Public bug reported:

I run chkrootkit hourly with a customr output filter to intercept
attacks. For a while now, I get these two lines that are not filtered
out by my filter script:

 OooPS, not expected 105876 value
chkproc: Warning: Possible LKM Trojan installed

With varying PIDs.

While I would have my filter drop the first line, I will not drop the
second. So I'm annoyed by hourly mails from this I have to check just to
see it's that bug again.

For me, that just an annoyance. But there are probably people would be
alarmed by this message.

This a know and fixed bug, see Debian Bug #982998. Please update the
chkrootkit package to 0.55-2.

Thank you.

ProblemType: Bug
DistroRelease: Ubuntu 21.10
Package: chkrootkit 0.54-1
ProcVersionSignature: Ubuntu 5.13.0-28.31-generic 5.13.19
Uname: Linux 5.13.0-28-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.11-0ubuntu71
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: KDE
Date: Sat Feb 26 16:42:54 2022
InstallationDate: Installed on 2014-12-22 (2623 days ago)
InstallationMedia: Kubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
RebootRequiredPkgs: Error: path contained symlinks.
SourcePackage: chkrootkit
UpgradeStatus: Upgraded to impish on 2021-12-13 (74 days ago)

** Affects: chkrootkit (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug impish

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1962368

Title:
  chkproc reports " OooPS, not expected XXXXXX value"

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chkrootkit/+bug/1962368/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to