clamd and clamav fail after updating to 11.98.0.4

After updating from 11.96.0.15 to 11.98.0.4 this morning - clamd and clamav are down on my servers :( Notification The service "clamav" appears to be down. Service Check Method The system"s command to check or to restart this service failed. Notification The service "clamd" appears to be down. Service Check Method The system"s command to check or to restart this service failed. Excerpt from usr/local/cpanel/logs/error_log:


[2021-08-14 10:13:58 -0400] warn [restartsrv_clamd] The system encountered an error while starting the "clamd" service with the command "/usr/local/cpanel/3rdparty/bin/clamd": The subprocess reported error number 127 when it ended. at /usr/local/cpanel/Cpanel/ServiceManager/Base.pm line 1495.
        Cpanel::ServiceManager::Base::warn(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838), "The system encountered an error while starting the \x{e2}\x{80}\x{9c}clamd\x{e2}\x{80}"...) called at /usr/local/cpanel/Cpanel/ServiceManager/Manager/Initd.pm line 101
        Cpanel::ServiceManager::Manager::Initd::start(Cpanel::ServiceManager::Manager::Initd=HASH(0x30208a0), Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838)) called at /usr/local/cpanel/Cpanel/ServiceManager/Base.pm line 932
        Cpanel::ServiceManager::Base::start(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838)) called at /usr/local/cpanel/Cpanel/ServiceManager/Services/Clamd.pm line 67
        Cpanel::ServiceManager::Services::Clamd::restart(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838), "graceful", undef) called at /usr/local/cpanel/Cpanel/ServiceManager/Base.pm line 596
        Cpanel::ServiceManager::Base::run_from_argv(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838), "--verbose", "--no-verbose") called at bin/restartsrv_base.pl line 144
        scripts::restartsrv_base::__ANON__() called at /usr/local/cpanel/3rdparty/perl/532/lib/perl5/cpanel_lib/Try/Tiny.pm line 100
        eval {...} called at /usr/local/cpanel/3rdparty/perl/532/lib/perl5/cpanel_lib/Try/Tiny.pm line 91
        Try::Tiny::try(CODE(0x2fb67f0), Try::Tiny::Catch=REF(0xd9b9c8)) called at bin/restartsrv_base.pl line 188
        scripts::restartsrv_base::run("--no-verbose") called at bin/restartsrv_base.pl line 80

And this command that I run daily - /usr/local/cpanel/3rdparty/bin/freshclam - which normally at least shows definition updates despite
My inbox is flooding with "The service "clamav" appears to be down" and "The service "clamd" appears to be down" notices. I've tried restarting several services and also re-ran upcp, nothing works. Anyone else encountering this? Feels rather urgent and I could use some help please, thank you.

Metro2

August 14, 2021 15:59

Service Check Raw Output (XID r2t9wu) The "clamd" service is down. The subprocess "/usr/local/cpanel/scripts/restartsrv_clamd" reported error number 255 when it ended. Startup Log /usr/local/cpanel/3rdparty/bin/clamd: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory

August 14, 2021 16:23

@cPJeremy since I can see you're online right now, I'm hoping this might ping you and draw your attention to it. Can you possibly assist?

August 14, 2021 18:15

I submitted a ticket and many thanks to cPanel support this is solved! Just in case this helps anyone else: As it turns out this was a known issue that was supposed to be resolved in a CloudLinux update last month, and here's the solution -

ankeshanand

August 14, 2021 18:19

I didn't saw your Thread in "Whats New" and thats why Unable to respond. Glad that its sorted out! :-D

cPRex Jurassic Moderator

August 16, 2021 12:25

I'm glad we could help get that working!

August 16, 2021 12:50

Me too! Having ClamAV not working = CXS not working, and CXS is integral (for me anyway) as one it's major functions that I rely on is the way it blocks / quarantines the attempted uploads of malicious files and plays a major role in preventing exploits on PHP scripts such as WordPress etc... so it was a tense 2 hours. Thankfully a cPanel support analyst picked up my ticket quickly and knew the exact problem & solution!

bharmsen1

August 19, 2021 14:16

I tried the solution provided, and this was the result:

Loaded plugins: fastestmirror, security, universal-hooks

Error getting repository data for cloudlinux-rollout-1-bypass, repository not found

I'm on CLOUDLINUX 6.10 kvm [server] v98.0.5. While I do manage my own VPS via a web host, I'm admittedly a person who usually needs to follow guides and search for solutions when encountering these sorts of bumps in the road. Any help would be greatly appreciated.

August 19, 2021 14:52

@bharmsen1 - you can find additional details about the bypass repository system here:

clamd and clamav fail after updating to 11.98.0.4

Comments

Didn't find what you were looking for?