Re: CERT Advisory CA-2002-24 Trojan Horse OpenSSH Distribution (fwd)

From: Dag-Erling Smorgrav (
Date: 08/02/02

To: Chris Miller <>
From: Dag-Erling Smorgrav <>
Date: 02 Aug 2002 03:02:28 +0200

Chris Miller <> writes:
> Are we affected by this? I couldn't find bf-test.c in the openssh
> directory in /usr/ports. I'm assuming that since the part of the automagic
> process of building the port involves checking the checksum that we are
> safe, but I thought it best to ask.

We're safe.


Dag-Erling Smorgrav -
To Unsubscribe: send mail to
with "unsubscribe freebsd-security" in the body of the message