Duplicate clamav database issue


(Steve Jones) #1

This started after an update February First;
clamav-server-systemd-0.99.3-1.el7.noarch
clamav-filesystem-0.99.3-1.el7.noarch

This is the first I’ve noticed this issue; Logwatch reporting:

Virus database reloaded 20 time(s) (last time with 6551393 viruses)

Unmatched Entries
LibClamAV Warning: Detected duplicate databases /var/lib/clamav/bytecode.cvd and /var/lib/clamav/bytecode.cld, please manually remove one of them
LibClamAV Warning: Detected duplicate databases /var/lib/clamav/main.cvd and /var/lib/clamav/main.cld, please manually remove one of them

Manually deleting things in /var/lib/ just seems like a ‘Bad Thing’.

[root@home clamav]# ls -l bytecode.c* main.c*
-rw-r–r-- 1 clamupdate clamupdate 766976 Dec 15 00:05 bytecode.cld
-rw-r–r-- 1 clamupdate clamupdate 153228 Jan 8 19:24 bytecode.cvd
-rw-r–r-- 1 clamupdate clamupdate 307499008 Dec 15 00:04 main.cld
-rw-r–r-- 1 clamupdate clamupdate 117892267 Jan 8 19:28 main.cvd
[root@home clamav]# file bytecode.c* main.c*
bytecode.cld: Clam AntiVirus database 06 Dec 2017 21-17 -0500, version 319
bytecode.cvd: Clam AntiVirus database 06 Dec 2017 21-17 -0500, version 319, gzipped
main.cld: Clam AntiVirus database 07 Jun 2017 17-38 -0400, version 58
main.cvd: Clam AntiVirus database 07 Jun 2017 17-38 -0400, version 58, gzipped

Since the versions of the files seem to be the same, it appears the older files are the .cld versions

I’m not sure how to handle this properly.


(Filippo Carletti) #2

You can safely delete the cld files.
Unfortunately, clamav is packaged in a way that you are required to download a big obsolete database with every release.
See https://bugzilla.redhat.com/show_bug.cgi?id=1018316 for more details.


(Davide Principi) #3

Recently I met the yum swap command. Could be

 yum swap clamav-data clamav-data-empty

(Filippo Carletti) #4

We had problems with clamav-data-empty when @stephdl worked on nethserver-clamav. I don’t remember the problem, though.


(Stéphane de Labrusse) #5

clamav-data conflicts clamav-data-empty and vice versa IIRC


(Steve Jones) #6

Thank you!
No errors in Logwatch this morning, all appears to be well.
Absolutely wonderful community, and amazing collection of software!