sm-grimoire AT lists.ibiblio.org
Subject: Discussion of Spells and Grimoire items
List archive
- From: Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>
- To: "Sergey A. Lipnevich" <sergeyli AT pisem.net>
- Cc: SourceMage Grimoire <sm-grimoire AT lists.ibiblio.org>
- Subject: Re: [SM-Grimoire]OpenSSH trojan....
- Date: Thu, 1 Aug 2002 22:08:04 -0700
thanks, my checksum matches up between yours, the tarball and the spell,
so thats good, the timestamp on openssh happens to be the 12th, and it
was apparently just recompiled because openssl was rebuilt. Was openssl
compromised to our knowledge?
I want to put a word of support in on the move to make all the checksums
to point to the .tar file, that seems like the sort of thing that can be
scripted and done automatically. then its up to sorcery to check against
the proper file.
On Fri, Aug 02, 2002 at 12:56:21AM -0400, Sergey A. Lipnevich wrote:
> Compare spell's checksum with the one of
> /var/spool/sorcery/openssh-3.4p1.tar.gz and see for yourself. If you
> didn't have this tarball in the spool, trojaned tarball had been
> promptly summoned for yor from their mirrors :-(... The correct one is:
> 459c1d0262e939d6432f193c7a4ba8a8
>
> Andrew Stitt wrote:
>
> >so my logs are showing that my sorcery update updated ssl, and thus ssh
> >on the morning of the 31st, however theres nothing about a bad md5sum
> >anywhere, do i still need to rebuild my system from scratch?
> >
> >*sighs at the thought of doing anything after working for a full 12 hour
> >day*
> >
> >On Fri, Aug 02, 2002 at 12:30:16AM -0400, Sergey A. Lipnevich wrote:
> >
> >
>
>
-
[SM-Grimoire]OpenSSH trojan....,
Robin Cook, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Sergey A. Lipnevich, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Andrew Stitt, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Sergey A. Lipnevich, 08/02/2002
- Re: [SM-Grimoire]OpenSSH trojan...., Andrew Stitt, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Dufflebunk, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Jon Svendsen, 08/02/2002
- Re: [SM-Grimoire]OpenSSH trojan...., Dufflebunk, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Jon Svendsen, 08/02/2002
- Re: [SM-Grimoire]OpenSSH trojan...., Casey Harkins, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Sergey A. Lipnevich, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Robin, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Casey Harkins, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Andrew Stitt, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Julian v. Bock, 08/05/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Casey Harkins, 08/05/2002
- Re: [SM-Grimoire]OpenSSH trojan...., Mads Laursen, 08/05/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Casey Harkins, 08/05/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Julian v. Bock, 08/05/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Andrew Stitt, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Casey Harkins, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Andrew Stitt, 08/02/2002
-
Re: [SM-Grimoire]OpenSSH trojan....,
Sergey A. Lipnevich, 08/02/2002
Archive powered by MHonArc 2.6.24.