From owner-freebsd-ports Sun Jan 24 17:41:59 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA23475 for freebsd-ports-outgoing; Sun, 24 Jan 1999 17:41:59 -0800 (PST) (envelope-from owner-freebsd-ports@FreeBSD.ORG) Received: from phoenix.welearn.com.au (phoenix.welearn.com.au [139.130.44.81] (may be forged)) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA23463; Sun, 24 Jan 1999 17:41:51 -0800 (PST) (envelope-from sue@phoenix.welearn.com.au) Received: (from sue@localhost) by phoenix.welearn.com.au (8.9.1/8.9.0) id MAA14725; Mon, 25 Jan 1999 12:41:35 +1100 (EST) Message-ID: <19990125124131.56512@welearn.com.au> Date: Mon, 25 Jan 1999 12:41:31 +1100 From: Sue Blake To: Joseph Koshy Cc: ports@FreeBSD.ORG Subject: Re: tcp wrappers References: <19990125093009.55592@welearn.com.au> <199901250135.RAA02484@freefall.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.88e In-Reply-To: <199901250135.RAA02484@freefall.freebsd.org>; from Joseph Koshy on Sun, Jan 24, 1999 at 05:35:53PM -0800 Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, Jan 24, 1999 at 05:35:53PM -0800, Joseph Koshy wrote: > > > > A CERT advisory just came through which seems to require distifles to > > be collected from a safer location > > http://www.cert.org/advisories/CA-99-01-Trojan-TCP-Wrappers.html > > I think the MD5 checksum would catch this UNLESS the port author > used the trojaned version to build the port :). Unlikely in this case, since it seems to have only happened in the last few days. I was mainly wondering if, now that it's been removed from the normal place, -questions will be bombarded with "why can't it fetch the file?", and a quick change of site in the makefile might be needed. Maybe there's no cause for concern. Freefall was feeling poorly and I couldn't get in to check exactly what goes on in the port first. If it don't matter, it don't matter :-) -- Regards, -*Sue*- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message