Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Aug 2003 13:58:10 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        Martin <nakal@web.de>
Cc:        FreeBSD Questions Mailing List <freebsd-questions@freebsd.org>
Subject:   Re: ftp.gnu.org got cracked... how does this affect FreeBSD?
Message-ID:  <20030813205810.GA55550@rot13.obsecurity.org>
In-Reply-To: <1060807840.561.8.camel@klotz.local>
References:  <1060807840.561.8.camel@klotz.local>

next in thread | previous in thread | raw e-mail | index | archive | help

--M9NhX3UHpAaciwkO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Aug 13, 2003 at 10:50:41PM +0200, Martin wrote:
>=20
> http://ftp.gnu.org/MISSING-FILES.README
>=20
> They are still checking the archives and the available checksums.
> It seems that the sources have not been modified.
>=20
> FreeBSD contains some GNU software. How is it handled when=20
> foreign sources are imported?
>=20
> I just want to know to sleep better this night... The ftp-server was
> cracked in March(!)... just imagine that. Lots of things can happen
> in such a long period of time.
>=20
> Martin
>=20
> PS.: Please post to the mailing list, I'm subscribed.

So far there's no evidence that any distfiles were compromised.  For
files in the ports collection, they would have been caught by the md5
checksum.

Kris


--M9NhX3UHpAaciwkO
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/OqZiWry0BWjoQKURAqDiAJ9mrgRSj8HfLSeMWjT+vLRqm3FaXACglZET
1paQxXHh5H67BC7S9lukOf0=
=vt8+
-----END PGP SIGNATURE-----

--M9NhX3UHpAaciwkO--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030813205810.GA55550>