ports/154608: security/clamav 0.97 does not recognize old database?

[Michael Scheidell]

>Number:         154608
>Category:       ports
>Synopsis:       security/clamav 0.97 does not recognize old database?
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Feb 09 09:30:12 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Michael Scheidell
>Release:        7.3 amd
>Organization:
SECNAP Network Security
>Environment:
7.3 amd64 release-p1
>Description:
running clamav with 'extra' signatures via clamav-unofficial sigs.
updates portstree, then rebuilt and reinstelled clamav:

portsnap fetch update
service clamav-clamd stop
service clamav-freshclam stop

portupgrade -p clamav
service clamav-clamd start

got this:
Starting clamav_clamd.
LibClamAV Error: cli_loadhash: Invalid value for the size field
LibClamAV Error: cli_loadhash: Problem parsing database at line 13624
LibClamAV Error: Can't load /var/db/clamav/securiteinfohtml.hdb: Malformed database
ERROR: Malformed database

no fix (sorry) no patch yet, but thought it should be documented to avoid any mail server outages.

possible fix? wipe out /var/db/clamav and rebuild first?

will test in sandbox later.

>How-To-Repeat:

portsnap fetch update
service clamav-clamd stop
service clamav-freshclam stop

portupgrade -p clamav
service clamav-clamd start

clamscan same thing:

clamscan MegaSAS.log
LibClamAV Error: cli_loadhash: Invalid value for the size field
LibClamAV Error: cli_loadhash: Problem parsing database at line 13624
LibClamAV Error: Can't load /var/db/clamav/securiteinfohtml.hdb: Malformed database
ERROR: Malformed database


>Fix:
? remove securitieinfohtml.hdb?
is it a clamav problem? or securitie?

 rm /var/db/clamav/securiteinfohtml.hdb
clamscan MegaSAS.log
MegaSAS.log: OK


>Release-Note:
>Audit-Trail:
>Unformatted: