Cliped from the latest CERT.org warning list:
-----------------------------------------------------------------------------------------------
"I. Description
The  CERT/CC  has received confirmation that some copies of the source
code  for  the  Sendmail  package have been modified by an intruder to
contain a Trojan horse.
The following files were modified to include the malicious code:
sendmail.8.12.6.tar.Z
sendmail.8.12.6.tar.gz
These  files  began  to  appear  in  downloads  from  the  FTP  server
ftp.sendmail.org  on  or  around  September  28,  2002.  The  Sendmail
development  team  disabled  the  compromised FTP server on October 6,
2002  at  approximately  22:15  PDT.  It  does  not appear that copies
downloaded  via  HTTP contained the Trojan horse; however, the CERT/CC
encourages  users  who  may  have  downloaded the source code via HTTP
during  this  time  period  to take the steps outlined in the Solution
section as a precautionary measure."
OK, it's now time to work out the PGP securing of apt repository traffic. I've never gotten anything but "sitename.whatever will not be authenticated" until running Redhat 8.0 when I get something about having "No Key" for various files.
What's it take to ensure we're covered against this kind of childish/moronic/Microsoft-era problems?
------------------------------------------------------------------------
Brian Fahrländer              Linux Zealot, Conservative, and Technomad
Evansville, IN                    My Voyage: http://www.CounterMoon.com
ICQ  5119262
------------------------------------------------------------------------
angegangen, Schlange-Hüften, sein es ganz rüber jetzt. Bügel innen fest,
weil es eine lange, süsse Fahrt ist.
_______________________________________________
RPM-List mailing list <RPM-List@freshrpms.net>
http://lists.freshrpms.net/mailman/listinfo/rpm-list

from localhost (jalapeno [127.0.0.1])
	by spamassassin.taint.org (Postfix) with ESMTP id 1C65916F1F
	for <zzz@localhost>; Wed,  9 Oct 2002 10:51:25 +0100 (IST)
from jalapeno [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for zzz@localhost (single-drop); Wed, 09 Oct 2002 10:51:25 +0100 (IST)
from egwn.net (auth02.nl.egwn.net [193.172.5.4]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g996IjK22331 for
    <zzz-rpm@spamassassin.taint.org>; Wed, 9 Oct 2002 07:18:46 +0100
from mta6.snfc21.pbi.net (mta6.snfc21.pbi.net [206.13.28.240])
    by egwn.net (8.11.6/8.11.6/EGWN) with ESMTP id g996FAf08636 for
    <rpm-list@freshrpms.net>; Wed, 9 Oct 2002 08:15:10 +0200
from eecs.berkeley.edu ([63.192.217.110]) by mta6.snfc21.pbi.net
    (iPlanet Messaging Server 5.1 (built May  7 2001)) with ESMTP id
    <0H3P00AM6AP7QI@mta6.snfc21.pbi.net> for rpm-list@freshrpms.net;
    Tue, 08 Oct 2002 23:15:08 -0700 (PDT)
From rpm-list-admin@freshrpms.net  Wed Oct  9 10:51:58 2002