Re: [gentoo-dev] The Free Software Foundation's FTP site at ftp.gnu.org has been"compromised"

[Fred Van Andel <fava@gentoo.org>]

Fred Van Andel <fava@gentoo.org> wrote:
(08/13/2003 11:22)

>Ned Ludd <solar@gentoo.org> wrote:
>(08/13/2003 09:56)
>
>>After reading that it would be great if one of our list readers could
>>gather all the md5sums for matching packages that we support.
>>
>>http://ftp.gnu.org/MISSING-FILES
>
>The current distfile mirrors currently contain about 90 of the mentioned files, they are listed below.  I am currently checking the the md5 in portage against the ones that I calculated about a month ago. If someone could check the dates to see how many of these files arrived on our system before mid march we could rule them safe.

I am talking to myself here but whatever.

All the MD5's that I calculated about a month ago match the MD5's that are given in portage (which would have been created at the time the ebuild was created).  This does not mean that those files are safe, it just means they have not been altered between the ebuild creation and a month ago   If the MD5's were different we would need to do some very carefull checking.

I dont have time now (I am at work) but can someone check the dates of the affected files to see if they are potentially suspect?

Fred Van Andel
fava@gentoo.org
GPG KeyID: 76526AD599455482  
GPG fingerprint: 64E4 4BAB 9C99 D565 3E3C F5D0 7652 6AD5 9945 5482


--
gentoo-dev@gentoo.org mailing list