[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PSPP-BUG: Malware detected

From: Marcus Klein
Subject: Re: PSPP-BUG: Malware detected
Date: Mon, 07 Mar 2022 16:34:28 -0300

thank you for your reply and guidance.
I'm also exchanging e-mails with Frederick Beckmann and letting him aware of the problem.
As I needed a windows version of PSPP, I could find a clean package in Source Forge.

thank you very much.
Marcus Klein.

Marcus Klein



De: "John Darrington" <john@darrington.wattle.id.au>
Enviada: 2022/03/07 09:42:07
Para: msklein@uol.com.br
Cc: bug-gnu-pspp@gnu.org
Assunto: Re: PSPP-BUG: Malware detected
The url you gave is not a GNU url - all GNU urls are in the domain gnu.org
The domain you mentioned belogs to the Augsburg university of applied sciences,
and I think the binaries there are kindly made available by Frederick Beckmann.

I also find it a very bold claim that this binary contains malware. A bold
claim for which you provide no evidence. I guess you need to contact
Frederick and explain your reasons for believing that this allegation including
the nature of the malware which you are of the opinion is contained within
this binary.

Of course, if you want to be absolutely sure that your software is free
from malware, then you should download the source from ftp.gnu.org, perform a
thorough audit of the source code, and build the software yourself using
trusted tools.



On Sat, Mar 05, 2022 at 06:21:09PM -0300, Marcus Klein wrote:
Dear GNU,<br />

I downloaded the pspp-64bit-install.exe file from&nbsp;<a href="" xalnkAmvAeSIoaS="https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe">https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe</a><br">https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe">https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe</a><br />
and it has a malware with signature W32.649BEE42BD-95.SBX.TG.<br />
Also f_003d6d (not sure if this is a file inside the install package) has the same signature<br />
<br />
Could you please update the compilation and advise?<br />
Thanks in advance.<br />
<br />
Marcus Klein
Bug-gnu-pspp mailing list
reply via email to

[Prev in Thread] Current Thread [Next in Thread]