Security bugs are reported here via bugzilla

[Arjan Bouter <a_bouter AT ezrs.com>]

Hi guys,

I've got clamav scanning my /var/spool/sorcery every once in a while.
It recently popped up the following warning:

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 7043.619 sec (117 m 23 s)
/var/spool/sorcery/clamav-0.70.tar.gz: ClamAV-Test-Signature FOUND
/var/spool/sorcery/j2sdk-1_4_2-src-scsl.zip: VirTool.DOS.Sfc FOUND

The hit in the clamav source is obvious, but does anybody know what could 
cause
the other hit (in j2sdk-1_4_2-src-scsl.zip) ??

The file was downloaded from the location specified in the codex dir.
Is this really a virus? Or a false positive?

Arjan

+=======
Proud Source Mage GNU/Linux user,
Linux so advanced, it may as well be magic.
http://www.sourcemage.org

Registered as user #310617 with the Linux Counter,
http://counter.li.org.
+===

Attachment: pgpdBMcEnb2lH.pgp
Description: PGP signature