Topic: Updateing clamav

[bjarni]

Hi

I have had some mail-notifications concerning clamav.

That's why I had a look at the /var/log/clamav/freshclam.log. the latest log-message looks like this.

What can I do to handle the warnings?

/bjarni

----------------------------------------------------
ClamAV update process started at Tue Sep  6 10:20:01 2005
main.cvd is up to date (version: 33, sigs: 36102, f-level: 5, builder: tkojm)
WARNING: Your ClamAV installation is OUTDATED - please update immediately !
WARNING: Current functionality level = 2, required = 5
daily.cvd updated (version: 1065, sigs: 4049, f-level: 5, builder: arnaud)
WARNING: Your ClamAV installation is OUTDATED - please update immediately !
WARNING: Current functionality level = 2, required = 5
Database updated (40151 signatures) from database.clamav.net (64.186.240.118).
Clamd successfully notified about the update.
-------------------------------------------------

[mbachmann]

As it says: the scan-engine should be updated. Easy way:  fetch http://sme.swerts-knudsen.com/downloads/AntiVirus/antivirus_install.sh from Jesper Knudsen and execute the sh script. If it errors out, report back.

[bjarni]

Thank you for your response.

I made the update and it looks much better. The only problem which I noticed is this warning that I received from /etc/clamscan:

LibClamAV Warning: Multipart has no subtype assuming alternative

What does it mean, and should I take any actions?

/bjarni

[jackl]

bjarni

As far as I can figure out these messages refer to badly structured email messages or ones that clam has difficulty in determining.

Regarding email message structures there are predefined content-type values
Multipart is one of these values it has a defined structure, and if this is malformed Clam will indicate the error with a message like you have received.

More detail here : http://www.mhonarc.org/~ehood/MIME/1521/07_Predefined_Content-Type.html

Regards,

Jack

[bugme]

I read this and want to know what version I have running on our SME 6.0 and howto update if necessary.

http://news.com.com/Bugs+found+in+open-source+antivirus+tool/2110-1002_3-5873640.html

Thanks.

[wellsi]

# rpm -q clamav-es

For me this gives 'clamav-es-0.87-es01' which is OK.

If you get an older version then check the post above from Mathias (mbachmann)