From owner-freebsd-questions Thu May 30 2:14: 1 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mirapoint2.brutele.be (mirapoint2.brutele.be [212.68.193.7]) by hub.freebsd.org (Postfix) with ESMTP id 1C66037B405 for ; Thu, 30 May 2002 02:13:54 -0700 (PDT) Received: from gateway.lefort.net ([213.189.162.78]) by mirapoint2.brutele.be (Mirapoint) with ESMTP id AYT60993; Thu, 30 May 2002 11:13:41 +0200 (CEST) Received: from jsite.lefort.net (jsite.lefort.net [192.168.1.2]) by gateway.lefort.net (Postfix) with ESMTP id 5D20B152D9; Thu, 30 May 2002 11:13:39 +0200 (CEST) Received: from jsite.lefort.net (localhost [127.0.0.1]) by jsite.lefort.net (Postfix) with SMTP id BE94B22FE7; Thu, 30 May 2002 11:13:33 +0200 (CEST) Date: Thu, 30 May 2002 11:13:33 +0200 From: Jean-Yves Lefort To: Kris Kennaway Cc: freebsd@XtremeDev.com, questions@FreeBSD.ORG Subject: Re: irssi configure script backdoored, affects the build clusters? Message-Id: <20020530111333.3f8762f6.jylefort@brutele.be> In-Reply-To: <20020527013149.C36810@xor.obsecurity.org> References: <20020527004412.C18621-100000@Amber.XtremeDev.com> <20020527013149.C36810@xor.obsecurity.org> X-Mailer: Sylpheed version 0.7.6 (GTK+ 1.2.10; i386-portbld-freebsd4.6) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, 27 May 2002 01:31:50 -0700 Kris Kennaway wrote: > On Mon, May 27, 2002 at 12:47:09AM -0600, FreeBSD user wrote: > > Regarding the bugtraq post of irssi configure script being > > backdoored (see www.irssi.org and the bugtraq post from > > martin@webtech.se), I'm curious as to how this affected the build > > clusters that builds ports? And also, who do I poke/prod reguarding > > this issue? security@freebsd.org? > > I don't think FreeBSD ever shipped the version that was backdoored, > but I haven't looked into it fully. As stated on www.irssi.org, the FreeBSD port used the .bz2 tar file, which wasn't backdoored, instead of the .gz one. Regards, Jean-Yves Lefort -- Jean-Yves Lefort jylefort@brutele.be http://void.adminz.be/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message