openssh-3.4p1.tar.gz on ftp.openbsd.org changing rather than frozen

Jan IVEN jan.iven at cern.ch
Thu Aug 1 20:53:19 EST 2002


>>>>> "WP" == Wojtek Pilorz <wpilorz at bdk.pl> writes:

 WP> I have seen that file
 WP> ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
 WP> is continuosly changing.
 WP> This seems strange to me as I expected it should be a 'frozen' file;
 WP> The signature and diff file are still dated Jun 26.

 WP> I am wondering whether this is intentional.

According to 

http://www.mavetju.org/weblog/weblog.php

the tar file may be trojaned (or do the freebsd people keep a mirror,
and that one has been trojaned)? 

Regards
Jan



More information about the openssh-unix-dev mailing list