Skip to Content.
Sympa Menu

sm-grimoire - Re: [SM-Grimoire]OpenSSH trojan....

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>
  • To: "Sergey A. Lipnevich" <sergeyli AT pisem.net>
  • Cc: SourceMage Grimoire <sm-grimoire AT lists.ibiblio.org>
  • Subject: Re: [SM-Grimoire]OpenSSH trojan....
  • Date: Thu, 1 Aug 2002 22:08:04 -0700

thanks, my checksum matches up between yours, the tarball and the spell,
so thats good, the timestamp on openssh happens to be the 12th, and it
was apparently just recompiled because openssl was rebuilt. Was openssl
compromised to our knowledge?

I want to put a word of support in on the move to make all the checksums
to point to the .tar file, that seems like the sort of thing that can be
scripted and done automatically. then its up to sorcery to check against
the proper file.

On Fri, Aug 02, 2002 at 12:56:21AM -0400, Sergey A. Lipnevich wrote:
> Compare spell's checksum with the one of
> /var/spool/sorcery/openssh-3.4p1.tar.gz and see for yourself. If you
> didn't have this tarball in the spool, trojaned tarball had been
> promptly summoned for yor from their mirrors :-(... The correct one is:
> 459c1d0262e939d6432f193c7a4ba8a8
>
> Andrew Stitt wrote:
>
> >so my logs are showing that my sorcery update updated ssl, and thus ssh
> >on the morning of the 31st, however theres nothing about a bad md5sum
> >anywhere, do i still need to rebuild my system from scratch?
> >
> >*sighs at the thought of doing anything after working for a full 12 hour
> >day*
> >
> >On Fri, Aug 02, 2002 at 12:30:16AM -0400, Sergey A. Lipnevich wrote:
> >
> >
>
>




Archive powered by MHonArc 2.6.24.

Top of Page