Trellix security has reported a trojan in file postgis-bundle-pg15x64-setup-3.4.2-1.exe

[Okken, James CIV USARMY DEVCOM AC (USA)]

Hello all,

My Trellix secuirty program (Mcafee) has reported a trojan in posgis 3.4.2 installer file "postgis-bundle-pg15x64-setup-3.4.2-1.exe"

This is as downloaded from either of these locations.
https://download.osgeo.org/postgis/windows/pg15/postgis-bundle-pg15x64-setup-3.4.2-1.exe
or
https://ftp.postgresql.org/pub/postgis/pg15/v3.4.2/win64/postgis-bundle-pg15x64-setup-3.4.2-1.exe

Attached is a screenshot of Trellix's detections, 1 per my attempt to download the file.
I double confirmed that the previous postgis version 3.4.1 does not have this trojan detected. That is file "postgis-bundle-pg15x64-setup-3.4.1-1.exe" is good.

Thank you

[cid:image001.png at 01DB0387.FB2F2200]
--Jim Okken
Protection Systems Branch, FCDD-ACW-SA
Phone: 520-684-2228
Cell: 973-809-2112

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/postgis-devel/attachments/20240910/24238dba/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 26564 bytes
Desc: image001.png
URL: <http://lists.osgeo.org/pipermail/postgis-devel/attachments/20240910/24238dba/attachment-0001.png>