Re: OpenSSH Security Advisory: Trojaned Distribution Files

[Nick Holland <nick@holland-consulting.net>]

Dayton wrote:
> 
> Yeah, but another thing we all should be wondering is, were any OTHER
> files tampered with? How safe is it, for example, for us to pull down
> the patch branch right now?

I can assure you this issue was recognized and considered seconds
after the problem was discovered.

The analysis is going on.  Idle speculation by those not doing work
isn't going to do much besides spread dis/mis information.  And those
DOING work have more important things to do than keep the non-workers
informed right now.

If you want to help, look at the source on the CD.  Look at the source
on the current CVS repositories.  Look for anything that changed in a
bad way.  Yes, that's a biiiig task.

Nick.
-- 
http://www.holland-consulting.net