[clamav-users] CVE_2021_4034-9951522 false positives on node executables

[Al Varnell]

I downloaded and installed both current versions of Node.js 16.16.0 LTS & 18.7.0 from <https://nodejs.org/en/ <https://nodejs.org/en/>> and no infected files were found.

-Al-
-- 
ClamXAV user

On Mon, Aug 01, 2022 at 02:50 AM, Viktor Rosenfeld via clamav-users wrote:
> Hi,
> 
> about a month ago I reported a possible false positive on nodejs executables and related files [1]. After checking with Jotti’s Virus Scan and Virustotal, I also (twice) submitted the files to the ClamAV website as false positives [2].
> 
> I haven’t received a notification after the false positive submissions and, meanwhile, newer versions of nodejs are still reported as being infected.
> 
> What else can I do to verify that this is indeed a false positive?
> 
> Best,
> Viktor
> 
> [1] https://lists.clamav.net/pipermail/clamav-users/2022-June/012717.html <https://lists.clamav.net/pipermail/clamav-users/2022-June/012717.html>
> [2] https://www.clamav.net/reports/fp <https://www.clamav.net/reports/fp>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220801/cdb0c71e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4376 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220801/cdb0c71e/attachment.bin>