[Dev] High Importance

Lucid Eagle LucidEagle at protonmail.com
Wed Jul 18 06:07:10 GMT 2018


Hello everyone, hope you all are doing well.

It has come to my attention that there may be a trojan in the official Parabola repos. As well as several other potential security issues as well. They may all just be false positives, but this one is rather alarming.

/usr/bin/openal-info has a Unix.Trojan.Vali-6606621-0

Package Source: https://www.parabola.nu/packages/extra/x86_64/openal/

I have attached screen shots of all the results from the clamav scan on a fresh installation of Parabola GNU Linux. I am using the Cinnamon DE and I have just installed some of my favorite apps from only the official repos. I have also included a bash script that lists what I have done so far step by step after installing the system too.

Please let me know if this is a real trojan and/or if the other issues are false positives.

Thank you so much for all of your help. Take care and have a wonderful evening.

Sincerely,

Lucid Eagle

Sent with [ProtonMail](https://protonmail.com) Secure Email.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2018-07-18 01-55-09.png
Type: image/png
Size: 26985 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2018-07-18 01-17-15.png
Type: image/png
Size: 137736 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2018-07-18 01-18-06.png
Type: image/png
Size: 140918 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2018-07-18 01-18-22.png
Type: image/png
Size: 141398 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2018-07-18 01-18-41.png
Type: image/png
Size: 143259 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2018-07-18 01-18-50.png
Type: image/png
Size: 141831 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: quick-reset.sh
Type: application/x-shellscript
Size: 1452 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20180718/4966f743/attachment.bin>


More information about the Dev mailing list