--oC1+HKm2/end4ao3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Aug 01, 2002 at 10:58:21AM -0700, Andrew Gillham wrote:
> On Thu, Aug 01, 2002 at 11:35:50AM +0300, Matthias Scheler wrote:
> >=20
> > Module Name:	pkgsrc
> > Committed By:	tron
> > Date:		Thu Aug  1 08:35:48 UTC 2002
> >=20
> > Modified Files:
> > 	pkgsrc/security/openssh: Makefile
> >=20
> > Log Message:
> > Comment out master sites because the file on "ftp.openbsd.org" and
> > possibly on its mirrors is obviously infected with a trojan. The file
> > on "ftp.netbsd.org" is safe.
>=20
> Wow!  Could we get some more detail on this trojan issue?

tech-security:

 http://mail-index.netbsd.org/tech-security/2002/08/01/0000.html
 http://mail-index.netbsd.org/tech-security/2002/08/01/0001.html

bugtraq:

 http://online.securityfocus.com/archive/1/285490
 http://online.securityfocus.com/archive/1/285492
 http://online.securityfocus.com/archive/1/285554

slashdot:

 http://slashdot.org/article.pl?sid=3D02/08/01/129228&mode=3Dnested&tid=3D1=
72

OpenBSD journal:

 http://deadly.org/article.php3?sid=3D20020801122759


regards,

--=20
-- Lubomir Sedlacik <salo@Xtrmntr.org>   ASCII Ribbon campaign against  /"\=
 --
--                  <salo@silcnet.org>   e-mail in gratuitous HTML and  \ /=
 --
--                                       Microsoft proprietary formats   X =
 --
-- PGPkey: http://Xtrmntr.org/salo.pgp                                  / \=
 --
-- Key Fingerprint: 75B2 2B96 CD75 0385 1C49  39B8 8B08 C30E 54BC 7263     =
 --

--oC1+HKm2/end4ao3
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (NetBSD)

iD8DBQE9SXnBiwjDDlS8cmMRAvvgAKCJ7pHVlyRkn/KPRLepeRw6yXBvJACeJ0Hf
9MnZVg1V/U3uAxBlQqYNJPo=
=bYOV
-----END PGP SIGNATURE-----

--oC1+HKm2/end4ao3--