In Progress CPANEL-39889 - Cron <[email protected]> /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings

[renato.figueiredo]

Hi,
We got this error when trying to update a clamav database. Any suggestions what we can do?

Cron <[email protected]> /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings

ERROR: getpatch: Can't download daily-26439.cdiff from database.clamav.net
ERROR: getfile: Unknown response from database.clamav.net (IP: 104.16.218.84): HTTP/1.1 403
ERROR: Can't download daily.cvd from database.clamav.net

Regards,

 

[cPRex]

Hey there! This is a known issue with the ClamAV software that we are working on at this time. You can follow along with this article to stay updated on the issue:

https://support.cpanel.net/hc/en-us/articles/4421076799511

 

[Boris Horvat]

We have error too:

[[email protected] ~]# /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings
ERROR: getpatch: Can't download daily-26099.cdiff from database.clamav.net
ERROR: Can't download daily.cvd from database.clamav.net

 

[Boris Horvat]

ClamAV update process started at Wed Feb 2 23:28:11 2022
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.101.5 Recommended version: 0.103.5
DON'T PANIC! Read Upgrading - ClamAV Documentation
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
WARNING: Can't download daily.cvd from database.clamav.net
Trying again in 5 secs...
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.101.5 Recommended version: 0.103.5
DON'T PANIC! Read Upgrading - ClamAV Documentation
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
WARNING: Can't download daily.cvd from database.clamav.net
Trying again in 5 secs...
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.101.5 Recommended version: 0.103.5
DON'T PANIC! Read Upgrading - ClamAV Documentation
main.cvd is up to date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-26099.cdiff from database.clamav.net
ERROR: getpatch: Can't download daily-26099.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
ERROR: Can't download daily.cvd from database.clamav.net
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in /usr/local/cpanel/3rdparty/etc/freshclam.conf is working. Check Introduction - ClamAV Documentation for possible reasons.

 

[cPRex]

@Boris Horvat - did you check the link I posted in my earlier reply?

 

[Boris Horvat]

this link? https://support.cpanel.net/hc/en-us/articles/4421076799511

 

[Boris Horvat]

Workaround

There presently is no workaround for this issue.

?

 

[cPRex]

That's correct - at this time there is not a fix for this issue. The existing ClamAV rules will continue to work, but they won't update properly. Our team is working on this issue now.

 

[Boris Horvat]

ok, thanks

 

[ttremain]

I have this problem on one server too. Following...

 

[Netg]

Following too.

 

[radeonpower]

Seems they fixed this in 100.0.8.

 

[cPRex]

We do have this fixed in versions 100 and 102. Our team is still working on a fix for 94LTS which we're hoping will be released soon.

 

[robhooper]

Following also

 

[yayhosting]

We are running 100.0.9, and we are still seeing this issue on multiple servers

 

[volex]

We are running 100.0.9, and we are still seeing this issue on multiple servers

Same here unfortunately still seeing the issue in 100.0.9 so does not appear fixed.

 

[bellwood]

ClamAV EOL Policy - ClamAV Documentation

An open source malware detection toolkit and antivirus engine.

docs.clamav.net

"end of life" (EOL) -- The date after which the ClamAV Team will no longer support a feature version in any way.

After this point, all patch versions of that release may be blocked from downloading official signature content.

Version support matrix:

ClamAV EOL Policy - ClamAV Documentation

An open source malware detection toolkit and antivirus engine.

docs.clamav.net

If you are running ClamAV 0.102 or earlier, as of January 3rd 2022, you technically no longer have access to download signature updates.

cPanels' fix will likely be to upgrade ClamAV on boxes that have an unsupported version installed provided there are no blockers.

 

[cPRex]

There were some issues with the mirrors earlier today that would have caused odd behavior with the downloads. If you force another update, are you still seeing issues with machines in 100.0.9?

 

[volex]

There were some issues with the mirrors earlier today that would have caused odd behavior with the downloads. If you force another update, are you still seeing issues with machines in 100.0.9?

Do you mean a upcp or an update to ClamAV, and if the latter what's the recommended way to do so? Thanks

 

[cPRex]

Both would have been affected, so if you want to force it again you can do this:

/scripts/upcp --force

Other users are seeing 100.0.9 working well today: Change in Clamscan result as of cPanel 100.0.8