Date: Sat, 8 Jun 2002 02:13:16 -0700 From: Kris Kennaway <kris@obsecurity.org> To: John Angelmo <john@veidit.net> Cc: vanilla@FreeBSD.org, ports@FreeBSD.org Subject: Re: FreeBSD Port: irssi-0.8.4 Message-ID: <20020608021316.A10669@xor.obsecurity.org> In-Reply-To: <3D00A4DD.20303@veidit.net>; from john@veidit.net on Fri, Jun 07, 2002 at 02:19:41PM %2B0200 References: <3D00A4DD.20303@veidit.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--9jxsPFA5p3P2qPhR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 07, 2002 at 02:19:41PM +0200, John Angelmo wrote: > is the portversion of irssi patched agains the backdoor? >=20 > otherwise 0.8.4a is out just for that: > http://www.irssi.org/files/irssi-0.8.4a.tar.gz We were never vulnerable. It's our policy to always check the diffs when a port distfile changes for no apparent reason, so it would have been caught if anyone reported the checksum change and requested an update. If the checksum wasn't updated then someone downloading the changed version would receive a warning and the build would not proceed. Kris --9jxsPFA5p3P2qPhR Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9AcqrWry0BWjoQKURAnVwAKDY+s4mbm9MSN9eOgOY20f4OYEYMgCeLTh4 Qly3qj+kMl3tDgF/55Tft7k= =VR8x -----END PGP SIGNATURE----- --9jxsPFA5p3P2qPhR-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020608021316.A10669>