From owner-freebsd-questions  Mon May 27  1:32:34 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from obsecurity.dyndns.org (adsl-64-169-107-187.dsl.lsan03.pacbell.net [64.169.107.187])
	by hub.freebsd.org (Postfix) with ESMTP id E641E37B406
	for <questions@FreeBSD.ORG>; Mon, 27 May 2002 01:31:50 -0700 (PDT)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 54C7966C2B; Mon, 27 May 2002 01:31:50 -0700 (PDT)
Date: Mon, 27 May 2002 01:31:50 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: FreeBSD user <freebsd@XtremeDev.com>
Cc: questions@FreeBSD.ORG
Subject: Re: irssi configure script backdoored, affects the build clusters?
Message-ID: <20020527013149.C36810@xor.obsecurity.org>
References: <20020527004412.C18621-100000@Amber.XtremeDev.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="H8ygTp4AXg6deix2"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <20020527004412.C18621-100000@Amber.XtremeDev.com>; from freebsd@XtremeDev.com on Mon, May 27, 2002 at 12:47:09AM -0600
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--H8ygTp4AXg6deix2
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Mon, May 27, 2002 at 12:47:09AM -0600, FreeBSD user wrote:
> Regarding the bugtraq post of irssi configure script being backdoored (see
> www.irssi.org and the bugtraq post from martin@webtech.se), I'm curious as
> to how this affected the build clusters that builds ports? And also, who
> do I poke/prod reguarding this issue? security@freebsd.org?

I don't think FreeBSD ever shipped the version that was backdoored,
but I haven't looked into it fully.

For the record, the contact address is security-officer@FreeBSD.org

Kris

--H8ygTp4AXg6deix2
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE88e71Wry0BWjoQKURAuZAAKC0jwChg44dzJzB8G0/p1RP6RFqPwCfegp1
oJMD+y+0MpqFFuyICeGi6lc=
=cNg4
-----END PGP SIGNATURE-----

--H8ygTp4AXg6deix2--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message