Koozali.org: home of the SME Server
  1. Koozali.org: home of the SME Server
  2. Contribs.org Forums
  3. Koozali SME Server 10.x Contribs
  4. Topic: How to update an outdated ClamAV Version?
« previous next »
Pages: [1]   Go Down

How to update an outdated ClamAV Version?

  • 8 Replies
  • 323 Views

Offline waldviertler

  • *
  • 116
  • +0/-0
How to update an outdated ClamAV Version?
« on: Yesterday at 03:09:06 PM »
Hello all!

Since a few days I get these errors:

Code: [Select]
Sun Oct 12 11:15:02 2025 -> ClamAV update process started at Sun Oct 12 11:15:02 2025 Sun Oct 12 11:15:02 2025 -> Current working dir is /var/lib/clamav/ Sun Oct 12 11:15:02 2025 -> Querying current.cvd.clamav.net Sun Oct 12 11:15:02 2025 -> TTL: 1800 Sun Oct 12 11:15:02 2025 -> fc_dns_query_update_info: Software version from DNS: 1.0.9 Sun Oct 12 11:15:02 2025 -> WARNING: Your ClamAV installation is OUTDATED!
Sun Oct 12 11:15:02 2025 -> WARNING: Local version: 0.103.11 Recommended version: 1.0.9 Sun Oct 12 11:15:02 2025 -> DON'T PANIC! Read https://docs.clamav.net/manual/Installing.html
Sun Oct 12 11:15:02 2025 -> WARNING: Cool-down expired, ok to try again.
Sun Oct 12 11:15:02 2025 -> Saved freshclam.dat Sun Oct 12 11:15:02 2025 -> Current working dir is /var/lib/clamav/ Sun Oct 12 11:15:02 2025 -> check_for_new_database_version: Local copy of daily found: daily.cld.
Sun Oct 12 11:15:02 2025 -> query_remote_database_version: daily.cvd version from DNS: 27789 Sun Oct 12 11:15:02 2025 -> daily database available for update (local version: 27778, remote version: 27789) Sun Oct 12 11:15:03 2025 -> Retrieving https://database.clamav.net/daily-27779.cdiff
Sun Oct 12 11:15:03 2025 -> downloadFile: Download source:      https://database.clamav.net/daily-27779.cdiff
Sun Oct 12 11:15:03 2025 -> downloadFile: Download destination: ./clamav-55e14cae4f88b8d8d7929fd7d3b69527.tmp
Sun Oct 12 11:15:04 2025 -> Saved freshclam.dat Sun Oct 12 11:15:04 2025 -> WARNING: downloadPatch: Can't download daily-27779.cdiff from https://database.clamav.net/daily-27779.cdiff
Sun Oct 12 11:15:04 2025 -> WARNING: Incremental update failed, trying to download daily.cvd Sun Oct 12 11:15:04 2025 -> Retrieving https://database.clamav.net/daily.cvd
Sun Oct 12 11:15:04 2025 -> downloadFile: Download source:      https://database.clamav.net/daily.cvd
Sun Oct 12 11:15:04 2025 -> downloadFile: Download destination: /var/lib/clamav/tmp.6f7fa0639c/clamav-6b08e134a728f8808cb0277c5a05bfd0.tmp
Sun Oct 12 11:15:04 2025 -> Saved freshclam.dat Sun Oct 12 11:15:04 2025 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Sun Oct 12 11:15:04 2025 -> WARNING: FreshClam received error code 403 from the ClamAV Content Delivery Network (CDN).
Sun Oct 12 11:15:04 2025 -> This could mean several things:
Sun Oct 12 11:15:04 2025 ->  1. You are running an out-of-date version of ClamAV / FreshClam.
Sun Oct 12 11:15:04 2025 ->     Ensure you are the most updated version by visiting https://www.clamav.net/downloads
Sun Oct 12 11:15:04 2025 ->  2. Your network is explicitly denied by the FreshClam CDN.
Sun Oct 12 11:15:04 2025 ->     In order to rectify this please check that you are:
Sun Oct 12 11:15:04 2025 ->    a. Running an up-to-date version of FreshClam
Sun Oct 12 11:15:04 2025 ->    b. Running FreshClam no more than once an hour
Sun Oct 12 11:15:04 2025 ->    c. If you have checked (a) and (b), please open a ticket at
Sun Oct 12 11:15:04 2025 ->       https://github.com/Cisco-Talos/clamav/issues
Sun Oct 12 11:15:04 2025 ->       and we will investigate why your network is blocked.
Sun Oct 12 11:15:04 2025 -> WARNING: You are on cool-down until after: 2025-10-13 11:15:04 Sun Oct 12 11:15:04 2025 -> ERROR: Database update process failed: Forbidden; Blocked by CDN Sun Oct 12 11:15:04 2025 -> ERROR: Update failed.
Sun Oct 12 11:15:04 2025 -> WARNING: FreshClam was forbidden from downloading a database.
Sun Oct 12 11:15:04 2025 -> WARNING: This is fatal. Retrying later won't help. Exiting now.

I looked at https://wiki.koozali.org/Clamav:freshclam_update#Solution
and the suggestion:

Code: [Select]
/usr/bin/refreshclam
but I have no script on "refreshclam" on my server. I am running 10.1. with all available updates.


When I run "yum update clamav"
I get:
Code: [Select]
Geladene Plugins: fastestmirror, post-transaction-actions, priorities, smeserver
Loading mirror speeds from cached hostfile
 * smeaddons: mirror.canada.pialasse.com
 * smeextras: mirror.canada.pialasse.com
 * smeos: mirror.canada.pialasse.com
 * smeupdates: mirror.canada.pialasse.com
No packages marked for update

When I run "rpm -qa |grep clamav"
I get these informations:
Code: [Select]
clamav-0.103.11-1.el7.x86_64
smeserver-clamav-2.7.0-16.el7.sme.noarch
clamav-filesystem-0.103.11-1.el7.noarch
clamav-lib-0.103.11-1.el7.x86_64
clamav-data-0.103.11-1.el7.noarch
clamav-update-0.103.11-1.el7.x86_64
When I run this command " yum list clamav"
I get these informations:
Code: [Select]
Geladene Plugins: fastestmirror, post-transaction-actions, priorities, smeserver
Loading mirror speeds from cached hostfile
 * smeaddons: mirror.canada.pialasse.com
 * smeextras: mirror.canada.pialasse.com
 * smeos: mirror.canada.pialasse.com
 * smeupdates: mirror.canada.pialasse.com
Installierte Pakete
clamav.x86_64                                       0.103.11-1.el7                                        @smeupdates

Do someone have a nice suggestion for me?

Best regards
Martin



Logged

Offline bunkobugsy

  • *
  • 317
  • +4/-0
Re: How to update an outdated ClamAV Version?
« Reply #1 on: Yesterday at 07:56:42 PM »
« Last Edit: Today at 12:31:05 AM by bunkobugsy »
Logged

Offline waldviertler

  • *
  • 116
  • +0/-0
Re: How to update an outdated ClamAV Version?
« Reply #2 on: Today at 12:16:56 AM »
Thank you for your help.

But I get again errors. I have tried it with the yum update ...  and with wget.

Code: [Select]
[root@www upclamav]#  yum localupdate *.rpm
Loaded plugins: fastestmirror, post-transaction-actions, priorities, smeserver
clamav-1.0.9-1.el7_9.x86_64.rpm is being analyzed: clamav-1.0.9-1.el7_9.x86_64
clamav-1.0.9-1.el7_9.x86_64.rpm is marked as an update for clamav-0.103.11.-1.el7.x86_64
clamav-data-1.0.9-1.el7_9.noarch.rpm is examined: clamav-data-1.0.9-1.el7_9..noarch
clamav-data-1.0.9-1.el7_9.noarch.rpm is marked as an update for clamav-dat.a-0.103.11-1.el7.noarch
clamav-filesystem-1.0.9-1.el7_9.noarch.rpm is examined: clamav-filesystem-1..0.9-1.el7_9.noarch
clamav-filesystem-1.0.9-1.el7_9.noarch.rpm is marked as an update for clam.av-filesystem-0.103.11-1.el7.noarch
clamav-freshclam-1.0.9-1.el7_9.x86_64.rpm wird untersucht: clamav-freshclam-1.0..9-1.el7_9.x86_64
Package clamav-freshclam not installed, it cannot be updated. Run yum install instead to install it.
clamav-lib-1.0.9-1.el7_9.x86_64.rpm is examined: clamav-lib-1.0.9-1.el7_9.x8.6_64
clamav-lib-1.0.9-1.el7_9.x86_64.rpm is marked as an update for clamav-lib-.0.103.11-1.el7.x86_64
clamd-1.0.9-1.el7_9.x86_64.rpm is examined: clamd-1.0.9-1.el7_9.x86_64
clamd-1.0.9-1.el7_9.x86_64.rpm is marked as an update for clamd-0.103.11-1..el7.x86_64
Dependencies are resolved
--> Transaction check is executed
---> Package clamav.x86_64 0:0.103.11-1.el7 marked to be updated
---> Package clamav.x86_64 0:1.0.9-1.el7_9 marked to be updated
---> Package clamav-data.noarch 0:0.103.11-1.el7 marked to be updated
---> Package clamav-data.noarch 0:1.0.9-1.el7_9 marked to be updated
---> Package clamav-filesystem.noarch 0:0.103.11-1.el7 marked to be updated
--> dependency clamav-filesystem = 0.103.11-1.el7 is processed for package clamav-update.-0.103.11-1.el7.x86_64
Loading mirror speeds from cached hostfile
 * smeaddons: mirror.canada.pialasse.com
 * smeextras: mirror.canada.pialasse.com
 * smeos: mirror.canada.pialasse.com
 * smeupdates: mirror.canada.pialasse.com
---> Package clamav-filesystem.noarch 0:1.0.9-1.el7_9 marked to be updated
--> Package clamav-lib.x86_64 0:0.103.11-1.el7 marked to be updated
--> dependency clamav-lib = 0.103.11-1.el7 is processed for package clamav-update-0.103..11-1.el7.x86_64
--> dependency libclamav.so.9()(64bit) is processed for package clamav-update-0.103.11-1..el7.x86_64
--> dependency libclamav.so.9(CLAMAV_PRIVATE)(64bit) is processed for package clamav-upd.ate-0.103.11-1.el7.x86_64
--> dependency libclamav.so.9(CLAMAV_PUBLIC)(64bit) is processed for package clamav-upda.te-0.103.11-1.el7.x86_64
---> Package clamav-lib.x86_64 0:1.0.9-1.el7_9 is marked to be updated.
---> package clamd.x86_64 0:0.103.11-1.el7 marked to be updated
---> Package clamd.x86_64 0:1.0.9-1.el7_9 marked to be updated
--> Dependency resolution finished
Error: Package: clamav-update-0.103.11-1.el7.x86_64 (@smeupdates)
            Required: clamav-lib = 0.103.11-1.el7
            Remove: clamav-lib-0.103.11-1.el7.x86_64 (@smeupdates)
                clamav-lib = 0.103.11-1.el7
            Updated by: clamav-lib-1.0.9-1.el7_9.x86_64 (/clamav-lib-1.0..9-1.el7_9.x86_64)
                clamav-lib = 1.0.9-1.el7_9
            Available: clamav-lib-0.103.7-1.el7.x86_64 (smeos)
                clamav-lib = 0.103.7-1.el7
Error: Package: clamav-update-0.103.11-1.el7.x86_64 (@smeupdates)
            Required: libclamav.so.9(CLAMAV_PRIVATE)(64bit)
            Remove: clamav-lib-0.103.11-1.el7.x86_64 (@smeupdates)
                libclamav.so.9(CLAMAV_PRIVATE)(64bit)
            Updated by: clamav-lib-1.0.9-1.el7_9.x86_64 (/clamav-lib-1.0..9-1.el7_9.x86_64)
                Not found
            Available: clamav-lib-0.103.7-1.el7.x86_64 (smeos)
                libclamav.so.9(CLAMAV_PRIVATE)(64bit)
Error: Package: clamav-update-0.103.11-1.el7.x86_64 (@smeupdates)
            Required: libclamav.so.9(CLAMAV_PUBLIC)(64bit)
            Remove: clamav-lib-0.103.11-1.el7.x86_64 (@smeupdates)
                libclamav.so.9(CLAMAV_PUBLIC)(64bit)
            Updated by: clamav-lib-1.0.9-1.el7_9.x86_64 (/clamav-lib-1.0..9-1.el7_9.x86_64)
                Not found
            Available: clamav-lib-0.103.7-1.el7.x86_64 (smeos)
                libclamav.so.9(CLAMAV_PUBLIC)(64bit)
Error: Package: clamav-update-0.103.11-1.el7.x86_64 (@smeupdates)
            Required: libclamav.so.9()(64bit)
            Remove: clamav-lib-0.103.11-1.el7.x86_64 (@smeupdates)
                libclamav.so.9()(64bit)
            Updated by: clamav-lib-1.0.9-1.el7_9.x86_64 (/clamav-lib-1.0..9-1.el7_9.x86_64)
               ~libclamav.so.11()(64bit)
            Available: clamav-lib-0.103.7-1.el7.x86_64 (smeos)
                libclamav.so.9()(64bit)
Error: Package: clamav-update-0.103.11-1.el7.x86_64 (@smeupdates)
            Required: clamav-filesystem = 0.103.11-1.el7
            Remove: clamav-filesystem-0.103.11-1.el7.noarch (@smeupdates)
                clamav-filesystem = 0.103.11-1.el7
            Updated by: clamav-filesystem-1.0.9-1.el7_9.noarch (/clamav-.filesystem-1.0.9-1.el7_9.noarch)
                clamav-filesystem = 1.0.9-1.el7_9
            Available: clamav-filesystem-0.103.7-1.el7.noarch (smeos)
                clamav-filesystem = 0.103.7-1.el7
 You can try to work around the problem with --skip-broken.
 You could try the following: rpm -Va --nofiles --nodigest

Best regards
martin
Logged

Offline bunkobugsy

  • *
  • 317
  • +4/-0
Re: How to update an outdated ClamAV Version?
« Reply #3 on: Today at 12:24:00 AM »
#  yum localinstall *.rpm
Logged

Offline waldviertler

  • *
  • 116
  • +0/-0
Re: How to update an outdated ClamAV Version?
« Reply #4 on: Today at 12:43:09 AM »
Thank you!
It runs smoothly through.

Best regards
Martin
Logged

Offline waldviertler

  • *
  • 116
  • +0/-0
Re: How to update an outdated ClamAV Version?
« Reply #5 on: Today at 12:37:08 PM »
Today I got a server email with the same error, I got before:

Code: [Select]
Mon Oct 13 11:15:13 2025 -> ClamAV update process started at Mon Oct 13 11:15:13 2025 Mon Oct 13 11:15:13 2025 -> Current working dir is /var/lib/clamav/ Mon Oct 13 11:15:13 2025 -> Querying current.cvd.clamav.net Mon Oct 13 11:15:13 2025 -> TTL: 1800 Mon Oct 13 11:15:13 2025 -> fc_dns_query_update_info: Software version from DNS: 1.0.9 Mon Oct 13 11:15:13 2025 -> WARNING: Your ClamAV installation is OUTDATED!
Mon Oct 13 11:15:13 2025 -> WARNING: Local version: 0.103.11 Recommended version: 1.0.9 Mon Oct 13 11:15:13 2025 -> DON'T PANIC! Read https://docs.clamav.net/manual/Installing.html
Mon Oct 13 11:15:13 2025 -> WARNING: Cool-down expired, ok to try again.
Mon Oct 13 11:15:13 2025 -> Saved freshclam.dat Mon Oct 13 11:15:13 2025 -> Current working dir is /var/lib/clamav/ Mon Oct 13 11:15:13 2025 -> check_for_new_database_version: Local copy of daily found: daily.cld.
Mon Oct 13 11:15:13 2025 -> query_remote_database_version: daily.cvd version from DNS: 27790 Mon Oct 13 11:15:13 2025 -> daily database available for update (local version: 27778, remote version: 27790) Mon Oct 13 11:15:16 2025 -> Retrieving https://database.clamav.net/daily-27779.cdiff
Mon Oct 13 11:15:16 2025 -> downloadFile: Download source:      https://database.clamav.net/daily-27779.cdiff
Mon Oct 13 11:15:16 2025 -> downloadFile: Download destination: ./clamav-ca226d2d79e153cfe4660d919711e1d6.tmp
Mon Oct 13 11:15:18 2025 -> Saved freshclam.dat Mon Oct 13 11:15:18 2025 -> WARNING: downloadPatch: Can't download daily-27779.cdiff from https://database.clamav.net/daily-27779.cdiff
Mon Oct 13 11:15:18 2025 -> WARNING: Incremental update failed, trying to download daily.cvd Mon Oct 13 11:15:18 2025 -> Retrieving https://database.clamav.net/daily.cvd
Mon Oct 13 11:15:18 2025 -> downloadFile: Download source:      https://database.clamav.net/daily.cvd
Mon Oct 13 11:15:18 2025 -> downloadFile: Download destination: /var/lib/clamav/tmp.1f68a56008/clamav-4f3f63bd9b96811bc5b90b0f439e0684.tmp
Mon Oct 13 11:15:18 2025 -> Saved freshclam.dat Mon Oct 13 11:15:18 2025 -> WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Mon Oct 13 11:15:18 2025 -> WARNING: FreshClam received error code 403 from the ClamAV Content Delivery Network (CDN).
Mon Oct 13 11:15:18 2025 -> This could mean several things:
Mon Oct 13 11:15:18 2025 ->  1. You are running an out-of-date version of ClamAV / FreshClam.
Mon Oct 13 11:15:18 2025 ->     Ensure you are the most updated version by visiting https://www.clamav.net/downloads
Mon Oct 13 11:15:18 2025 ->  2. Your network is explicitly denied by the FreshClam CDN.
Mon Oct 13 11:15:18 2025 ->     In order to rectify this please check that you are:
Mon Oct 13 11:15:18 2025 ->    a. Running an up-to-date version of FreshClam
Mon Oct 13 11:15:18 2025 ->    b. Running FreshClam no more than once an hour
Mon Oct 13 11:15:18 2025 ->    c. If you have checked (a) and (b), please open a ticket at
Mon Oct 13 11:15:18 2025 ->       https://github.com/Cisco-Talos/clamav/issues
Mon Oct 13 11:15:18 2025 ->       and we will investigate why your network is blocked.
Mon Oct 13 11:15:18 2025 -> WARNING: You are on cool-down until after: 2025-10-14 11:15:18 Mon Oct 13 11:15:18 2025 -> ERROR: Database update process failed: Forbidden; Blocked by CDN Mon Oct 13 11:15:18 2025 -> ERROR: Update failed.
Mon Oct 13 11:15:18 2025 -> WARNING: FreshClam was forbidden from downloading a database.
Mon Oct 13 11:15:18 2025 -> WARNING: This is fatal. Retrying later won't help. Exiting now.

The new installation shows still an error with "Your ClamAV installation is OUTDATED!"

Best regards
Martin
Logged

Offline bunkobugsy

  • *
  • 317
  • +4/-0
Re: How to update an outdated ClamAV Version?
« Reply #6 on: Today at 01:13:28 PM »
# rpm -qa clamav*


Mon Oct 13 11:15:18 2025 -> WARNING: You are on cool-down until after: 2025-10-14 11:15:18
« Last Edit: Today at 01:19:27 PM by bunkobugsy »
Logged

Offline waldviertler

  • *
  • 116
  • +0/-0
Re: How to update an outdated ClamAV Version?
« Reply #7 on: Today at 03:31:41 PM »
rpm -qa clamav* returns nothing.

When I type
Code: [Select]
rpm -qa |grep clama
it shows:

Code: [Select]
smeserver-clamav-2.7.0-16.el7.sme.noarch
clamav-lib-1.0.9-1.el7_9.x86_64
clamav-1.0.9-1.el7_9.x86_64
clamav-data-1.0.9-1.el7_9.noarch
clamav-filesystem-1.0.9-1.el7_9.noarch
clamav-freshclam-1.0.9-1.el7_9.x86_64
The cooldown show up, because once a day the frehclam script is running:

Code: [Select]
[root@www upclamav]# freshclam
Mon Oct 13 15:29:58 2025 -> Current working dir is /var/lib/clamav/
Mon Oct 13 15:29:58 2025 -> Loaded freshclam.dat:
Mon Oct 13 15:29:58 2025 ->   version:    1
Mon Oct 13 15:29:58 2025 ->   uuid:       0bcc422d-a1a5-4ff8-8003-7fa804a760c9
Mon Oct 13 15:29:58 2025 ->   retry-after: 2025-10-14 11:15:18
Mon Oct 13 15:29:58 2025 -> ClamAV update process started at Mon Oct 13 15:29:58 2025
Mon Oct 13 15:29:58 2025 -> Current working dir is /var/lib/clamav/
Mon Oct 13 15:29:58 2025 -> Querying current.cvd.clamav.net
Mon Oct 13 15:29:58 2025 -> TTL: 922
Mon Oct 13 15:29:58 2025 -> fc_dns_query_update_info: Software version from DNS: 1.0.9
WARNING: Mon Oct 13 15:29:58 2025 -> FreshClam previously received error code 429 or 403 from the ClamAV Content Delivery Network (CDN).
Mon Oct 13 15:29:58 2025 -> This means that you have been rate limited or blocked by the CDN.
Mon Oct 13 15:29:58 2025 ->  1. Verify that you're running a supported ClamAV version.
Mon Oct 13 15:29:58 2025 ->     See https://docs.clamav.net/faq/faq-eol.html for details.
Mon Oct 13 15:29:58 2025 ->  2. Run FreshClam no more than once an hour to check for updates.
Mon Oct 13 15:29:58 2025 ->     FreshClam should check DNS first to see if an update is needed.
Mon Oct 13 15:29:58 2025 ->  3. If you have more than 10 hosts on your network attempting to download,
Mon Oct 13 15:29:58 2025 ->     it is recommended that you set up a private mirror on your network using
Mon Oct 13 15:29:58 2025 ->     cvdupdate (https://pypi.org/project/cvdupdate/) to save bandwidth on the
Mon Oct 13 15:29:58 2025 ->     CDN and your own network.
Mon Oct 13 15:29:58 2025 ->  4. Please do not open a ticket asking for an exemption from the rate limit,
Mon Oct 13 15:29:58 2025 ->     it will not be granted.
WARNING: Mon Oct 13 15:29:58 2025 -> You are still on cool-down until after: 2025-10-14 11:15:18
[root@www upclamav]#

best regards
Martin
Logged

Offline ReetP

  • *
  • 3,993
  • +6/-0
Re: How to update an outdated ClamAV Version?
« Reply #8 on: Today at 06:39:12 PM »
Tested a few as per the suggestion above.

Just finished it with:

Code: [Select]
signal-event smeserver-clamav-update
Seemed to work OK.
Logged
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation
Pages: [1]   Go Up
« previous next »
  1. Koozali.org: home of the SME Server
  2. Contribs.org Forums
  3. Koozali SME Server 10.x Contribs
  4. Topic: How to update an outdated ClamAV Version?