Up to date ClamAV on Debian Wheezy (ClamAV installation is OUTDATED log message)

clamavdebian-wheezy

I've installed ClamAV on Debian Wheezy from the offical repositories, using apt. System is up to date and I don't get any updates via apt-get upgrade, but still I get this message in the logs:

Your ClamAV installation is OUTDATED!

My version is:

$ clamscan -V
ClamAV 0.98.1/19186/Sun Jul 13 00:34:56 2014

On the official page:

Latest ClamAV® stable release is: 0.98.4

Looks like the official stable repos for Wheezy are not up to date. The only information I've found is official info about Debian Volatile project, which is now closed since Squeeze.

Are there any alternative repositories?
How can I keep ClamAV always up to date and be sure the system is stable?

Edit:

My /etc/apt/sources.list:

deb http://ftp.ru.debian.org/debian/ wheezy main non-free contrib
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb http://ftp.ru.debian.org/debian/ wheezy-updates main contrib non-free



$ dpkg -l 'clamav*'


||/ Name                                     Version                   Architecture              Description
+++-========================================-=========================-=========================-======================================================================================
ii  clamav                                   0.98.4+dfsg-0+deb7u2      amd64                     anti-virus utility for Unix - command-line interface
ii  clamav-base                              0.98.4+dfsg-0+deb7u2      all                       anti-virus utility for Unix - base package
ii  clamav-daemon                            0.98.4+dfsg-0+deb7u2      amd64                     anti-virus utility for Unix - scanner daemon
un  clamav-data                              <none>                                              (no description available)
ii  clamav-docs                              0.98.4+dfsg-0+deb7u2      all                       anti-virus utility for Unix - documentation
ii  clamav-freshclam                         0.98.4+dfsg-0+deb7u2      amd64                     anti-virus utility for Unix - virus database update utility

Best Answer

I had the same problem. I down some digging read The Perfect Server - Debian Wheezy (Apache2, BIND, Dovecot, ISPConfig 3) - Page 3 This sorted my "Your ClamAV installation is OUTDATED!"

First make sure that your /etc/apt/sources.list contains the wheezy-updates repository (this makes sure you always get the newest updates for the ClamAV virus scanner - this project publishes releases very often, and sometimes old versions stop working), and that the contrib and non-free repositories are enabled (some packages such as libapache2-mod-fastcgi are not in the main repository).

Add these lines to your /etc/apt/sources.list

# wheezy-updates, previously known as 'volatile'
deb http://ftp.de.debian.org/debian/ wheezy-updates main contrib non-free
deb-src http://ftp.de.debian.org/debian/ wheezy-updates main contrib non-free

Then run command apt-get update then apt-get dist-upgrade worked for me.

Related Solutions

Can’t upgrade libc6 on Debian Wheezy

ok probably found a solution.

first of all go here /lib/x86_64-linux-gnu move these files to /root: libc-2.13.so libdl-2.13.so libm-2.13.so libpthread-2.13.so librt-2.13.so

your versions maybe different already. Then lots of things will stop working, you need to launch bash with predefined LD_PRELOAD:

 LD_PRELOAD=/root/libc-2.13.so:/root/libdl-2.13.so:/root/libm-2.13.so:/root/libpthread-2.13.so:/root/librt-2.13.so bash

after that dist-upgrade works:

apt-get -f dist-upgrade

Debian Wheezy and SUID Perl

Bottom line: If you have no time for this then you need to revert to your pre-upgrade system snapshot/backup until you do have time to migrate to a webmail system that does not recommend use of deprecated technology.

As far as I recall (it's been probably 8 years since I've seen an open webmail install), open webmail reads mail spools directly (hence the need for suid) whereas most webmail systems interact with an IMAP server instead (pushing the need for suid to the mailserver, where it belongs).

As far as I can tell, suidperl was removed in perl 5.12 back in 2008(?) because nobody at the upstream level (ie: above Debian) wanted to maintain it - or in other words, suidperl no longer exists anywhere. The only reason you've been lucky to have it so long is because Debian stable uses fairly old versions of most software (with backported security fixes). It's certainly not Debian's fault that it's no longer in existence.

If you really really want to keep using open webmail on wheezy and newer for some reason, your only option is to follow the Open Webmail FAQ section 4:e (ps, ps) at http://openwebmail.org/openwebmail/doc/faq.txt which states:

  ps: If you don't want to recompile perl, you choose to may use
      misc/tools/suidwrap.pl to generate C wrappers for all suid scripts.

      However, this is not recommended at all, as you will not be able
      to use SpeedyCGI with the openwebmail system.

      Here are the steps:
      1. cd cgi-bin/openwebmail
      2. perl misc/tool/wrapsuid/wrapsuid.pl /fullpath/cgi-bin/openwebmail
      3. change #!/usr/bin/suidperl to the path of your perl

      All suid scripts will be renamed to .scriptname.pl and
      the C wrapper will be generated and named as script.pl
      (thanks to Chris Heegard, heegard.AT.NativeI.com)

      The spellcheck may not work on Solaris when using C wrappers.
      (thanks to Isam Ishaq, isam.AT.planet.edu)

Sorry for the bad news, but sometimes there are no good answers :\

Best Answer

Related Solutions

Can’t upgrade libc6 on Debian Wheezy

Debian Wheezy and SUID Perl

Related Topic