#1064955 doppelstern.hdb removed from sanesecurity databases, cron mailing every hour

#1064955#5
Date:
2024-02-28 09:52:11 UTC
From:
To:
Package: clamav-unofficial-sigs
Version: 3.7.2-2.1

the database doppelstern.hdb was removed as reported by sanesecurity.
This results into error mail from cron reporting:

Subject: Cron <clamav@mail> [ -x /usr/sbin/clamav-unofficial-sigs ] && /usr/sbin/clamav-unofficial-sigs

Sanesecurity GPG Signature test FAILED on doppelstern.hdb database - SKIPPING

the file contains:

3b583df09ec829197e03819fddf45f84:180:Doppelstern.hdb.Is.Dead.RIP


Please remove the doppelstern.hdb from clamav-unofficial-sigs.conf,
installed as:
/usr/share/clamav-unofficial-sigs/conf.d/00-clamav-unofficial-sigs.conf

I am attaching patch to do that.

The intermediate workaround it to put into /etc/clamav-unofficial-sigs.conf

ss_dbs="
   blurl.ndb
   junk.ndb
   jurlbl.ndb
   phish.ndb
   rogue.hdb
   sanesecurity.ftm
   scam.ndb
   sigwhitelist.ign2
   spamattach.hdb
   spamimg.hdb
   winnow.attachments.hdb
   winnow_bad_cw.hdb
   winnow_extended_malware.hdb
   winnow_malware.hdb
   winnow_malware_links.ndb
   bofhland_cracked_URL.ndb
   bofhland_malware_attach.hdb
   bofhland_malware_URL.ndb
   bofhland_phishing_URL.ndb
   crdfam.clamav.hdb
   phishtank.ndb
   porcupine.ndb
"

#1064955#10
Date:
2024-03-04 08:13:50 UTC
From:
To:
Hello

and just for the record: the clamav signature file was apparently
updated (the previous version had a trailing newline) but not the gpg
signature. I contacted sanesecurity about it and they fixed the gpg
signature.

Cheers