WARNING: Your ClamAV installation is OUTDATED!

[klonos]

Was just checking the logs of some of my ubuntu mail servers, just to see if all is ok and found this warnign. VirusDBs are updated ok, but clamav needs to be upgraded. Apt-get install says version is already the newest.

Can someone provide step-by-step instuctions of the upgarde process to the latest version?? Do I have to first unistall and then re-isntall new version from sources? Any way this can be automated each time a new version comes up?

[Ben]

Did you check the alternate sources for clamav on the clamav page?

[klonos]

Yes I did, and I saw that there are some debian packages, but being a Linux newcomer and all what I am looking for is step-by-step instructions if they are available. If not, I am going to try one or two things myself, but I am not that confident with linux yet and I am afraid I might mess things up.

[Ben]

Reading http://www.clamav.org/download/packages/packages-linux
points you to a change in the /etc/apt/sources.list file:

deb http://volatile.debian.org/debian-volatile etch/volatile main contrib non-free

[klonos]

Yes I did, and I saw that there are some debian packages, but being a Linux newcomer and all what I am looking for is step-by-step instructions if they are available. If not, I am going to try one or two things myself, but I am not that confident with linux yet and I am afraid I might mess things up.

[till]

The steps to get the latest clamav are:

1) Edit the file /etc/apt/sources.list

and add the following line at the end of the file:

deb http://volatile.debian.org/debian-volatile etch/volatile main contrib non-free

2) run the following commands:

apt-get update
apt-get -u upgrade

[klonos]

Thank you both Ben and Till!

I have already tried what you suggest and it did seem to have worked fine. Apt-get update spit the following:

root@mail:~# apt-get update
...
Reading package lists... Done
W: GPG error: http://volatile.debian.org etch/volatile Release:
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY EC61E0B0BBE55AB3
W: You may want to run apt-get update to correct these problems
root@mail:~#

Then I did

apt-get install clamav clamav-base clamav-freshclam clamav-docs

and it all went ok with some warnings that the sources are not signed or something like that, plus some prompts to accept that this is ok by typing [yes] y. But installation went all the way and I saw latest version numbers being installed (clam 0.92.1) and fleshclam service being stopped and started again.

I have logwatch installed (which was how I found out that clamav virus dbs were being apdated but the engine wasn't upgraded in the first place) and it shows still that version 0.88.7 is installed. Re-runing apt-get says all is already the latest version.

From clamav website faq:

I upgraded to the latest stable version but I still get the message Your ClamAV installation is OUTDATED, why?

* Make sure there is really only one version of ClamAV installed on your system:

$ whereis freshclam
$ whereis clamscan

* Also make sure that you haven’t got old libraries (libclamav.so*) lying around your filesystem. You can verify it using: $ ldd `which freshclam`

So:

root@mail:# whereis freshclam
freshclam: /usr/bin/freshclam /usr/X11R6/bin/freshclam /usr/bin/X11/freshclam /usr/share/man/man1/freshclam.1.gz
root@mail:# whereis clamscan
clamscan: /usr/bin/clamscan /usr/X11R6/bin/clamscan /usr/bin/X11/clamscan /usr/share/man/man1/clamscan.1.gz
root@mail:# ldd `which freshclam`
linux-gate.so.1 => (0xffffe000)
libclamav.so.2 => /usr/lib/libclamav.so.2 (0xb7e76000)
libnsl.so.1 => /lib/tls/i686/cmov/libnsl.so.1 (0xb7e60000)
libresolv.so.2 => /lib/tls/i686/cmov/libresolv.so.2 (0xb7e4d000)
libpthread.so.0 => /lib/tls/i686/cmov/libpthread.so.0 (0xb7e39000)
libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb7d05000)
libz.so.1 => /usr/lib/libz.so.1 (0xb7cf1000)
libbz2.so.1.0 => /lib/libbz2.so.1.0 (0xb7ce1000)
libgmp.so.3 => /usr/lib/libgmp.so.3 (0xb7c9d000)
/lib/ld-linux.so.2 (0xb7f09000)

What do you people make out of these? Everything in pace or not??

BTW, how can I find the version of clamav running ??? I did some extra work on my own:

root@mail:# ps aux|grep clam
clamav 4504 0.0 4.0 62452 41916 ? Ss Sep06 21:18 /usr/sbin/clamd
clamav 8571 0.0 0.1 3008 1328 ? Ss 00:54 0:00 /usr/bin/freshclam -d --quiet
root 13963 0.0 0.0 2800 764 pts/0 S+ 12:47 0:00 grep clam

plus /etc/clamav/clamav.log shows normal activity. Googling around I came across some post that said I'll have to manually change the version number in a file in some rare cases after upgrading. Unfortunatelly I cannot remember where this post was or the filename... just helping you people in helping me.

[falko]

You can try

/usr/sbin/clamd -v

or

/usr/sbin/clamd -V

to find out the ClamAV version.

[klonos]

That's exactly my point falco, fleshclam.log stopped complaining about an outdated version after what to me seemed like a succesful upgrade to 0.91.2. But, when I do:

calmd -V

I get:

CalmAV 0.88.7

What do you make out of this??

[falko]

What's the output of

updatedb
locate clamd

? Maybe you have two ClamAV versions installed at the same time.