[Pkg-clamav-devel] Bug#761162: clamav-unofficial-sigs: Cron job results spread onto mail and logs

[Alessandro Vesely]

Package: clamav-unofficial-sigs
Version: 3.7.1-3
Severity: normal

Dear Maintainer,
this bug is different from bug #704656, albeit similar:
The issue here is the output of curl not redirected,
rather than the output of clamscan not being redirected.

I frequently receive mail to clamav@`hostname` from the
Cron Daemon, saying "curl: (28) connect() timed out!",
one or more times.  Perhaps, that recipient address
should be configurable.

Looking at the log file, I find corresponding lines:
Sep 11 02:52:07 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfodos.hdb update
Sep 11 02:52:22 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfoelf.hdb update
Sep 11 02:52:37 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfo.hdb update

The above results from standard package installation.

The missing info is how severe those warnings are.
When have those files been last updated?

Note that there are other files downloaded from the
same host.  So connect() fails intermittently.  The
page at http://sanesecurity.com/donate/ says one can
get a better url by paying for the service.  However,
shell variable si_url is hardcoded in clamav-unofficial-
sigs.sh.  Perhaps, making it configurable may encourage
donations.  In fact, it is not clear whether that host
is managed by Sanesecurity or SecuriteInfo.

Thank you
Ale

-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.51ale22 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages clamav-unofficial-sigs depends on:
ii  bind9-host [host]  1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  clamav             0.98.4+dfsg-0+deb7u2
ii  curl               7.26.0-1+wheezy9
ii  dnsutils           1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  gnupg              1.4.12-7+deb7u4
ii  rsync              3.0.9-4

clamav-unofficial-sigs recommends no packages.

Versions of packages clamav-unofficial-sigs suggests:
pn  clamav-daemon  <none>

-- no debconf information