Security report that requires attention
Hi Guys, Thought this needed bringing to peoples attention.
http://www.inkscapeforum.com/viewtopic.php?f=22&t=594
Cheers
Sim
On Wed, Feb 20, 2008 at 06:48:20PM -0500, john cliff wrote:
Hi Guys, Thought this needed bringing to peoples attention.
http://www.inkscapeforum.com/viewtopic.php?f=22&t=594
Cheers
Sim
Perhaps this is another false positive like last time?
http://www.inkscape.org/archive.php?lang=en&year=2006 (search for 'trojan')
Bryce
Googling for 'gspawn exe trojan' shows that this windows GTK helper app seems to come up as a false positive every once in a while in other GTK apps, like Gaim. As sim notes over at inkscapeforum, the report doesn't mention where the file was obtained (whether it was an official inkscape build or not), and doesn't mention if the virus defs are up to date, so may be hard to follow up on...
It may be a good idea to submit at least the windows executable files to a service like virustotal.com before sending them out. They run a few dozen virus scanners on the file at once, which may help the Windows packagers to know in advance if they are likely to get reports false positives. These could perhaps be mentioned in the release notes?
-Tom
On Wed, Feb 20, 2008 at 4:02 PM, Bryce Harrington <bryce@...1798...> wrote:
On Wed, Feb 20, 2008 at 06:48:20PM -0500, john cliff wrote:
Hi Guys, Thought this needed bringing to peoples attention.
http://www.inkscapeforum.com/viewtopic.php?f=22&t=594
Cheers
Sim
Perhaps this is another false positive like last time?
http://www.inkscape.org/archive.php?lang=en&year=2006 (search for 'trojan')
Bryce
This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Inkscape-devel mailing list Inkscape-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/inkscape-devel
participants (3)
-
Bryce Harrington
-
john cliff
-
Tom Davidson