No subject

[bogus at does.not.exist.com]

> Okay, I just checked and the MD5 checksum for my package is:
>>MD5 (openssh-3.4p1.tar.gz) = 6fd8541cec491c2262fbebcdee7e83bb
>>Which doesn't match either the good version, or the trojan version.
>>I downloaded this version on July 23rd if that makes any difference.
>>Does anybody know what that means?
> 
> 
> Unpack the archive and look inside the extracted diretory for the file
> openbsd-compat/bf-test.c - if it's there you have the backdoored
> version. 
> 
> Important: Check the freshly unpacked archive only as the backdoor
> deletes itself during the compile run to escape early detection.
> 
> Regards,
>        Alex.

Regards, 
Tim