Clamav not updating virus signatures

26-Jan-2018 16:12 by 7 Comments

Clamav not updating virus signatures - Sexy porn chat online

amavisd-new provides rfc2821-compliant SMTP server and client, a rfc2033-compliant LMTP server and client, and generates rfc3462/rfc3464-compliant (ex rfc1892/rfc1894) delivery (and non-delivery) status notifications.

It talks to MTA via (E)SMTP or LMTP protocols, or by using helper programs.If there are security vulnerabilities in them, the whole setup might be affected.The possible damage is limited to what a non-privileged UID can accomplish in normal setups, and can further be limited using a chroot setup.See the Free BSD-SA- security advisory which applies to a file(1) utility distributed with the operating system.2007-04-23: amavisd-new-2.5.0gz 2007-03-22: An exploitable security problem in file(1) utility version 4.19 and older has been found by Jean-SĂ©bastien Guay-Leroux.Please use the most recent version of this module, which at the time of writing is 1.06.

CVE-2005-1349 The use of each external decoding program can be disabled in file by removing entries from the list @decoders, or in older versions or amavisd-new by removing assignment to corresponding variables (e.g.

2016-04-26: amavisd-new-2.11.0xz release Old News 2016-03-18: amavisd-new-2.11.0-rc1xz release candidate 2014-10-26: amavisd-new-2.10.1xz release 2014-10-22: amavisd-new-2.10.0xz release 2014-10-17: amavisd-new-2.10.0-rc2xz release candidate 2014-09-29: amavisd-new-2.10.0-rc1xz release candidate 2014-06-27: amavisd-new-2.9.1xz release 2014-05-09: amavisd-new-2.9.0xz release 2014-05-07: amavisd-new-2.9.0-rc2bz2 release candidate 2013-09-04: amavisd-new-2.8.2-rc1bz2 release candidate (never released) 2013-06-28: amavisd-new-2.8.1gz released 2013-04-27: amavisd-new-2.8.1-rc1gz release candidate 2012-06-30: amavisd-new-2.8.0gz has been released 2012-06-30: amavisd-new-2.7.2gz has been released, it is a bug-fix update over 2.7.1 2012-05-22: amavisd-new-2.8.0-pre7gz is a preview of the next release 2012-04-29: amavisd-new-2.7.1gz has been released, it is a bug-fix update over 2.7.0 2012-04-29: amavisd-new-2.8.0-pre6gz is a preview of the next release 2012-04-10: amavisd-new-2.7.1-rc1gz is a release candidate for a bug-fix update on 2.7 2012-03-09: amavisd-new-2.8.0-pre4gz is a preview of the next release 2011-07-01: amavisd-new-2.7.0gz is a long-awaited features release 2011-05-19: amavisd-new-2.6.6gz is a maintenance update of a 2.6 branch, backporting all bug fixes from the 2.7.0-pre* development cycle 2011-05-18: amavisd-new-2.7.0-rc1gz pre-release 2011-03-07: Mailing list has been moved from Source Forge to Only posts from subscribed members are accepted, as before.

The announcement is archived at The MARC archive of the previous mailing list is continuing to follow the new list, other third-party archives are no longer being updated.

The problem is fixed in version 4.21 (partly fixed in 4.20).

This program is being used by amavisd-new even when virus scanning is disabled, so it is heartly recommended to use the most recent version (currently at 4.21), available from

$lha, $unarj, $unrar, $zoo, ...) or setting them to undef, or just not having the named external program present on the The most recent stable version is also accessible through a soft link at: https://si/software/amavisd/gz Announcements about new releases are posted on the amavis-users mailing list, and on the Freshmeat project page, which also accepts subscriptions to announcements.