Re: PSPP-BUG: Malware detected

[John Darrington]

The url you gave is not a GNU url - all GNU urls are in the domain gnu.org
The domain you mentioned belogs to the Augsburg university of applied sciences,
and I think the binaries there are kindly made available by Frederick Beckmann.

I also find it a very bold claim that this binary contains malware.  A bold
claim for which you provide no evidence.   I guess you need to contact
Frederick and explain your reasons for believing that this allegation including
the nature of the malware which you are of the opinion is contained within
this binary.

Of course, if you want to be absolutely sure that your software is free
from malware, then you should download the source from ftp.gnu.org, perform a
thorough audit of the source code, and build the software yourself using
trusted tools.

Regards,

John

On Sat, Mar 05, 2022 at 06:21:09PM -0300, Marcus Klein wrote:
     Dear GNU,<br />

     I downloaded the pspp-64bit-install.exe file from&nbsp;<a 
href="https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe";>https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe</a><br
 />
     and it has a malware with signature W32.649BEE42BD-95.SBX.TG.<br />
     Also f_003d6d (not sure if this is a file inside the install package) has 
the same signature<br />
     <br />
     Could you please update the compilation and advise?<br />
     Thanks in advance.<br />
     <br />
     Marcus Klein
     _______________________________________________
     Bug-gnu-pspp mailing list
     Bug-gnu-pspp@gnu.org
     https://lists.gnu.org/mailman/listinfo/bug-gnu-pspp