[geeks] trojan horse in recent openssh (version 3.4 portable 1) (fwd)

[William S.]

A few hours ago I compiled and installed the latest
version of openssl. After that I compiled openssh
using the new headers, etc from the new openssl.
As far as I can tell everything went OK. I just need
to redo some things to make sure I am running the
version I just installed.

I looked and did not find any indication of 'bf-test.c',
which I guess is a good thing.

On Fri, Aug 02, 2002 at 12:49:36AM -0500, Jonathan C. Patschke wrote:
> On Fri, 2 Aug 2002, Jonathan C. Patschke wrote:
> 
> > Oopsie.  More egg-on-face for DeRaadt & co.  Sometimes I'm glad I don't
> > have a habit of upgrading the day that new releases hit the mirrors.
> 
> Self-LART time.  I meant to trim out the C code.
> 

-- 
Bill
Amsterdam, NL