[cmake-developers] Trojan in latest release

[kevin]

Yes, your correct on the url. Using the link from your email. Gave me the same Trojan. I have not actually seen the file, because windows defender is preventing the download from completing.

Sent from my iPhone

> On Mar 21, 2019, at 12:45 PM, Brad King <brad.king at kitware.com> wrote:
> 
>> On 3/21/19 12:31 PM, kevin wrote:
>> Linked from https://camel.org/download
> 
> I'll assume you meant `cmake.org` there.
> 
>> Platform->windows win64-x64 installer: ...
> 
> That would be
> 
>  https://github.com/Kitware/CMake/releases/download/v3.14.0/cmake-3.14.0-win64-x64.msi
> 
> I downloaded it and got a SHA-256 sum of
> 
>  4cbc62929f313d9890d377fa022753e9e5509e7afa3e16978127b7b2813633cf
> 
> which matches our published signatures.
> 
> What tool claims the binary contains Skeeyah?
> 
> -Brad