Some issues with tar

[gimmeBeer]

Hello,

Yesterday upgraded one of servers to latest version of sigs, and today got email to postmaster about this

/usr/bin/tar: Pattern matching characters used in file names /usr/bin/tar: Use --wildcards to enable pattern matching, or --no-wildcards to suppress this warning /usr/bin/tar: /rfxn.: Not found in archive /usr/bin/tar: Exiting with failure status due to previous errors

In maillog i didnt find anything about this error. Here is a commands which i performed: clamav-unofficial-sigs.sh clamav-unofficial-sigs.sh --upgrade clamav-unofficial-sigs.sh --force /etc/init.d/clamav-daemon restart OS: Debian10

[onlime]

same here, getting these errors since v7.2.4 upgrade yesterday on clamav-unofficial-sigs.sh upgrade cronjob:

Subject: Cron <clamav@mx1> [ -x /usr/local/sbin/clamav-unofficial-sigs.sh ] && /bin/bash /usr/local/sbin/clamav-unofficial-sigs.sh

/bin/tar: Pattern matching characters used in file names
/bin/tar: Use --wildcards to enable pattern matching, or --no-wildcards to suppress this warning
/bin/tar: */rfxn.*: Not found in archive
/bin/tar: Exiting with failure status due to previous errors

also on latest Debian Buster 10.8

full /var/log/clamav-unofficial-sigs/clamav-unofficial-sigs.log output of that update run (didn't happen on previous runs under v7.2.4, also didn't occur on the following run):

Mar 19 10:02:01 Preparing Databases
Mar 19 10:02:01 Fri 19 Mar 2021 10:02:01 AM CET - Pausing database file updates for 39 seconds...
Mar 19 10:02:40 Fri 19 Mar 2021 10:02:40 AM CET - Pause complete, checking for new database files...
Mar 19 10:02:40 Sanesecurity Database & GPG Signature File Updates
Mar 19 10:02:40 Checking for Sanesecurity updates...
Mar 19 10:02:40 Sanesecurity mirror site used: docs1.nethesis.it 188.166.20.37
Mar 19 10:02:41 Testing updated Sanesecurity database file: porcupine.hsb
Mar 19 10:02:41 Clamscan reports Sanesecurity porcupine.hsb database integrity tested good
Mar 19 10:02:41 Successfully updated Sanesecurity production database file: porcupine.hsb
Mar 19 10:02:41 LinuxMalwareDetect Database File Updates
Mar 19 10:02:41 Checking for LinuxMalwareDetect updates...
Mar 19 10:02:41 LinuxMalwareDetect Database File Updates
Mar 19 10:02:42 interserver Database File Updates
Mar 19 10:02:42 Checking for interserver updates...
Mar 19 10:02:42 Checking for updated interServer database file: whitelist.fp
Mar 19 10:02:43 No updated interServer whitelist.fp database file
Mar 19 10:02:43 Checking for updated interServer database file: interserver256.hdb
Mar 19 10:02:44 No updated interServer interserver256.hdb database file
Mar 19 10:02:44 Checking for updated interServer database file: interservertopline.db
Mar 19 10:02:44 No updated interServer interservertopline.db database file
Mar 19 10:02:44 No interServer database file updates
Mar 19 10:02:44 URLhaus Database File Updates
Mar 19 10:02:44 Checking for urlhaus updates...
Mar 19 10:02:44 Checking for updated urlhaus database file: urlhaus.ndb
Mar 19 10:02:45 WARNING: Failed connection to https://urlhaus.abuse.ch/downloads - SKIPPED urlhaus urlhaus.ndb update
Mar 19 10:02:45 No updated urlhaus urlhaus.ndb database file
Mar 19 10:02:45 No urlhaus database file updates
Mar 19 10:02:45 Yara-Rules Database File Updates
Mar 19 10:02:45 24 hours have not yet elapsed since the last yararulesproject update check
Mar 19 10:02:45 No update check was performed at this time
Mar 19 10:02:45 Next check will be performed in approximately 5 hour(s), 51 minute(s)
Mar 19 10:02:45 Update(s) detected, reloading ClamAV databases
Mar 19 10:02:45 ClamAV databases reloading
Mar 19 10:02:45 Issue tracker : https://github.com/extremeshok/clamav-unofficial-sigs/issues
Mar 19 10:02:45       Powered By https://eXtremeSHOK.com      

This problem just seems to occur when there are updates available. Next run was fine:

Mar 19 11:02:02 Preparing Databases
Mar 19 11:02:02 Fri 19 Mar 2021 11:02:02 AM CET - Pausing database file updates for 34 seconds...
Mar 19 11:02:36 Fri 19 Mar 2021 11:02:36 AM CET - Pause complete, checking for new database files...
Mar 19 11:02:36 Sanesecurity Database File Updates
Mar 19 11:02:36 2 hours have not yet elapsed since the last Sanesecurity update check
Mar 19 11:02:36 No update check was performed at this time
Mar 19 11:02:36 Next check will be performed in approximately 1 hour(s), 0 minute(s)
Mar 19 11:02:36 LinuxMalwareDetect Database File Updates
Mar 19 11:02:36 6 hours have not yet elapsed since the last linuxmalwaredetect update check
Mar 19 11:02:36 No update check was performed at this time
Mar 19 11:02:36 Next check will be performed in approximately 5 hour(s), 0 minute(s)
Mar 19 11:02:36 interserver Database File Updates
Mar 19 11:02:36 Checking for interserver updates...
Mar 19 11:02:36 Checking for updated interServer database file: whitelist.fp
Mar 19 11:02:36 No updated interServer whitelist.fp database file
Mar 19 11:02:36 Checking for updated interServer database file: interserver256.hdb
Mar 19 11:02:37 No updated interServer interserver256.hdb database file
Mar 19 11:02:37 Checking for updated interServer database file: interservertopline.db
Mar 19 11:02:37 No updated interServer interservertopline.db database file
Mar 19 11:02:37 No interServer database file updates
Mar 19 11:02:37 URLhaus Database File Updates
Mar 19 11:02:37 Checking for urlhaus updates...
Mar 19 11:02:37 Checking for updated urlhaus database file: urlhaus.ndb
Mar 19 11:02:37 WARNING: Failed connection to https://urlhaus.abuse.ch/downloads - SKIPPED urlhaus urlhaus.ndb update
Mar 19 11:02:37 No updated urlhaus urlhaus.ndb database file
Mar 19 11:02:37 No urlhaus database file updates
Mar 19 11:02:37 Yara-Rules Database File Updates
Mar 19 11:02:37 24 hours have not yet elapsed since the last yararulesproject update check
Mar 19 11:02:37 No update check was performed at this time
Mar 19 11:02:37 Next check will be performed in approximately 4 hour(s), 51 minute(s)
Mar 19 11:02:37 No updates detected, ClamAV databases were not reloaded
Mar 19 11:02:37 Issue tracker : https://github.com/extremeshok/clamav-unofficial-sigs/issues
Mar 19 11:02:38       Powered By https://eXtremeSHOK.com      

[extremeshok]

Will push an update shortly.

[extremeshok]

if you can test the latest dev version my homelab is busy updating, so cant test it.

[msapiro]

I don't think https://github.com/extremeshok/clamav-unofficial-sigs/commit/4a8e228565047f89df288172d2f049b1eac22abf will fix this. It only affects situations where tar_bin is defined in the config. I think this is the fix, at least for me:

diff --git a/clamav-unofficial-sigs.sh b/clamav-unofficial-sigs.sh
index a81f076..48cdd00 100755
--- a/clamav-unofficial-sigs.sh
+++ b/clamav-unofficial-sigs.sh
@@ -2037,6 +2037,7 @@ elif [[ "$tar_bin" =~ "/" ]] ; then

     fi
 fi
+tar_bin="$tar_bin --wildcards"
 # gpg_bin
 if [ "$enable_gpg" == "yes" ] ; then
     if [ -z "$gpg_bin" ] ; then

[extremeshok]

im busy with freebsd, going to see if I can strip out some requirements for them