[Bug 2068823] Re: gofmt in golang-1.22-go flagged by multiple EDR software

Launchpad Bug Tracker 2068823 at bugs.launchpad.net
Wed Sep 4 04:17:16 UTC 2024


[Expired for golang-1.22 (Ubuntu) because there has been no activity for
60 days.]

** Changed in: golang-1.22 (Ubuntu)
       Status: Incomplete => Expired

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-1.22 in Ubuntu.
https://bugs.launchpad.net/bugs/2068823

Title:
  gofmt in golang-1.22-go flagged by multiple EDR software

Status in golang-1.22 package in Ubuntu:
  Expired

Bug description:
  The gofmt binary in golang-1.22-go is flagged by virtualtotal as
  malicious.

  ```
  # dpkg-deb -x golang-1.22-go_1.22.2-2_amd64.deb  .
  # md5sum ./usr/lib/go-1.22/bin/gofmt /usr/lib/go-1.22/bin/gofmt
  69539500b42521c884571eeebc8b74fb  ./usr/lib/go-1.22/bin/gofmt
  69539500b42521c884571eeebc8b74fb  /usr/lib/go-1.22/bin/gofmt
  # ./vt scan file  ./usr/lib/go-1.22/bin/gofmt
  ./usr/lib/go-1.22/bin/gofmt Njk1Mzk1MDBiNDI1MjFjODg0NTcxZWVlYmM4Yjc0ZmI6MTcxNzkxOTY4NQ==
  # ./vt analysis Njk1Mzk1MDBiNDI1MjFjODg0NTcxZWVlYmM4Yjc0ZmI6MTcxNzkxOTY4NQ==
  ... 
      Google:
        category: "malicious"
        engine_name: "Google"
        engine_update: "20240609"
        engine_version: "1717916421"
        method: "blacklist"
        result: "Detected"
  ...
    stats:
      confirmed-timeout: 0
      failure: 0
      harmless: 0
      malicious: 7
      suspicious: 0
      timeout: 0
      type-unsupported: 11
      undetected: 57
    status: "completed"
  ```

  ProblemType: Bug
  DistroRelease: Ubuntu 24.04
  Package: golang-1.22-go 1.22.2-2
  ProcVersionSignature: Ubuntu 6.8.0-1009.9-aws 6.8.4
  Uname: Linux 6.8.0-1009-aws x86_64
  NonfreeKernelModules: zfs
  ApportVersion: 2.28.1-0ubuntu3
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CloudArchitecture: x86_64
  CloudBuildName: server
  CloudID: aws
  CloudName: aws
  CloudPlatform: ec2
  CloudRegion: us-east-1
  CloudSerial: 20220912
  CloudSubPlatform: metadata (http://169.254.169.254)
  Date: Sun Jun  9 10:59:08 2024
  Ec2Architecture: x86_64
  Ec2Imageid: ami-08c40ec9ead489470
  Ec2Instancetype: u-12tb1.112xlarge
  Ec2Region: us-east-1
  ProcEnviron:
   LANG=C.UTF-8
   LC_CTYPE=C.UTF-8
   PATH=(custom, no user)
   SHELL=/bin/bash
   TERM=xterm-256color
  SourcePackage: golang-1.22
  UpgradeStatus: Upgraded to noble on 2024-06-06 (2 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-1.22/+bug/2068823/+subscriptions




More information about the foundations-bugs mailing list