[LUGOS-SEC] Fwd: openssh-3.4p1.tar.gz distribution recently trojaned

[Matej Zerovnik - LeVaK]

Kolikor jaz vem je bil hacknen samo ftp.openbsd.org in če si od tam pobral 
openssh je možno da si pobral tistega z trojancam... Preveri MD5 sourca.. To 
je vse kar ti lahko recem:)

This is the md5 checksum of the openssh-3.4p1.tar.gz in the FreeBSD
ports system:
    MD5 (openssh-3.4p1.tar.gz) = 459c1d0262e939d6432f193c7a4ba8a8

This is the md5 checksum of the trojaned openssh-3.4p1.tar.gz:
    MD5 (openssh-3.4p1.tar.gz) = 3ac9bc346d736b4a51d676faa2a08a57

LeVaK