Support

Akeeba Backup for Joomla!

#37353 server cPanel CXS Scan shows script error on pkg_akeeba.xml

Posted in ‘Akeeba Backup for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
latest joomla version
PHP version
7.4
Akeeba Backup version
latest

Latest post by nicholas on Thursday, 23 June 2022 22:53 CDT

netlag

Hello,

My cPanel server sends me virus and malware warnings (cxswatch) after it scans sites and I get a CSX warning now from every Joomla site using akeeba, (one example below). It's warning me about the pkg_akeeba.xml scrip version as being old, please let me know if this is an issue or will it be updated in future so it does not set off the CSX watch warnings like below, I get one for each Joomla site using Akeeba (180 sites) 

Below is the mail warning i get from cPanel CSX watch scanner, this is a Joomla sites using akeeba (fully updated)

SUBJECT:  cxs Scan on server10.webez.net (Hits:1) (Viruses:0) (Fingerprints:0)

----------- SCAN REPORT -----------

TimeStamp: Thu, 23 Jun 2022 07:12:12 -0600

(/usr/sbin/cxs --allusers --clamdsock /var/clamd --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 0 --noforce --html --ignore /etc/cxs/cxs.ignore --logfile /var/log/cxs.log --mail [email protected] --options mMOLfSGchexdnZDRru --noprobability --qoptions Mv --quiet --report /var/log/cxs.scan --sizemax 1000000 --smtp --ssl --summary --sversionscan --throttle 15 --timemax 30 --nounofficial --virusscan --vmrssmax 2000000 --voptions mfhexT --Wloglevel 0 --Wmaxchild 3 --Wnotify inotify --Wrateignore 300 --Wrefresh 7 --Wsleep 3 --Wstart --www)

 

cxswatch Scanning /home/bettervi/public_html/administrator/manifests/packages/pkg_akeeba.xml:

'/home/bettervi/public_html/administrator/manifests/packages/pkg_akeeba.xml'

Script version check [OLD] [Akeeba Backup v8.1.8 < v9.2.0]  

----------- SCAN SUMMARY -----------
Scanned directories: 0
Scanned files: 1
Ignored items: 0
Suspicious matches: 1
Viruses found: 0
Fingerprint matches: 0
Data scanned: 0.00 MB
Scan peak memory: 265564 kB
Scan time/item: 0.007 sec
Scan time: 0.007 sec


Let me know..... :)

nicholas
Akeeba Staff
Manager

That tool complains that you have an out of date Akeeba Backup version.

You claim to be using the "latest" version of Joomla and Akeeba Backup. 

There is no such thing as a "latest" version, as I have been saying for the past 17 years. Versions are numbered and having the actual version number is important. I have no idea which versions you are using and this is critical to answering your ticket without misleading you. Right now there are two major Joomla versions currently supported by the Joomla project: Joomla 3 and 4. As we have explained since August 6th 2021 (https://www.akeeba.com/news/1747-joomla-4-is-around-the-corner.html) our software also has two actively support major versions, one for Joomla 3 and one for Joomla 4. So, are you using Joomla 3.10 or 4.1 and if so which exact version? Are you using Akeeba Backup 8 or Akeeba Backup 9 and which one?

As a result I cannot tell you if the tool is broken or not, whether you need to something on your site or not. 

What I do have to note is that the tool claims that you need to update pkg_akeeba to version 9.2.0 or later. This is, not to put too fine a point on it, nonsense.

pkg_akeeba is the package name of the Joomla 3 version of our software with version numbers which stop at major version 8.

The Joomla 4 version of our software has the package name pkg_akeebabackup (note the difference!) and its version numbers start at major version 9.

Therefore the tool asking you to install pkg_akeeba version 9 makes no sense because there is no such thing nor will there ever be one!

Further to that, they claim that the latest version of Akeeba Backup is 9.2.0 which is several months old. As a result we conclude that the tool does not, in fact, take the latest version information from the single public point of truth, our update server, but instead relies on a hairless monkey manually updating the version numbers which is, of course, utterly useless.

Finally, the entire point of existence of this tool is moot. Joomla itself can detect the latest available version of installed software which is compatible with your specific Joomla version, the PHP version you are using on your site and the database server type and version you are using on your site. This tool clearly does not take any of that into account, giving you nonsensical, non-actionable results.

In any case this is a broken third party tool which provides misleading information. It has nothing to do with us, it does not use the information we publish, we can offer any support for it. Give your host the URL to this public ticket so they can kick the butt of their third party provider which supplied them with a pointless, broken tool.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!