ClamAV issues "squidclamav.el7.x86_64 requires httpd-filesystem"

I’m running:
Kernel Release 3.10.0-1160.90.1.el7.x86_64
Operating System NethServer release 7.9.2009 (final)

For the last two nights, I have been alerted to the following error:

"Failed to build transaction: squidclamav-7.2-4.el7.x86_64 requires httpd-filesystem: "
I have changed nothing in the configs or connections, and I cannot find anything like this in Google. I’m at a loss as to what is causing it. I’m going to reboot the server, ususlly a good first step, but any suggestions on how to fix this would be appreciated.

Thanks

Jim

1 Like

How are you alerted and what do the specific logfile parts say?

Rebooting might erase any forensic evidence…

I found out about the problem because I got an email from root:

“Failed to check for updates with the following error message:
Failed to build transaction: squidclamav-7.2-4.el7.x86_64 requires httpd-filesystem”

That was all it said.

Your point about erasure of forensics by reboot is sensible, but its too late, I have already rebooted :frowning: Sorry!

If it fixes the problem, I will get no email tomorrow, if not I will provide log evidence.

Thanks

Jim

Hello to everyone,
I have the same problem on several netservers.

[root@firewall ~]# yum update
Loaded plugins: changelog, fastestmirror, nethserver_events
Loading mirror speeds from cached hostfile
 * ce-base: mirror.as29550.net
 * ce-extras: mirror.as29550.net
 * ce-sclo-rh: mirror.as29550.net
 * ce-sclo-sclo: mirror.as29550.net
 * ce-updates: mirror.as29550.net
 * epel: mirror1.sox.rs
 * nethforge: mirror.alpix.eu
 * nethserver-base: mirror.alpix.eu
 * nethserver-updates: mirror.alpix.eu
 * stephdl: stephdl.familybrown.org
Resolving Dependencies
--> Running transaction check
---> Package python.x86_64 0:2.7.5-93.el7_9 will be updated
---> Package python.x86_64 0:2.7.5-94.el7_9 will be an update
---> Package python-libs.x86_64 0:2.7.5-93.el7_9 will be updated
---> Package python-libs.x86_64 0:2.7.5-94.el7_9 will be an update
---> Package python3.x86_64 0:3.6.8-19.el7_9 will be updated
---> Package python3.x86_64 0:3.6.8-21.el7_9 will be an update
---> Package python3-libs.x86_64 0:3.6.8-19.el7_9 will be updated
---> Package python3-libs.x86_64 0:3.6.8-21.el7_9 will be an update
---> Package squidclamav.x86_64 0:6.16-2.ns7 will be updated
---> Package squidclamav.x86_64 0:7.2-4.el7 will be an update
--> Processing Dependency: httpd-filesystem for package: squidclamav-7.2-4.el7.x86_64
--> Processing Dependency: libarchive.so.13()(64bit) for package: squidclamav-7.2-4.el7.x86_64
--> Running transaction check
---> Package libarchive.x86_64 0:3.1.2-14.el7_7 will be installed
---> Package squidclamav.x86_64 0:7.2-4.el7 will be an update
--> Processing Dependency: httpd-filesystem for package: squidclamav-7.2-4.el7.x86_64
--> Finished Dependency Resolution
Error: Package: squidclamav-7.2-4.el7.x86_64 (epel)
           Requires: httpd-filesystem
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest
[root@firewall ~]# 

Me too, same here…

OK, I tried “yum update” after my reboot, got exactly the same as ndrosis
Wonder if its anything to do with a recent update applied automatically to the system?
We got a problem, Houston!

Required package is not available on default centos7 repos but on OKey repo (third-party).
If someone wants to try before an official fix from NethServer or upstream EPEL is released (should be EPEL as that where package comes from), it probably will work either by adding the repo and installing the package or even just directly downloading the rpm package and installing it (as it seems to have no exotic dependencies).

wget http://repo.okay.com.mx/centos/7/x86_64/release/httpd-filesystem-2.4.35-5.el7.noarch.rpm
yum install ./httpd-filesystem-2.4.35-5.el7.noarch.rpm
yum update

or adding repo:

yum install http://repo.okay.com.mx/centos/7/x86_64/release/okay-release-1-1.noarch.rpm
yum install httpd-filesystem

You can also manually disable repo afterwards by editing the repo file (replace vi with your prefered editor):

vi /etc/yum.repos.d/okay.repo 

In the [okay] section find enable=1 and change it to enabled=0

Then update as usual:

yum upadte

NOTE: Someone should report the issue upstream… (Redhat/EPEL bugzilla)

I’m not that clever! Two questions:
1: If I wait for the official fix, will the server keep on serving?
2: the alternative approach - can you give instructions (down to command level, told you I’m dumb!) to try the fix you suggest

Thanks
Jim (and others!)

answer completed above

Tried that:
[root@bastion jim]# wget http://repo.okay.com.mx/centos/7/x86_64/release/httpd-filesystem-2.4.35-5.el7.noarch.rpm
–2023-11-17 15:53:55-- http://repo.okay.com.mx/centos/7/x86_64/release/httpd-filesystem-2.4.35-5.el7.noarch.rpm
Resolving repo.okay.com.mx (repo.okay.com.mx)… 208.90.97.3
Connecting to repo.okay.com.mx (repo.okay.com.mx)|208.90.97.3|:80… connected.
HTTP request sent, awaiting response… 200 OK
Length: 184 [text/html]
Saving to: ‘httpd-filesystem-2.4.35-5.el7.noarch.rpm’

100%[======================================>] 184 --.-K/s in 0s

2023-11-17 15:53:55 (18.0 MB/s) - ‘httpd-filesystem-2.4.35-5.el7.noarch.rpm’ saved [184/184]

[root@bastion jim]# yum install ./httpd-filesystem-2.4.35-5.el7.noarch.rpm
Loaded plugins: changelog, fastestmirror, nethserver_events
Cannot open: ./httpd-filesystem-2.4.35-5.el7.noarch.rpm. Skipping.
Error: Nothing to do
[root@bastion jim]# yum update
Loaded plugins: changelog, fastestmirror, nethserver_events
Loading mirror speeds from cached hostfile

    • epel: cdn.centos.no*
    • nethserver-updates: nethserver.de-labrusse.fr*
      Resolving Dependencies
      → Running transaction check
      —> Package python.x86_64 0:2.7.5-93.el7_9 will be updated
      —> Package python.x86_64 0:2.7.5-94.el7_9 will be an update
      —> Package python-libs.x86_64 0:2.7.5-93.el7_9 will be updated
      —> Package python-libs.x86_64 0:2.7.5-94.el7_9 will be an update
      —> Package python3.x86_64 0:3.6.8-19.el7_9 will be updated
      —> Package python3.x86_64 0:3.6.8-21.el7_9 will be an update
      —> Package python3-libs.x86_64 0:3.6.8-19.el7_9 will be updated
      —> Package python3-libs.x86_64 0:3.6.8-21.el7_9 will be an update
      —> Package squidclamav.x86_64 0:6.16-2.ns7 will be updated
      —> Package squidclamav.x86_64 0:7.2-4.el7 will be an update
      → Processing Dependency: httpd-filesystem for package: squidclamav-7.2-4.el7.x86_64
      → Finished Dependency Resolution
      Error: Package: squidclamav-7.2-4.el7.x86_64 (epel)
  •       Requires: httpd-filesystem*
    
  • You could try using --skip-broken to work around the problem*
  • You could try running: rpm -Va --nofiles --nodigest*
    [root@bastion jim]#

The lines:

Cannot open: ./httpd-filesystem-2.4.35-5.el7.noarch.rpm. Skipping.
Error: Nothing to do

look like they tell a story, like ./httpd-filesystem-2.4.35-5.el7.noarch.rpm is there but broken…or am I jumping to conclusions?

corrupted file, try again:
size is 26912 (26K) [application/x-rpm]

if it does not work it could be a redirection issue (download worked fine for me).

I was able to do all the updates this way.
I didn’t want to add the repository because I wanted to stick with the standard as much as possible.
I hope installing the package doesn’t have any negative effects as it may not be patched by Nethserver?

Hi Or this error that I can’t update what should I do to resolve

**Failed to check for updates with the following error message: **
Failed to build transaction: squidclamav-7.2-4.el7.x86_64 requires httpd-filesystem

Guys, I’m being a bit thick. The instrutions don’t work for me, so I took them one at a time:

[root@bastion jim]# yum install http://repo.okay.com.mx/centos/7/x86_64/release/okay-release-1-1.noarch.rpm
Loaded plugins: changelog, fastestmirror, nethserver_events
okay-release-1-1.noarch.rpm | 184 B 00:00
Cannot open: http://repo.okay.com.mx/centos/7/x86_64/release/okay-release-1-1.noarch.rpm. Skipping.
Error: Nothing to do

It looks like nothing was downloaded So I thought I’d be clever and do:

yum install http://repo.okay.com.mx/centos/7/x86_64/release/okay-release-1-1.noarch.rpm

from a browser, to see if it was there, and both my router anti-malware system and Malwarebytes screamed at me that the site had a trojan. So there is certainly something there, but it looks unsafe to my router, which is apparently blocking it…or have I got it completely wrong?

BTW, the router is an Asus RT-AC86U running Merlin firmware, with NordVPN loaded, but the server is running outside the tunnel, which only protects client devices. It has Trend Micro malware detection, which classifies the site like this

I used that repo some years back (for a specific package) and to my knowledge it was trustworthy. If I remember correctly they built an openssl package with more features enabled… do not know if this is related to the warning you got (currently main page and blog seems to be down). There seem to be at some point in time other sibling domains less trustworthy.

Proceed at your own risk. Didn’t read the source package but the rpm only contains empty directories for the httpd filesystem structure.

Howdy,
I think it might be safer to use “–skip-broken” until a formal fix is developed or released.
(Oldtime user here from e-smith, sme, contribs, koozali and now NS7)
I will go on record against adding third party repo’s without dev endorsement.

FTR, my server was having same issue as OP.

HTH,
Joe

Howdy, and welcome!

OKI, further update, got it to update all but the failing item by using --skip-broken so thanks and kudos to all who suggested that.

HOWEVER…I seem to have hit a snag that several others have and dnutan said above

“NOTE: Someone should report the issue upstream… (Redhat/EPEL bugzilla)”

I’ll do it if its not yet done (how do I tell?), is there documentation that shows how to do it?

Thanks

Upstream could well be Nethesis, for the error:

"Failed to build transaction: squidclamav-7.2-4.el7.x86_64 requires httpd-filesystem: "

Seems very specific to Nethserver. At least Google does not show any other results.

1 Like

Now it is reported:
https://bugzilla.redhat.com/show_bug.cgi?id=2250476

For Redhat / Fedora Epel: Bug Writing Guidelines

1 Like