ftp.gnu.org was compromised, probably in March. They don't *think* that any software was tampered with... See ftp://ftp.gnu.org/MISSING-FILES.README for details. --Steve Bellovin, http://www.research.att.com/~smb