This is the mail archive of the
cygwin
mailing list for the Cygwin project.
[support.osuosl.org #2894] Possible trojan in mingw package on one mirror
- From: "Eric Searcy via RT" <support at osuosl dot org>
- To: gthorpe at ryerson dot ca
- Cc: cygwin at cygwin dot com
- Date: Thu, 09 Aug 2007 18:18:11 +0000
- Subject: [support.osuosl.org #2894] Possible trojan in mingw package on one mirror
- Managed-by: RT 3.6.3 (http://www.bestpractical.com/rt/)
- References: <RT-Ticket-2894@osuosl.org> <46BA8DE3.3030100@ryerson.ca> <46BB398F.6020402@ryerson.ca> <rt-3.6.3-32137-1186675137-1573.2894-6-0@osuosl.org>
- Reply-to: support at osuosl dot org
- Rt-originator: emsearcy@osuosl.org
- Rt-ticket: support.osuosl.org #2894
On Thu Aug 09 15:58:57 2007, gthorpe@ryerson.ca wrote:
> Gary Thorpe wrote:
[...]
> > Eventually, I tried a different mirror (mirrors.kernel.org)
> > and this did not recur.
> >
[...]
>
> Feedback from AVG suggests this is in fact a false positive (the next
> updates of the program's database should confirm this).
>
It is interesting, though, that it detected it on one file downloaded (from us) but not from
kernel.org. You mentioned that the MD5 checksum verified correctly on the one you
downloaded from us--did the same file from kernel.org have a different checksum?
--
Eric Searcy
OSU Open Source Lab
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/