View Issue Detail

ID	Project	Category	Submitted / Last Updated
01589	UserSpice	Security UI	2022-12-02 23:13:59 / 2022-12-30 19:27:59
Reported	Bill Marjerison	Assigned To	Unassigned
Priority	none	Reported	5.1.5
Status	closed	Resolution Version and Commit
Summary	Problem with update
Description	I'm updating a site, and got stuck when Windows reported a virus in 516.zip. Luckily, I also came across your wizard, and that allows me to skip a lot of intermediate updates so I'm no longer stuck.

December 2022

Virus also reported in 543.zip
December 2022

I'm looking into both of these zips. Thank you.
December 2022

I'm pretty confident this is a false alarm with windows defender. 62 out of 62 virus scanners on virustotal pass it as well as webroot https://www.virustotal.com/gui/file/b90099cc43ca58ebfb2084743f78c340ef5a9ae701bfbe1f20171e938c6f2f5e This is 5.4.3
December 2022

The same goes with 5.1.6 https://www.virustotal.com/gui/file/64894f43ade30b0eaf09ba85172ed6d5e9945a36736ab046fbb1819d48fd5b49 Beyond these two tests, we have pretty great certainty that these files haven't been changed since uploaded. Github is storing them so we have a full history of changes and the userspice database has a hash of every update and will reject the update if the hash doesn't match. Considering that changing one bit,changes the whole hash. The idea of working in a virus without changing the hash doesn't seem possible. I will continue to monitor this and I will shoot you an email.