Applicable to:
- Plesk for Linux
Symptoms
The following errors are received by email and when executing the freshclam command on the Plesk server:
CONFIG_TEXT: ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
ERROR: downloadPatch: Can't apply patch
Cause
A ClamAV database is absent in the directory /var/lib/clamav.
Resolution
-
Connect to the server via SSH.
-
Check the databases available:
# ls -la /var/lib/clamav/*.cvd
Note: There should be 3 files:
bytecode.cvddaily.cvdmain.cvd -
Download the missing database using the native ClamAV utility:
# freshclam
-
If the utility shows error and the required database is still absent, download the absent file from the link http://database.clamav.net/<database_name>.cvd (i.e. http://database.clamav.net/daily.cvd) and upload it on the server.
Note: using
wgetutility to download the database may result in error 403. If it appears try downloading the database to your local PC first and then transfer it to the server, e.g. by using FTP client. -
Set the proper permissions:
# chown clamupdate:clamupdate /var/lib/clamav/daily.cvd
# chmod 0644 /var/lib/clamav/daily.cvd
Comments
2 comments
We get this every day with a brand new PES installation on a brand new Plesk server with the following reasons:
ClamAV update process started at Mon Aug 9 21:54:32 2021
WARNING: FreshClam previously received error code 429 from the ClamAV Content Delivery Network (CDN).
This means that you have been rate limited by the CDN.
WARNING: You are still on cool-down until after: [date / time]
Rather odd for a new server with its own static public ip.
EDIT: looking at the our emails, it appears clamav as configured out of the box checks every six hours exactly.
A statement found here: https://www.mail-archive.com/clamav-users@lists.clamav.net/msg49810.html says
Maybe Plesk can adjust it to less frequent checking.
Having a new server running Plesk with a new PES with this issue isn't a nice experience.
Hello @TomBob,
It appears that the issue you've faced is a little bit different than in this article and it's on the ClamAV side. Please check if the issue persists in the next few days.
Please sign in to leave a comment.