Topic: LibClamAV detected duplicate databases

[Michail Pappas]

I've noticed that I'm getting the following warning on my production SME10 server:

Code: [Select]

LibClamAV Warning: Detected duplicate databases /var/lib/clamav/bytecode.cvd and /var/lib/clamav/bytecode.cld, please manually remove one of them

The contents of /var/lib/clamav:

Code: [Select]

# ls -laF /var/lib/clamav/
total 360128
drwxr-xr-x.  2 clamupdate clamupdate       100 Oct 24 01:53 ./
drwxr-xr-x. 51 root       root            4096 Aug 26 15:13 ../
-rw-r--r--   1 clamupdate clamupdate   1430528 Feb 23  2023 bytecode.cld
-rw-r--r--   1 clamupdate clamupdate    291965 Feb 28  2023 bytecode.cvd
-rw-r--r--   1 clamupdate clamupdate 196547584 Oct 23 13:53 daily.cld
-rw-r--r--   1 clamupdate clamupdate        69 Oct  6 13:42 freshclam.dat
-rw-r--r--   1 clamupdate clamupdate 170479789 Sep 22  2021 main.cvd

This seems similar https://forums.koozali.org/index.php/topic,46065.msg225241.html

There was also an issue raised in Red Hat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1970247

I suppose I could perhaps stop clamav, delete /var/lib/clamav/bytecode.cvd and start clamav again and get done with it, but I was wondering whether this is actually a bug or not. Let me know, I'll open one if needed.

[Jean-Philippe Pialasse]

you can consider bug, but this break nothing.  only create log noise

Code: [Select]

ls -laF /var/lib/clamav/
total 227036
drwxr-xr-x.  2 clamupdate clamupdate        59 14 sep 04:52 ./
drwxr-xr-x. 72 root       root            4096 30 mar  2018 ../
-rw-r--r--   1 clamupdate clamupdate    291965 27 fév  2023 bytecode.cvd
-rw-r--r--   1 clamupdate clamupdate  61701146 31 aoû 07:09 daily.cvd
-rw-r--r--   1 clamupdate clamupdate 170479789 22 sep  2021 main.cvd


[Michail Pappas]

Thanks JP.

Comparing your output with mine I can't help but wonder though why the same boxes with, presumably, stock settings download different files (daily.cld in my case, daily.cvd in yours).

[bunkobugsy]

One is in the clamav-data rpm the other is downloaded by freshclam, just delete both then run freshclam.

[Michail Pappas]

One is in the clamav-data rpm the other is downloaded by freshclam, just delete both then run freshclam.

Worked fine, thanks!