

[Elizabeta]

Hello,

The previous post is correct in that you must wait until your system uses cPanel version 70 before the newer version of ClamAV is available. It's tentatively planned for publication to the Release build tier next month.

@rpvw, internal case CPANEL-18950 was opened to include ClamAV version 0.99.4. Testing is complete and it's planned for publication with the next cPanel & WHM version 70 build.

Thanks!

Thank you Michael for your response!

Could you give me advice? When I need to upgrade cPanel to version 70?

In this cPanel version 70, firs I must removed old clamav, and then install again via WHM -> Manage Plugins ClamAV 0.99.4?

Best regards,
Elizabeta Krešo

 

[cPanelMichael]

Hello,

cPanel & WHM version 70 is only available on the Current and Edge build tiers at this time. You can read more about build tiers and the release process at:

Product Versions and the Release Process - cPanel Knowledge Base - cPanel Documentation

Generally, you should wait until it reaches the Release build tier before updating a production server. It's tentatively planned for publication to the Release build tier next month.

The ClamAV plugin is updated automatically when you update cPanel. There's no need to manually uninstall and reinstall it.

Thank you.

 

[Elizabeta]

Thank you very much Michael for your explanation!

Everything is clear now.

Best regards,
Elizabeta Krešo