[MacPorts] #48756: zlib @1.2.8 Infected with iPhone WireLurker malware (was: libz @1.2.8 Infected with iPhone WireLurker malware)

MacPorts noreply at macports.org
Fri Sep 4 11:49:37 PDT 2015


#48756: zlib @1.2.8 Infected with iPhone WireLurker malware
-------------------------+-------------------------------------------------
  Reporter:              |      Owner:  landonf@…
  bhavinhasmail@…        |     Status:  new
      Type:  defect      |  Milestone:
  Priority:  Normal      |    Version:  2.3.3
 Component:  ports       |   Keywords:  libz iPhone WireLurker WIreLurk
Resolution:              |  malware
      Port:  zlib        |
-------------------------+-------------------------------------------------
Changes (by ryandesign@…):

 * cc: ryandesign@… (added)
 * owner:  macports-tickets@… => landonf@…
 * port:   => zlib


Comment:

 I don't see how the zlib port could be infected with anything. For one
 thing, the port hasn't been updated in any way in over 2 years; if there
 were a problem, it would have been reported long before now. So either
 your local copy of zlib on your machine was replaced with an infected copy
 (by something outside of MacPorts), or your virus scanner is giving you a
 false positive. To check whether it is the former, you could force a
 reinstallation of zlib by running:

 {{{
 sudo port -n upgrade --force zlib
 }}}

 Then run your virus scanner again. If it no longer says the file is
 infected, then something replaced your zlib with a corrupted copy, and you
 should try to figure out how that happened. If it still says it is
 infected, I suspect a false positive, and you should report it to the
 maker of your antivirus software.

-- 
Ticket URL: <https://trac.macports.org/ticket/48756#comment:1>
MacPorts <https://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list