On Dec 2, 2010, at 1:22 PM, Ivan Klymenko wrote:
> What do you think is it worth to pay attention to these events:
> http://sourceforge.net/mailarchive/message.php?msg_name=alpine.DEB.2.00.1012011542220.12930%40familiar.castaglia.org
> 
> and that in this case needs to be done with the port ftp/proftpd itself?

Presumably/hopefully, the proftpd tarball which contained the backdoor would 
fail to match the distinfo for the port:

SHA256 (proftpd-1.3.3c.tar.bz2) = 
ea7f02e21f81e6ce79ebde8bbbd334bd269a039ac9137196a35309f791b24db1
SIZE (proftpd-1.3.3c.tar.bz2) = 4166609

Checking, the tarball you now fetch is the one which matches their md5 and 
GnuPG signing from the link above...

Regards,
-- 
-Chuck

_______________________________________________
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Reply via email to