Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: pidgin download from dl.secunia.com

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
rainydayz pidgin download from dl.secunia.com
Member 23rd Mar, 2012 15:40
Ranking: 0
Posts: 2
User Since: 23rd Mar, 2012
System Score: N/A
Location: UK
Using PSI I got a warning that a newer version of pidgin was available. I downloaded this from the PSI interface but nothing was updated.

I tried running the downloaded executable but nothing happened, running it from the command-line gave no information.

I downloaded the latest pidgin from sourceforge and got a different executable.

From dl.secunia.com I got pidgin_2.10.2.exe of size 9456640 bytes, from netcologne.dl.sourceforge.net I got pidgin-2.10.2.exe of size 9290724 bytes.

Why a different file from secunia & what's the difference that caused it not to install the correct update (I scanned the Downloads folder with MS Security Essentials which didn't throw up anything, although that's not to say there isn't an issue).

This with Secunia PSI 2.0, everything reported as up to date.

mrphobophobic RE: pidgin download from dl.secunia.com
Member 23rd Mar, 2012 15:59
Score: 2
Posts: 2
User Since: 23rd Mar 2012
System Score: N/A
Location: US
I noticed the same thing.

Download from dl.secunia.com:
Filename: pidgin_2.10.2.exe
MD5: F4EE40F51B72905834AF41769F480822
SHA-1: F00BF98F33DF1580ABDBDAE6D692DDD5ACBD27D9

Download from Soundforge:
Filename: pidgin-2.10.2.exe
MD5: DBA42756A841F7A979172555C834BCAE
SHA-1: 60D9C3A21793BF109DB8A99C9D7F67071D83CC12

because of this I don't think I can trust the downloads from Secunia.
Was this reply relevant?
+1
-0
mrphobophobic RE: pidgin download from dl.secunia.com
Member 23rd Mar, 2012 16:05
Score: 2
Posts: 2
User Since: 23rd Mar 2012
System Score: N/A
Location: US
Same thing with the VLC download.

download from dl.secunia.com:
Filename: vlc2.0.1.exe
MD5: A3421691427E7DF89661DCC34DCEDC13
SHA-1: 51413779632CF6F10E971D535E062B01093D7AA9

Download from videolan.org:
Filename: vlc-2.0.1-win32.exe
MD5: 2E43371C02C0D900BDD63D916500D5EB
SHA-1: 505D85D11D95BC2D90FB909CA59CECFF00F33128

Not cool.
Was this reply relevant?
+1
-0
Jesant13 RE: pidgin download from dl.secunia.com
Member 25th Mar, 2012 01:59
Score: -3
Posts: 39
User Since: 10th Sep 2009
System Score: 100%
Location: US
I tried patching OpenOffice.org yesterday before I replaced it with LibreOffice using a file at http://dl.secunia.com/SPS/OOo_3.3.9567.500.exe. I ran it twice, and both times it didn't patch OpenOffice.org.
Was this reply relevant?
+0
-0
rainydayz RE: pidgin download from dl.secunia.com
Member 25th Mar, 2012 19:21
Score: 0
Posts: 2
User Since: 23rd Mar 2012
System Score: N/A
Location: UK
I'm guessing secunia are trying to ship some browser plugin or suchlike with the updates.

I'm sure there are more than three people having this issue - makes their downloads, and PSI, untrustworthy without a good explanation.
Was this reply relevant?
+0
-0
J.Vemmer RE: pidgin download from dl.secunia.com
Secunia Official 26th Mar, 2012 08:42
Score: 5
Posts: 17
User Since: 5th Oct 2011
System Score: N/A
Location: Copenhagen, DK
Hi,

Secunia is currently deploying SPS packets for many installers, in order to provide you with a silent install feature. Silent install means that you will not see a traditional installer on your screen, the entire patching process will happen in the background.
This is also the reason that the files you see, are different from those gotten from the vendor website, though the result is the same.

Please make sure to run a full rescan after applying an update, in order to have the correct scanning results displayed.

--
Kind regards,

Jais Vemmer
xSI Signatures Specialist

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability