openssh-3.4p1.tar.gz on ftp.openbsd.org changing rather than frozen

[Wojtek Pilorz]

On 1 Aug 2002, Jan IVEN wrote:

> Date: 01 Aug 2002 12:53:19 +0200
> From: Jan IVEN <jan.iven at cern.ch>
> To: Wojtek Pilorz <wpilorz at bdk.pl>
> Cc: openssh-unix-dev at mindrot.org
> Subject: Re: openssh-3.4p1.tar.gz on ftp.openbsd.org changing rather than
>     frozen
> 
> >>>>> "WP" == Wojtek Pilorz <wpilorz at bdk.pl> writes:
> 
>  WP> I have seen that file
>  WP> ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
>  WP> is continuosly changing.
>  WP> This seems strange to me as I expected it should be a 'frozen' file;
>  WP> The signature and diff file are still dated Jun 26.
> 
>  WP> I am wondering whether this is intentional.
> 
> According to 
> 
> http://www.mavetju.org/weblog/weblog.php
> 
> the tar file may be trojaned (or do the freebsd people keep a mirror,
> and that one has been trojaned)? 
The file on original address given above has been trojaned.

> 
> Regards
> Jan
>