From owner-freebsd-security Wed Nov 13 11:26:51 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3ACDD37B406 for ; Wed, 13 Nov 2002 11:26:46 -0800 (PST) Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9097443E3B for ; Wed, 13 Nov 2002 11:26:45 -0800 (PST) (envelope-from cdf.lists@fxp.org) Received: by peitho.fxp.org (Postfix, from userid 1501) id AE5CB13731; Wed, 13 Nov 2002 14:26:44 -0500 (EST) Date: Wed, 13 Nov 2002 14:26:44 -0500 From: Chris Faulhaber To: Lupe Christoph Cc: security@freebsd.org Subject: Re: "Latest libpcap & tcpdump sources from tcpdump.org contain a trojan" Message-ID: <20021113192644.GA42896@peitho.fxp.org> References: <20021113192014.GC1848@lupe-christoph.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="IJpNTDwzlM2Ie8A6" Content-Disposition: inline In-Reply-To: <20021113192014.GC1848@lupe-christoph.de> User-Agent: Mutt/1.4i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --IJpNTDwzlM2Ie8A6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Nov 13, 2002 at 08:20:14PM +0100, Lupe Christoph wrote: > Hi! >=20 > Please read > http://www.hlug.org/modules.php?op=3Dmodload&name=3DNews&file=3Darticle&s= id=3D6&mode=3Dthread&order=3D0&thold=3D0 >=20 Nope, as with all base system sources, tcpdump and libpcap do not use the installed configure scripts for building. In addition, the trojaned tarballs only appeared a few days ago during which time the tcpdump and libpcap sources have not been updated in FreeBSD (not that we use the tarballs for tcpdump/libpcap imports). --=20 Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org --IJpNTDwzlM2Ie8A6 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.0 (FreeBSD) Comment: FreeBSD: The Power To Serve iD8DBQE90qd0ObaG4P6BelARAk6mAJ0aeFn+pPiwn0O5atDRhQ3ElL8s3ACeLwp6 2B1wSaQiLknMTBWuyUUiDxQ= =XjCU -----END PGP SIGNATURE----- --IJpNTDwzlM2Ie8A6-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message