Kees, Andy,

You're correct that it is legitimate mis-behavior.  This is my fault.  I just 
sent an explanation as a response to the 0.99.4 blog announcement thread 
explaining the source of the issue.

Sorry for the trouble,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.



On Mar 9, 2018, at 12:33 PM, Andy Schmidt 
<andy_schm...@hm-software.com<mailto:andy_schm...@hm-software.com>> wrote:

Hi Kees,

Thanks for "comparing notes" - that was helpful. I have thus changed the
subject line of this threat to better reflect that this problem might be
specific to their official Windows build, as this has been a possible common
factor among those who reported it.

To answer your question:

With 0.99.2 the version string had been:
clamscan --version
ClamAV 0.99.2/24359/Sat Mar 03 04:14:20 2018

With 0.99.4 the format of the version string did INDEED change to:
clamscan --version
ClamAV clamav-0.99.4/24377/Fri Mar 09 04:13:20 2018

clamdscan --version
ClamAV clamav-0.99.4/24377/Fri Mar 09 04:13:20 2018


So this could very well explain the current misleading error message:

Sat Mar 03 12:29:38 2018 -> freshclam daemon clamav-0.99.4 (OS: win32, ARCH:
x86_64, CPU: x86_64)
...
Fri Mar 09 11:59:03 2018 -> ClamAV update process started at Fri Mar 09
11:59:03 2018
Fri Mar 09 11:59:03 2018 -> WARNING: Your ClamAV installation is OUTDATED!
Fri Mar 09 11:59:03 2018 -> WARNING: Local version: clamav-0.99.4
Recommended version: 0.99.4


For comparison, with 0.99.2 the format of that same (but contextually valid)
error message had instead been:

Sat Mar 03 12:23:23 2018 -> ClamAV update process started at Sat Mar 03
12:23:23 2018
Sat Mar 03 12:23:23 2018 -> WARNING: Your ClamAV installation is OUTDATED!
Sat Mar 03 12:23:23 2018 -> WARNING: Local version: 0.99.2 Recommended
version: 0.99.4


I still maintain that this is a legitimate mention of a misbehavior by the
original reporter, while I had been sitting back and let someone else take
the heat for daring to suggest that this message clearly was not "as
intended".

Best Regards
Andy

-----Original Message-----
From: Kees Theunissen 
<c.j.theunis...@differ.nl<mailto:c.j.theunis...@differ.nl>>
Sent: Friday, March 9, 2018 9:44 AM
To: ClamAV users ML 
<clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>>
Subject: Re: [clamav-users] ClamAVR blog: ClamAV 0.99.4 has been released!

On Thu, 8 Mar 2018, Andy Schmidt wrote:

Nah, Brian, in this case it's actually a bug, albeit a "cosmetic" one.
I have been getting the same misleading error message on every system
ever since I upgraded to 0.99.4 - so I suspect many, if not all others,
have too:

Thu Mar 08 11:46:31 2018 -> WARNING: Local version: clamav-0.99.4
Recommended version: 0.99.4

I only saw messages like
 Mar  7 16:41:18 pcict9 freshclam[1311]: Local version: 0.99.3
 Recommended version: 0.99.4
Until I upgraded to a locally compiled 0.99.4 package. After that I didn't
see such warnings anymore -- as expected.


So, thanks Brian, for being the one reporting it. I had "let it slide"
though, given that they had just hoped to have fixed that same error
last weekend, when FreshClam thought that even 0.99.3 was recommended
instead of an already installed 0.99.4.

Clearly there is some imperfect comparison being performed prior to
issuing this message, when even identical "local" vs. "recommended"
versions are evaluated as "not equal".

The version strings "clamav-0.99.4" and "0.99.4" are not identical.
The package that you installed seems to have been built with a wrong version
string (including the phrase "clamav-").
How is your version shown by commands like "freshclam --version"
or "clamscan --version"?

~$ freshclam --version
ClamAV 0.99.4/24377/Fri Mar  9 10:13:20 2018 ~$ clamscan --version ClamAV
0.99.4/24377/Fri Mar  9 10:13:20 2018

In your case I would expect somthing like:
ClamAV clamav-0.99.4/24377/Fri Mar  9 10:13:20 2018


Regards,

Kees Theunissen.




_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to