[Bug 49734] New: Kaspersky claims that wine-stable-amd64_5.0.2~buster_amd64.deb has a virus HEUR:Trojan.Win32.Generic
https://bugs.winehq.org/show_bug.cgi?id=49734
Bug ID: 49734 Summary: Kaspersky claims that wine-stable-amd64_5.0.2~buster_amd64.deb has a virus HEUR:Trojan.Win32.Generic Product: Packaging Version: unspecified Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs@winehq.org Reporter: biz@mynetblog.com CC: dimesio@earthlink.net Distribution: ---
I am using Kaspersky endpoint security for Linux... it says:
wine-stable-amd64_5.0.2~buster_amd64.deb
has a trojan virus in it and will not let me install that package.
https://www.virustotal.com/gui/file/023e699b27940985e0cd3258a3ea5993b48601e4...
md5sum b8391d9c2cdcf70425d5f7bc5baf041d
$ sudo apt install --reinstall wine-stable-amd64 Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: wine-stable-amd64 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 170 not fully installed or removed. Need to get 0 B/69.1 MB of archives. After this operation, 503 MB of additional disk space will be used. Preconfiguring packages ... (Reading database ... 226723 files and directories currently installed.) Preparing to unpack .../wine-stable-amd64_5.0.2~buster_amd64.deb ... Unpacking wine-stable-amd64 (5.0.2~buster) ... dpkg: error processing archive /var/cache/apt/archives/wine-stable-amd64_5.0.2~buster_amd64.deb (--unpack): unable to open '/opt/wine-stable/lib64/wine/mshta.exe.dpkg-new': Operation not permitted Errors were encountered while processing: /var/cache/apt/archives/wine-stable-amd64_5.0.2~buster_amd64.deb E: Sub-process /usr/bin/dpkg returned an error code (1)
https://bugs.winehq.org/show_bug.cgi?id=49734
--- Comment #1 from not my REAL name biz@mynetblog.com --- he md5sum is for the file mshta.exe.dpkg-new
https://bugs.winehq.org/show_bug.cgi?id=49734
Rosanne DiMesio dimesio@earthlink.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |NOTOURBUG
--- Comment #2 from Rosanne DiMesio dimesio@earthlink.net --- Assuming you got the package from dl.winehq.org and not some other site, it's a false positive. Report it to Kaspersky.
https://bugs.winehq.org/show_bug.cgi?id=49734
not my REAL name biz@mynetblog.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Product|Packaging |Wine Component|wine-packages |-unknown Version|unspecified |5.15
https://bugs.winehq.org/show_bug.cgi?id=49734
not my REAL name biz@mynetblog.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Version|5.15 |5.0.2
https://bugs.winehq.org/show_bug.cgi?id=49734
--- Comment #3 from not my REAL name biz@mynetblog.com --- The files have checksums... can you please verify the file is what you have on your site? I will report it to kaspersky. I downloaded it via your site through APT.
https://bugs.winehq.org/show_bug.cgi?id=49734
--- Comment #4 from Rosanne DiMesio dimesio@earthlink.net --- Checksums for the packages are in the Packages files in each distro's directories on the download server. https://dl.winehq.org/wine-builds/debian/dists/buster/main/binary-amd64/Pack...
-
WineHQ Bugzilla