[buug] Gentoo, Bluecurve and Linux too!
Nick Moffitt
nick at zork.net
Fri Oct 18 17:49:15 PDT 2002
begin Aaron T Porter quotation:
> In fact, the OpenSSH trojan was a compile time exploit -- building
> your own SSH was the only way to get hit by that, a binary package
> would have been safe!
And it was discovered because the source-based packaging
system in OpenBSD detected a checksum mismatch on the upstream
tarballs.
--
A: No.
Q: Should I include quotations after my reply?
More information about the buug
mailing list