Bugtraq mailing list archives
Re: heanet.dl.sourceforge.net hacked?
From: Rainer Duffner <rainer () ultra-secure de>
Date: Wed, 30 Apr 2008 18:23:14 +0200
Michael Scheidell schrieb:
or have wrong file?in attempting to upgrade png (due to security problem), we tried to pull from sourceforge mirrors. (note below, libpng says file size for libpng-1.2.27.tar.bz2 with scripts should be 641193) heanet has a bigger file.other sourceforge.net mirrors have it right.Was heanet.dl hacked? are some people downloading a trojanized version of png?all attempts (in the past) to contact sourceforge had been useless. http://www.libpng.org/pub/png/libpng.htmlAttempting to fetch from http://heanet.dl.sourceforge.net/sourceforge/libpng/. fetch: http://heanet.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.27.tar.bz2: size mismatch: expected 641193, actual 804821
I now get identical files (well, at least from switch.ch and heanet and surfnet.
cheers, Rainer
Current thread:
- heanet.dl.sourceforge.net hacked? Michael Scheidell (Apr 30)
- Re: heanet.dl.sourceforge.net hacked? Pieter de Boer (Apr 30)
- Re: heanet.dl.sourceforge.net hacked? Rainer Duffner (Apr 30)
- Re: heanet.dl.sourceforge.net hacked? Marshall Eubanks (Apr 30)
- <Possible follow-ups>
- Re: heanet.dl.sourceforge.net hacked? mirrors (Apr 30)
- Re: Re: heanet.dl.sourceforge.net hacked? securityfocus . com (Apr 30)