Malware Alert in felix-cache - false alarm?

Zackster · May 3, 2023, 9:01am

ok, those dlls are coming from jacob Releases · freemansoft/jacob-project · GitHub

lucee/Lucee/blob/5.3/core/pom.xml#L299


      
          </dependency>
          <dependency>
            <groupId>hsqldb</groupId>
            <artifactId>hsqldb</artifactId>
            <version>1.8.0</version>
            <scope>provided</scope>
          </dependency>
          <dependency>
            <groupId>jacob</groupId>
            <artifactId>jacob</artifactId>
            <version>1.16.1</version>
            <scope>provided</scope>
          </dependency>
          <dependency>
            <groupId>javasysmon</groupId>
            <artifactId>javasysmon</artifactId>
            <version>0.3.3</version>
            <scope>provided</scope>
          </dependency>
          <dependency>
            <groupId>org.samba</groupId>

reckon it’s a false positive, i.e it was used in some malware as a lib, we can update it

https://luceeserver.atlassian.net/browse/LDEV-3314

I checked both those attach.dll files against virustotal and both came back clean