ClamAV updates being blocked by CDN

[watkinst9]

Describe the bug

ClamAV update process started at Mon Oct 20 00:02:17 2025
daily database available for update (local version: 27777, remote version: 27797)
Current database is 20 versions behind.
Downloading database patch # 27778...
WARNING: downloadPatch: Can't download daily-27778.cdiff from https://database.clamav.net/daily-27778.cdiff
WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
WARNING: FreshClam received error code 403 from the ClamAV Content Delivery Network (CDN).
This could mean several things:

1. You are running an out-of-date version of ClamAV / FreshClam.
   Ensure you are the most updated version by visiting https://www.clamav.net/downloads
2. Your network is explicitly denied by the FreshClam CDN.
   In order to rectify this please check that you are:
   a. Running an up-to-date version of FreshClam
   b. Running FreshClam no more than once an hour
   c. If you have checked (a) and (b), please open a ticket at
   https://bugzilla.clamav.net under the 'Mirrors' component
   and we will investigate why your network is blocked.
   ERROR: Database update process failed: Forbidden; Blocked by CDN
   ERROR: Update failed.

How to reproduce the problem

I don't know. I'm not very tech savvy.

Attachments

[val-ms]

@watkinst9 sorry for the late response. Did you resolve the issue? The most likely problem is that you're using an old version of ClamAV, older than 1.0.0, which are now blocked from receiving signature updates. If that's true, you will need to update to a newer version of ClamAV.

[fishfacemcgee]

@val-ms Newer versions of ClamAV are unavailable on Amazon Linux 2 (nothing newer in the yum repos and too old a verison of glibc to install the rpm directly). Just to clarify, the best way to keep getting definition updates in that case is to do a private mirror via cvdupate?

[val-ms]

@fishfacemcgee I suppose. But really amazon linux 2 should provide newer packages. I'm not sure what to say.