This is the mail archive of the
mailing list for the Cygwin project.
[support.osuosl.org #2894] Possible trojan in mingw package on one mirror
- From: "Eric Searcy via RT" <support at osuosl dot org>
- To: gthorpe at ryerson dot ca
- Cc: cygwin at cygwin dot com
- Date: Thu, 09 Aug 2007 18:18:11 +0000
- Subject: [support.osuosl.org #2894] Possible trojan in mingw package on one mirror
- Managed-by: RT 3.6.3 (http://www.bestpractical.com/rt/)
- References: <RT-Ticketemail@example.com> <46BA8DE3.firstname.lastname@example.org> <46BB398F.email@example.com> <firstname.lastname@example.org>
- Reply-to: support at osuosl dot org
- Rt-originator: email@example.com
- Rt-ticket: support.osuosl.org #2894
On Thu Aug 09 15:58:57 2007, firstname.lastname@example.org wrote:
> Gary Thorpe wrote:
> > Eventually, I tried a different mirror (mirrors.kernel.org)
> > and this did not recur.
> Feedback from AVG suggests this is in fact a false positive (the next
> updates of the program's database should confirm this).
It is interesting, though, that it detected it on one file downloaded (from us) but not from
kernel.org. You mentioned that the MD5 checksum verified correctly on the one you
downloaded from us--did the same file from kernel.org have a different checksum?
OSU Open Source Lab
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html