sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Re: [SM-Discuss] [ALERT] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution

From: bluebird AT optushome.com.au
To: Dufflebunk <dufflebunk AT dufflebunk.homeip.net>
Cc: sm-grimoire AT lists.ibiblio.org, sm-discuss AT lists.ibiblio.org
Subject: Re: [SM-Discuss] [ALERT] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution
Date: Wed, 9 Oct 2002 13:04:55 +1000

On Tue, Oct 08, 2002 at 10:55:39PM -0400, Dufflebunk wrote:
> Is there an MD5 of the correct or incorrect tarball?
>

http://www.cert.org/advisories/CA-2002-28.html

Verify MD5 checksums

In the absence of PGP, you can use the following MD5 checksums to
verify the integrity of your Sendmail source code distribution:
Correct versions:

73e18ea78b2386b774963c8472cbd309 sendmail.8.12.6.tar.gz
cebe3fa43731b315908f44889d9d2137 sendmail.8.12.6.tar.Z
8b9c78122044f4e4744fc447eeafef34 sendmail.8.12.6.tar.sig

As a matter of good security practice, the CERT/CC encourages users
to verify, whenever possible, the integrity of downloaded software.
For more information, see
http://www.cert.org/incident_notes/IN-2001-06.html

[SM-Discuss] [ALERT] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution, bluebird, 10/08/2002
- Re: [SM-Discuss] [ALERT] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution, Dufflebunk, 10/08/2002
  - Re: [SM-Discuss] [ALERT] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution, bluebird, 10/08/2002
- Re: [SM-Discuss] [ALERT] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution, M.L., 10/09/2002
  - Re: [SM-Discuss] [ALERT] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution, M.L., 10/09/2002