From: Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 14850750 for ecs-isp@2rosenthals.com; Mon, 10 Nov 2025 19:57:19 -0500 Received: from [192.168.200.201] (port=59641 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.98.2) (envelope-from ) id 1vIch4-000000005WZ-1fdo for ecs-isp@2rosenthals.com; Mon, 10 Nov 2025 19:57:12 -0500 Received: from mail2.quasarbbs.net ([80.86.52.115]:10029) by mail2.2rosenthals.com with esmtp (Exim 4.98.2) (envelope-from ) id 1vIcgy-000000001W8-1ylK for ecs-isp@2rosenthals.com; Mon, 10 Nov 2025 19:57:06 -0500 X-SASI-Hits: BODYTEXTH_SIZE_10000_LESS 0.000000, BODYTEXTH_SIZE_3000_MORE 0.000000, BODY_SIZE_9000_9999 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HREF_LABEL_TEXT_ONLY 0.000000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_REAL_NAME 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __ATTACH_CTE_7BIT 0.000000, __ATTACH_CTE_QUOTED_PRINTABLE 0.000000, __BODY_TEXT_X4 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTYPE_HAS_BOUNDARY 0.000000, __CTYPE_MULTIPART 0.000000, __CTYPE_MULTIPART_ALT 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_HTML 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HIGHBIT_ASCII_MIX 0.000000, __HREF_LABEL_TEXT 0.000000, __HREF_LABEL_URI 0.000000, __HTML_AHREF_TAG 0.000000, __HTML_ENTITIES_X4 0.000000, __HTML_HREF_TAG_X2 0.000000, __HTML_TAG_DIV 0.000000, __HTTPS_URI 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_HTML 0.000000, __MIME_TEXT_H 0.000000, __MIME_TEXT_H1 0.000000, __MIME_TEXT_H2 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_TEXT_P2 0.000000, __MIME_VERSION 0.000000, __MSGID_32HEX 0.000000, __MULTIPLE_URI_HTML 0.000000, __MULTIPLE_URI_TEXT 0.000000, __PART_TYPE_HTML 0.000000, __PHISH_PHRASE1_A 0.000000, __RCVD_FROM_DOMAIN 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TAG_EXISTS_BODY 0.000000, __TAG_EXISTS_HEAD 0.000000, __TAG_EXISTS_HTML 0.000000, __TAG_EXISTS_META 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_HAS_HYPHEN_USC 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __WEBINAR_PHRASE 0.000000 X-SASI-Probability: 9% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.11.11.2719 X-SASI-Hits: BODYTEXTH_SIZE_10000_LESS 0.000000, BODYTEXTH_SIZE_3000_MORE 0.000000, BODY_SIZE_9000_9999 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HREF_LABEL_TEXT_ONLY 0.000000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_REAL_NAME 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __ATTACH_CTE_7BIT 0.000000, __ATTACH_CTE_QUOTED_PRINTABLE 0.000000, __BODY_TEXT_X4 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTYPE_HAS_BOUNDARY 0.000000, __CTYPE_MULTIPART 0.000000, __CTYPE_MULTIPART_ALT 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_HTML 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HIGHBIT_ASCII_MIX 0.000000, __HREF_LABEL_TEXT 0.000000, __HREF_LABEL_URI 0.000000, __HTML_AHREF_TAG 0.000000, __HTML_ENTITIES_X4 0.000000, __HTML_HREF_TAG_X2 0.000000, __HTML_TAG_DIV 0.000000, __HTTPS_URI 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_HTML 0.000000, __MIME_TEXT_H 0.000000, __MIME_TEXT_H1 0.000000, __MIME_TEXT_H2 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_TEXT_P2 0.000000, __MIME_VERSION 0.000000, __MSGID_32HEX 0.000000, __MULTIPLE_URI_HTML 0.000000, __MULTIPLE_URI_TEXT 0.000000, __PART_TYPE_HTML 0.000000, __PHISH_PHRASE1_A 0.000000, __RCVD_FROM_DOMAIN 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TAG_EXISTS_BODY 0.000000, __TAG_EXISTS_HEAD 0.000000, __TAG_EXISTS_HTML 0.000000, __TAG_EXISTS_META 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_HAS_HYPHEN_USC 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __WEBINAR_PHRASE 0.000000 X-SASI-Probability: 9% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.11.11.2719 DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=default; d=ecomstation.it; bh=XdsEhxRRGlVZprkrehDzrDo4z45rKU+F+P77QD3bQ/E=; h=Return-Path:From:To:Subject:Date:Message-ID; b=UlqJEvgMODCDxajvx2W/awrqrQDSSscYcYHRY0vgRm7wYCJlbEpDC2tMYPkvmxUm5ZeZm BroeqnCQish4QfAoRbg8agF/VopxUtHkYZKfoNfG9DxB/W5oXWkO0TZBA7Dcc5qJTwmK+uf /BVdyaWJRpg4vLlhd5ZgA7suuQMDeSVsq50q4/71haENgqGxyrvKODLSC8NLhUcknw0tBjc RSwP+VqGPNOElBxnWmwx9OaxDNmwx0l1rc6g1iUbyDZw/xUZ1jGYO5bkBsNOv4fVEgnRMBk ErgSWiKHB3RQdHx+pD9UNTLw03VLPpMiaT6vXn++bp1QOo+h/PhgeF7svWwQ== Received: from webmail2.ecomstation.it ([192.168.10.2] [192.168.10.2]) by srv2 (Weasel v3.092) for ; Tue, 11 Nov 2025 01:57:00 -0000 MIME-Version: 1.0 Date: Tue, 11 Nov 2025 01:57:02 +0100 To: eCS ISP Mailing List Subject: Re: [eCS-ISP] ClamAV 0.103.10 out-of-date In-Reply-To: References: Message-ID: X-Sender: ml@ecomstation.it Content-Type: multipart/alternative; boundary="=_85e221a78e86a03043d5bc0fb6aaf1b9" --=_85e221a78e86a03043d5bc0fb6aaf1b9 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed This post is a copy and paste from the other ML These are nor words of mine Massimo Il 2025-11-10 14:27 Massimo S. ha scritto: > I add: > > https://gitweb.gentoo.org/repo/gentoo.git/tree/app-antivirus/clamav/files > > you should see several patches for clamav-0.103.12. Some are security > fixes (that you should apply, too), but the impersonate-user-agent one > in particular will have freshclam fake its user-agent to re-enable > signature updates. > > massimo > > Il 10/11/2025 12:40, Massimo S. ha scritto: > > Il 09/11/2025 00:38, Steven Levine ha scritto: In > , on 11/09/25 > at 06:32 AM, "Paul Smedley" said: > > Hi all, > > Que Sera.... As I mentioned years ago - 0.103.x is the last version > that > doesn't use rust code. It is what it is.... > While it is theoretically possible to build a modified version of > 0.103.10 > that could download the 1.0.9 database files, there's no way to know if > your 0.103.10 could load and use them. > > In addition, the log messages you posted do not match what's in the > code. > Without a full, unedited set of log files for the failed download > attempts, there's no way to guess if it's even worth the effort to > think > about implementing a modified version. > > Steven From ClamAV ML: [.. On Mon, 10 Nov 2025, Massimo S. via clamav-users wrote: > version 0.103.10 is outdated, of course. > But it's the last build that do not use Rust as development platform. > > And this is the last build available ported to AOS and eCS that are > modern OS/2 distros. Since 30th September 2025 freshclam do not > update anymore the signatures on these OSs. > > I'm asking to developers if it's possible to let v. 0.103.10 > (OS/2-AOS-eCS) to let downlod signatures, since it's very hard > (maybe impossible) to port latest ClamAV versions developed with > Rust to this 32bit OS. > > Or possibly to public an updated signatures DB compatible with the 0.103.10 build. I doubt that it matters whether freshclam and clamav are the same version; just use a modern freshclam to update your signatures. ..] Maybe we could try to port only freshclam, or to modify the version in 0.103.10 build so that the server repository believe that it's the last build. massimo =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to To subscribe (new addresses), E-mail to: and reply to the confirmation email. Web archives are publicly available at: http://lists.2rosenthals.com This list is hosted by Rosenthal & Rosenthal, LLC P.O. Box 281, Deer Park, NY 11729-0281. Non- electronic communications related to content contained in these messages should be directed to the above address. (CAN-SPAM Act of 2003) =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= --=_85e221a78e86a03043d5bc0fb6aaf1b9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=UTF-8

This post is a copy and paste from the other ML

These are nor words of mine 

Massimo

 

Il 2025-11-10 14:27 Massimo S. ha scritto:

= I add:


   https://gitweb.gentoo.org/repo/gentoo.git/tree/app= -antivirus/clamav/files

you should see several patches for c= lamav-0.103.12. Some are security
fixes (that you should apply, too), = but the impersonate-user-agent one
in particular will have freshclam f= ake its user-agent to re-enable
signature updates.

massimo<= br />
Il 10/11/2025 12:40, Massimo S. ha scritto:


Il 09/11/2025 00:38, Steven Levine ha scri= tto:
In <list-14830108@2rosenthals.com>, on 11/09/25
   = ; at 06:32 AM, "Paul Smedley" <ecs-isp@2rosenthals.com> said:

Hi all,

Que Sera.... As I mentioned years ago - 0.103.x is the= last version that
doesn't use rust code. It is what it is....
While it is theoretically possible to build a modified version of 0.1= 03.10
that could download the 1.0.9 database files, there's no way to = know if
your 0.103.10 could load and use them.

In addition,= the log messages you posted do not match what's in the code.
Without = a full, unedited set of log files for the failed download
attempts, th= ere's no way to guess if it's even worth the effort to think
about imp= lementing a modified version.

Steven

 From ClamAV ML:

[..

On Mon, 10 Nov 2025, = Massimo S. via clamav-users wrote:

 > version 0.103.10 i= s outdated, of course.
 > But it's the last build that do not = use Rust as development platform.
 >
 > And this = is the last build available ported to AOS and eCS that are
 > = modern OS/2 distros.  Since 30th September 2025 freshclam do not
=  > update anymore the signatures on these OSs.
 >
 > I'm asking to developers if it's possible to let v. 0.103.10 > (OS/2-AOS-eCS) to let downlod signatures, since it's very har= d
 > (maybe impossible) to port latest ClamAV versions develop= ed with
 > Rust to this 32bit OS.
 >
 &= gt; Or possibly to public an updated signatures DB compatible with the 0.10= 3.10 build.

I doubt that it matters whether freshclam and clamav= are the same version;
just use a modern freshclam to update your sign= atures.

..]




Maybe we could try to p= ort only freshclam, or to modify the version in 0.103.10 build
so that= the server repository believe that it's the last build.


m= assimo

=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-= =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D
This m= essage is sent to you because you are subscribed to
  the ma= iling list <ecs-isp@2rosentha= ls.com>.
To unsubscribe, E-mail to: <ecs-isp-off@2rosenthals.com>
To switch = to the DIGEST mode, E-mail to <ecs-isp-digest@2rosenthals.com>
To switch to the INDEX= mode, E-mail to <ecs-i= sp-index@2rosenthals.com>
Send administrative queries to  = <ecs-isp-request@2ros= enthals.com>
To subscribe (new addresses), E-mail to: <ecs-isp-on@2rosenthals.com>= and reply to the confirmation email.
Web archives are publicly availa= ble at: http://lists.2rosenthals.com

This list i= s hosted by Rosenthal & Rosenthal, LLC
P.O. Box 281, Deer Park, NY= 11729-0281. Non-
electronic communications related to content
co= ntained in these messages should be directed
to the above address. (CA= N-SPAM Act of 2003)

=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-= =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D= -=3D-=3D-=3D


--=_85e221a78e86a03043d5bc0fb6aaf1b9--