Tex Live Utility fails to update - appears that virus is found in babel-latin 3.5?

[mouse07410]

Mac OS X 10.10.5 Yosemite. Latest CTAN MacTeX, and TeX Live Utility 1.23.

Here's what the log says:

2015-10-19 16:51:39 +0000 Notice tlu_ipctask[12362] Updating collection-publishers
2015-10-19 16:51:40 +0000 Notice tlu_ipctask[12362] Updating collection-science
2015-10-19 16:51:41 +0000 Notice tlu_ipctask[12362] Updating collection-xetex
2015-10-19 16:51:42 +0000 Warning tlu_ipctask[12362]    tlmgr: action update returned a warning.
2015-10-19 16:51:42 +0000 Warning tlu_ipctask[12362]    tlmgr: package log updated: /usr/local/texlive/2015/texmf-var/web2c/tlmgr.log
2015-10-19 16:51:42 +0000 Warning tlu_ipctask[12362]    running mktexlsr ...
2015-10-19 16:51:42 +0000 Notice tlu_ipctask[12362] Installation complete; reconfiguring TeX Live
2015-10-19 16:51:44 +0000 Warning tlu_ipctask[12362]    done running mktexlsr.
2015-10-19 16:51:44 +0000 Warning tlu_ipctask[12362]    running mtxrun --generate ...
2015-10-19 16:51:54 +0000 Warning tlu_ipctask[12362]    done running mtxrun --generate.
2015-10-19 16:51:54 +0000 Warning tlu_ipctask[12362]    running updmap-sys ...
2015-10-19 16:52:01 +0000 Warning tlu_ipctask[12362]    done running updmap-sys.
2015-10-19 16:52:01 +0000 Warning tlu_ipctask[12362]    regenerating fmtutil.cnf in /usr/local/texlive/2015/texmf-dist
2015-10-19 16:52:01 +0000 Warning tlu_ipctask[12362]    running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine pdftex ...
2015-10-19 16:52:24 +0000 Warning tlu_ipctask[12362]    done running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine pdftex.
2015-10-19 16:52:24 +0000 Warning tlu_ipctask[12362]    running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine ptex ...
2015-10-19 16:52:26 +0000 Warning tlu_ipctask[12362]    done running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine ptex.
2015-10-19 16:52:26 +0000 Warning tlu_ipctask[12362]    running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine luatex ...
2015-10-19 16:52:32 +0000 Warning tlu_ipctask[12362]    done running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine luatex.
2015-10-19 16:52:32 +0000 Warning tlu_ipctask[12362]    running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine aleph ...
2015-10-19 16:52:33 +0000 Warning tlu_ipctask[12362]    done running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine aleph.
2015-10-19 16:52:33 +0000 Warning tlu_ipctask[12362]    running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine eptex ...
2015-10-19 16:52:36 +0000 Warning tlu_ipctask[12362]    done running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine eptex.
2015-10-19 16:52:36 +0000 Warning tlu_ipctask[12362]    running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine luajittex ...
2015-10-19 16:52:38 +0000 Warning tlu_ipctask[12362]    done running fmtutil-sys --no-error-if-no-engine=luajittex --no-error-if-no-format --byengine luajittex.
2015-10-19 16:52:38 +0000 Notice -[TLMAuthorizedOperation _runUntilChildExit][12178]    kqueue noted that pid 12363 exited (/usr/texbin/tlmgr --repository http://mirror.unl.edu/ctan/systems/texlive/tlnet/ --machine-readable --persistent-downloads update --all)
2015-10-19 16:52:38 +0000 Notice tlu_ipctask[12362] child process pid = 12363 exited
2015-10-19 16:52:39 +0000 Error tlu_ipctask[12362]  Value of errno is Operation not permitted
2015-10-19 16:52:39 +0000 Error tlu_ipctask[12362]  *** ERROR *** exit status of pid = 12363 was 1

Here's what my manual attempt produces:

$ sudo /usr/texbin/tlmgr --repository http://mirror.unl.edu/ctan/systems/texlive/tlnet/ --machine-readable --persistent-downloads update --all
Password:
location-url    http://mirror.unl.edu/ctan/systems/texlive/tlnet/
tlmgr: package repository http://mirror.unl.edu/ctan/systems/texlive/tlnet/
total-bytes     172420
end-of-header
babel-latin     u       34389   38173   172420  ??:??   ??:??   -       3.0     3.5
Downloading 
   http://mirror.unl.edu/ctan/systems/texlive/tlnet/archive/babel-latin.doc.tar.xz
did not succeed, please retry.
TLPDB::_install_package: couldn't unpack http://mirror.unl.edu/ctan/systems/texlive/tlnet/archive/babel-latin.doc.tar.xz to /usr/local/texlive/2015/texmf-dist

Installation of new version of babel-latin did fail, trying to unwind.
Restoring old package state succeeded.
end-of-updates
tlmgr: action update returned a warning.
tlmgr: package log updated: /usr/local/texlive/2015/texmf-var/web2c/tlmgr.log
running mktexlsr ...
done running mktexlsr.
running mtxrun --generate ...
done running mtxrun --generate.

And the details of the problem:

$ wget http://mirror.unl.edu/ctan/systems/texlive/tlnet/archive/babel-latin.doc.tar.xz
--2015-10-19 13:04:08--  http://mirror.unl.edu/ctan/systems/texlive/tlnet/archive/babel-latin.doc.tar.xz
Resolving llproxy................... xxx.xxx.xxx.xxx
Connecting to llproxy.........................  xxx.xxx.xxx.xxx:8080... connected.
Proxy request sent, awaiting response... 403 VirusFound
2015-10-19 13:04:09 ERROR 403: VirusFound.

$ wget http://tug.ctan.org/tex-archive/systems/texlive/tlnet/archive/babel-latin.doc.tar.xz
--2015-10-19 13:11:16--  http://tug.ctan.org/tex-archive/systems/texlive/tlnet/archive/babel-latin.doc.tar.xz
Resolving llproxy. ......................
Connecting to llproxy ............................:8080... connected.
Proxy request sent, awaiting response... 403 VirusFound
2015-10-19 13:11:16 ERROR 403: VirusFound.

[amaxwell]

I have no idea what's going on here; maybe @norbusan can shed some light on it. It looks as if you connect through a proxy that does some kind of virus scanning, and thinks it found something in that xz archive.

[mouse07410]

It looks as if you connect through a proxy that does some kind of virus scanning, and thinks it found something in that xz archive.

Precisely so.

But somebody is in charge of babel-latin.doc.tar.xz file, and presumably can do something about it? Either there's some weird sequence of bytes in that file that triggers a false alarm in antivirus, or the file got infected somehow - in which case it should be repaired...?

[amaxwell]

False positives from virus scanners are not uncommon with TeX Live, unfortunately, but you could post this to the texlive@tug.org mailing list. I don't have a way to check this myself.

The only part of this which is relevant to TLU is that tlmgr appears to be using EPERM to signify arbitrary failures like this, and that is returns an error when it apparently restored the old package and moved on. There's really nothing I can do here, unfortunately.

[norbusan]

There for sure is no virus in that package. It contains one pdf and one plain text file. This is a false alarm of your virus scanner.

Please disable it for this update, and then reenable it.

Thanks

[mouse07410]

I cannot disable the antivirus because it's in a corporate setting, i.e. out of my control. I brought this issue up with our IT, and hopefully they'd do the right thing.

Thank you for your help!

[mouse07410]

Our IT verified that the file in question is clean, and are working on updating the firewall policy.

In the meanwhile - they got me the file itself babel-latin.doc.tar.xz. Is there any way for me to somehow feed it to tlmgr (or better yet - to TeX Live Utility) to complete the update process? Or do I need to wait until our firewall/antivirus issue is fixed?

Thanks!

[amaxwell]

Not without setting up your own tlmgr repository, and you don't want to do that.

[norbusan]

@amaxwell not true, tlmgr can install from the command line since long!

@mouse07410 tlmgr install --file babel-latin.doc.tar.xz should work, but because this is a sub-package, there might be problems, I never tried it.