X-Spam-Check-By: sourceware.org
Subject: [support.osuosl.org #2894] Possible trojan in mingw package on one mirror
From: "Eric Searcy via RT" <support AT osuosl DOT org>
Reply-To: support AT osuosl DOT org
In-Reply-To: <rt-3.6.3-32137-1186675137-1573.2894-6-0@osuosl.org>
References: <RT-Ticket-2894 AT osuosl DOT org> <46BA8DE3 DOT 3030100 AT ryerson DOT ca> <46BB398F DOT 6020402 AT ryerson DOT ca> <rt-3 DOT 6 DOT 3-32137-1186675137-1573 DOT 2894-6-0 AT osuosl DOT org>
Message-ID: <rt-3.6.3-32463-1186683491-44.2894-6-0@osuosl.org>
X-RT-Loop-Prevention: support.osuosl.org
RT-Ticket: support.osuosl.org #2894
Managed-by: RT 3.6.3 (http://www.bestpractical.com/rt/)
RT-Originator: emsearcy AT osuosl DOT org
To: gthorpe AT ryerson DOT ca
Cc: cygwin AT cygwin DOT com
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
X-RT-Original-Encoding: utf-8
Date: Thu, 09 Aug 2007 18:18:11 +0000
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On Thu Aug 09 15:58:57 2007, gthorpe AT ryerson DOT ca wrote:
> Gary Thorpe wrote:
[...]
> > Eventually, I tried a different mirror (mirrors.kernel.org) 
> > and this did not recur.
> > 
[...]
> 
> Feedback from AVG suggests this is in fact a false positive (the next
> updates of the program's database should confirm this).
> 

It is interesting, though, that it detected it on one file downloaded (from us) but not from 
kernel.org.  You mentioned that the MD5 checksum verified correctly on the one you 
downloaded from us--did the same file from kernel.org have a different checksum?

-- 
Eric Searcy
OSU Open Source Lab



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/