[Eisfair] clamav 3.0.8 Fehlermeldungen beim sig-update

[Stefan Puschek]

Am Thu, 15 Jul 2021 10:51:12 +0200
schrieb Olaf Jaehrling <eisfair at ojaehrling.de>:

> Moin allerseits,
> 
> seit gestern bekomme ich immer wieder folgende Mail:
> ERROR: downloadPatch: Can't apply patch
> WARNING: Incremental update failed, trying to download daily.cvd
> 
> ein freshclam --verbose zeigt folgendes:
> freshclam --verbose
> Current working dir is /usr/share/clamav/
> Loaded freshclam.dat:
>    version:    1
>    uuid:       10535924-c5e9-4807-860d-9d752ae434a6
> ClamAV update process started at Thu Jul 15 09:49:41 2021
> Current working dir is /usr/share/clamav/
> Querying current.cvd.clamav.net
> TTL: 219
> fc_dns_query_update_info: Software version from DNS: 0.103.3
> Current working dir is /usr/share/clamav/
> check_for_new_database_version: Local copy of daily found: daily.cld.
> query_remote_database_version: daily.cvd version from DNS: 26232
> daily database available for update (local version: 26231, remote 
> version: 26232)
> Current database is 1 version behind.
> Downloading database patch # 26232...
> Retrieving https://database.clamav.net/daily-26232.cdiff
> downloadFile: Download source: 
> https://database.clamav.net/daily-26232.cdiff
> downloadFile: Download destination: 
> ./clamav-174cecdc6cff5e982817b51f4c7c0cb2.tmp
> *   Trying 2606:4700::6810:da54:443...
> * Connected to database.clamav.net (2606:4700::6810:da54) port 443
> (#0)
> * ALPN, offering h2
> * ALPN, offering http/1.1
> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
> * ALPN, server accepted to use h2
> * Server certificate:
> *  subject: C=US; ST=CA; L=San Francisco; O=Cloudflare, Inc.; 
> CN=sni.cloudflaressl.com
> *  start date: Aug 15 00:00:00 2020 GMT
> *  expire date: Aug 15 12:00:00 2021 GMT
> *  subjectAltName: host "database.clamav.net" matched cert's 
> "database.clamav.net"
> *  issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3
> *  SSL certificate verify ok.
> * Using HTTP2, server supports multi-use
> * Connection state changed (HTTP/2 confirmed)
> * Copying HTTP/2 data in stream buffer to connection buffer after 
> upgrade: len=0
> * Using Stream ID: 1 (easy handle 0x81bac40)
>  > GET /daily-26232.cdiff HTTP/2
> Host: database.clamav.net
> user-agent: ClamAV/0.103.3 (OS: linux-gnu, ARCH: i386, CPU: i686,
> UUID: 10535924-c5e9-4807-860d-9d752ae434a6)
> accept: */*
> connection: close
> * old SSL session ID is stale, removing
> * Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
> < HTTP/2 200
> < date: Thu, 15 Jul 2021 07:49:43 GMT
> < content-type: application/octet-stream
> < content-length: 0
> < last-modified: Wed, 14 Jul 2021 18:29:00 GMT
> < etag: "60ef2cec-0"
> < expires: Thu, 14 Jul 2022 21:52:48 GMT
> < cache-control: public, max-age=31500185
> < cf-cache-status: HIT
> < age: 12226
> < accept-ranges: bytes
> < expect-ct: max-age=604800, 
> report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
> < strict-transport-security: max-age=15552000
> < x-content-type-options: nosniff
> < server: cloudflare
> < cf-ray: 66f165503f872b22-FRA
> <
> * Connection #0 to host database.clamav.net left intact
> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> The database server doesn't have the latest patch for the daily
> database (version 26232). The server will likely have updated if you
> check again in a few hours.
> fc_update_database: (null) already up-to-date.
> Current working dir is /usr/share/clamav/
> check_for_new_database_version: Local copy of main found: main.cvd.
> query_remote_database_version: main.cvd version from DNS: 61
> main.cvd database is up-to-date (version: 61, sigs: 6607162, f-level: 
> 90, builder: sigmgr)
> fc_update_database: main.cvd already up-to-date.
> Current working dir is /usr/share/clamav/
> check_for_new_database_version: Local copy of bytecode found:
> bytecode.cld. query_remote_database_version: bytecode.cvd version
> from DNS: 333 bytecode.cld database is up-to-date (version: 333,
> sigs: 92, f-level: 63, builder: awillia2)
> fc_update_database: bytecode.cld already up-to-date.
> 
> 
> Hat das noch jemand?
> 
> Danke und Gruß
> 
> Olaf