From owner-freebsd-security Thu Aug 1 4:44:53 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8224937B400 for ; Thu, 1 Aug 2002 04:44:50 -0700 (PDT) Received: from nippur.irb.hr (nippur.irb.hr [161.53.128.127]) by mx1.FreeBSD.org (Postfix) with ESMTP id B5E2C43E81 for ; Thu, 1 Aug 2002 04:44:48 -0700 (PDT) (envelope-from mario.pranjic@irb.hr) Received: from localhost (keeper@localhost) by nippur.irb.hr (8.9.3/8.9.3) with ESMTP id NAA26608; Thu, 1 Aug 2002 13:40:56 +0200 (MET DST) Date: Thu, 1 Aug 2002 13:40:56 +0200 (MET DST) From: Mario Pranjic To: Christoph Wegener Cc: Subject: Re: openssh-3.4p1.tar.gz trojaned In-Reply-To: <1TZW96USXWA5PMB982KGRN1VVT72RNOL.3d491cdb@gonzo> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, 1 Aug 2002, Christoph Wegener wrote: > Date: Thu, 01 Aug 2002 13:34:51 +0200 > From: Christoph Wegener > To: Mario Pranjic > Cc: Shunichi Konno , > Mario Pranjic , freebsd-security@FreeBSD.ORG > Subject: Re: openssh-3.4p1.tar.gz trojaned > > Hi, > well as I mentioned in one of my earlier mails, the tarball on the openbsd repositories are exchanged and infected with a trojan. So it is clear > that the version you just downloaded is infected... Of course. I understand that. But, I wanted your opinion about the openssh that installed yesterday (or the day before, not so sure right now). It has the right md5 checksum and no trojan file in tarball. If I got it right, openssh source tarball has changed in past 24 hourhs on ftp.openbsd.org and that one is infected. If so, I installed the clean version before the one with trojan was put on ftp server. We'll see what will the maintainer say about it (dinoex@FreeBSD.org). Mario Pranjic, dipl.ing. sistem administrator Knjiznica, Institut Rudjer Boskovic ------------------------------------- e-mail: mario.pranjic@irb.hr ICQ: 72059629 tel: +385 1 45 60 954 (interni: 1293) ------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message