[UCSN-1] ClamAV update

[Lawrence Houston]

Ubuntu USERS:

On Fri, 5 Mar 2010, Jamie Strandboge wrote:

> =====================================================================
> Ubuntu Community Security Notice UCSN-1                March 05, 2010
> clamav update
> https://launchpad.net/bugs/532698
> =====================================================================
>
> A security issue affects community supported software in the
> following Ubuntu releases:
>
> Ubuntu 8.04 LTS
>
> This advisory also applies to the corresponding versions of
> Kubuntu, Edubuntu, and Xubuntu.
>
> The problem can be corrected by upgrading your system to the
> following package versions:
>
> Ubuntu 8.04 LTS:
>  clamav                          0.95.3+dfsg-1ubuntu0.09.04~hardy2.2
>
> In general, a standard system upgrade is sufficient to effect the
> necessary changes.
>
> Details follow:
>
> Upstream ClamAV announced that the end of life for ClamAV versions 0.94
> and earlier to be April 15, 2010. To properly support users of ClamAV
> in Ubuntu 8.04 LTS, this maintenance release upgrades ClamAV to 0.95.3.
>
> Prepared by: Scott Kitterman and Imre Gergely
> References: http://www.clamav.net/2009/10/05/eol-clamav-094/

Under Ubuntu 8.04 I had been running ClamAV's Milter with Sendmail. 
Although after Upgrading to ClamAV (0.95.3+dfsg-1ubuntu0.09.04~hardy2.2) 
Sendmail is NO longer processing its Mail Queue and the following Error 
Messages are being logged:

    Milter: data, reject=451 4.3.2 Please try again later

My Additions to sendmail.mc were as follows:

    INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clamav/clamav-milter.ctl, F=, T=S:4m;R:4m')dnl
    define(`confINPUT_MAIL_FILTERS', `clmilter')

My Original Addition to /etc/default/clamav-milter was:

    OPTIONS="--quarantine=virus -olHP"

Permissions on /var/run/clamav were as follows:

    drwxr-xr-x  2 clamav     clamav      100 2010-03-06 19:08 clamav

The Group was adjusted to match a "Clean" Installation:

    drwxr-xr-x  2 clamav     root        100 2010-03-06 19:08 clamav

I tried following second addition to /etc/default/clamav-milter to make 
ClamAV's Socket Read/Write:

    SOCKET_RWGROUP=clamav

Although has NOT correct my "Problem"...

Currently I am running Sendmail without the ClamAV Milter, which is NOT 
"Ideal"!!!

Are there other modification to the Sendmail/ClamAV Milter configurations 
which have to be made with ClamAV 0.95.3 or is there a "Problem" with this 
Release???

Lawrence Houston -- (ubuntu at greenfield.dyndns.org)