Subject: [support.osuosl.org #2894] Possible trojan in mingw package on one mirror
From: "Eric Searcy via RT" <[email-masked]>
To: [email-masked]
Cc: [email-masked]
Date: Thu, 09 Aug 2007 18:18:11 +0000
List-Id: <cygwin.cygwin.com>

On Thu Aug 09 15:58:57 2007, [email-masked] wrote:
> Gary Thorpe wrote:
[...]
> > Eventually, I tried a different mirror (mirrors.kernel.org) 
> > and this did not recur.
> > 
[...]
> 
> Feedback from AVG suggests this is in fact a false positive (the next
> updates of the program's database should confirm this).
> 

It is interesting, though, that it detected it on one file downloaded (from us) but not from 
kernel.org.  You mentioned that the MD5 checksum verified correctly on the one you 
downloaded from us--did the same file from kernel.org have a different checksum?

-- 
Eric Searcy
OSU Open Source Lab

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/