X-Spam-Check-By: sourceware.org Subject: [support.osuosl.org #2894] Possible trojan in mingw package on one mirror From: "Eric Searcy via RT" Reply-To: support@osuosl.org In-Reply-To: References: <46BA8DE3.3030100@ryerson.ca> <46BB398F.6020402@ryerson.ca> Message-ID: X-RT-Loop-Prevention: support.osuosl.org RT-Ticket: support.osuosl.org #2894 Managed-by: RT 3.6.3 (http://www.bestpractical.com/rt/) RT-Originator: emsearcy@osuosl.org To: gthorpe@ryerson.ca Cc: cygwin@cygwin.com MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit X-RT-Original-Encoding: utf-8 Date: Thu, 09 Aug 2007 18:18:11 +0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com On Thu Aug 09 15:58:57 2007, gthorpe@ryerson.ca wrote: > Gary Thorpe wrote: [...] > > Eventually, I tried a different mirror (mirrors.kernel.org) > > and this did not recur. > > [...] > > Feedback from AVG suggests this is in fact a false positive (the next > updates of the program's database should confirm this). > It is interesting, though, that it detected it on one file downloaded (from us) but not from kernel.org. You mentioned that the MD5 checksum verified correctly on the one you downloaded from us--did the same file from kernel.org have a different checksum? -- Eric Searcy OSU Open Source Lab -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/