** Changed in: chkrootkit (Ubuntu Xenial)
Status: New => Confirmed
** Changed in: chkrootkit (Ubuntu Xenial)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to chkrootkit in Ubuntu.
** Changed in: chkrootkit (Ubuntu Xenial)
Status: New => Confirmed
** Changed in: chkrootkit (Ubuntu Xenial)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Also affects: chkrootkit (Ubuntu Xenial)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1508248
Title:
chkrootkit gives false positive Linux/Ebury -
** Changed in: chkrootkit (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1508248
Title:
chkrootkit gives false positive Linux/Ebury - Operation
** Changed in: chkrootkit (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to chkrootkit in Ubuntu.
https://bugs.launchpad.net/bugs/1508248
Title:
chkrootkit gives false positive Linux/Ebury -
Artful and Bionic are fine, since this was fixed in debian's 0.50-4:
chkrootkit (0.50-4) unstable; urgency=low
* [132754e] Fix windigo false positive (Closes:#796599)
The patch debian is using is
Artful and Bionic are fine, since this was fixed in debian's 0.50-4:
chkrootkit (0.50-4) unstable; urgency=low
* [132754e] Fix windigo false positive (Closes:#796599)
The patch debian is using is
Launchpad has imported 15 comments from the remote bug at
https://bugzilla.redhat.com/show_bug.cgi?id=1234436.
If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
Still affects Ubuntu 16.04. 'ssh -G' is a valid command; 'ssh -Z' (or
any remaining unused option) should be used.
See
https://askubuntu.com/questions/709545/chkrootkit-says-searching-for-linux-ebury-operation-windigo-ssh-possible-l
for a script to check for 'Operation Windigo' presence.
--
This remains unfixed in Linux Mint 18.1.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1508248
Title:
chkrootkit gives false positive Linux/Ebury - Operation Windigo
To manage notifications about
** Changed in: chkrootkit (Debian)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1508248
Title:
chkrootkit gives false positive Linux/Ebury - Operation
Wish to confirm that this is still an issue.
xenial 65/bit server
ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" ||
echo "System infected"
System infected
OpenSSH_7.2p2 Ubuntu-4ubuntu2.1, OpenSSL 1.0.2g-fips 1 Mar 2016
chkrootkit version 0.50
--
You received this
Still valid on xenial 64-bit
Searching for Linux/Ebury - Operation Windigo ssh...Possible
Linux/Ebury - Operation Windigo installetd
ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" ||
echo "System infected"
System infected
There are topics on forum about it:
** Changed in: chkrootkit (Debian)
Status: Unknown => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1508248
Title:
chkrootkit gives false positive Linux/Ebury - Operation Windigo
** Summary changed:
- chkrootkit gives false positive ebury
+ chkrootkit gives false positive Linux/Ebury - Operation Windigo
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1508248
Title:
15 matches
Mail list logo
