Initial release on Gitlab v.2.6.3 seems to have removed the suspicious files: https://gitlab.com/FreeDOS/apps/doszip/-/commit/ef67f6fefcc4302d4b64c6bb41a60d2a0c03630c so the suspicious exe files not seems to be part of Gitlab...
I don't see the suspicious files on: https://github.com/nidud/doszip/tree/v2.65/dos/src or https://github.com/nidud/doszip/tree/v2.66/dos/src Again, https://www.ibiblio.org/pub/micro/pc-stuff/freedos/files/repositories/1.3/pkg-html/doszip.html list 2.66 as the version... [paul@betakard bin]$ sha1sum make.exe 7b3d1902e80d5df9e7038dce869b803b2cf6793c make.exe [paul@betakard bin]$ md5sum make.exe 87d9cda0a64d6108812acc4dc2e5ba7d make.exe I don't find the hashes on Internet... [paul@betakard DOSZIP]$ md5sum SOURCES.ZIP cd2c1eb692f48aa7d606db99ef101482 SOURCES.ZIP [paul@betakard DOSZIP]$ sha1sum SOURCES.ZIP 57217a7d5e956bea154d4cc6582516e186aa5c7b SOURCES.ZIP Cannot find the hashes... Not sure what to think now... :-| _______________________________________________ Freedos-devel mailing list Freedos-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/freedos-devel
