[plug] Beware
Rob Davies
rob at rjdarts.com
Mon Nov 24 13:07:11 WST 2003
Morning all,
Found this article on news server this morning after repairing over
weekend and bringing back online.
Appologies if already been published on mailing-list, but I have no
record on mailing servers so thought I would let you all know.
Subject: Some Debian Project machines have been compromised
From: Martin Schulze <joey at infodrom.org>
Newsgroups: linux.debian.announce
Date: Fri, 21 Nov 2003 12:40:12 +0100
------------------------------------------------------------------------
The Debian Project http://www.debian.org/
Some Debian Project machines compromised press at debian.org
November 21st, 2003
------------------------------------------------------------------------
Some Debian Project machines have been compromised
This is a very unfortunate incident to report about. Some Debian
servers were found to have been compromised in the last 24 hours.
The archive is not affected by this compromise!
In particular the following machines have been affected:
. master (Bug Tracking System)
. murphy (mailing lists)
. gluck (web, cvs)
. klecker (security, non-us, web search, www-master)
Some of these services are currently not available as the machines
undergo close inspection. Some services have been moved to other
machines (www.debian.org for example).
The security archive will be verified from trusted sources before it
will become available again.
Please note that we have recently prepared a new point release for
Debian GNU/Linux 3.0 (woody), release 3.0r2. While it has not been
announced yet, it has been pushed to our mirrors already. The
announcement was scheduled for this morning but had to be postponed.
This update has now been checked and it is not affected by the
compromise.
We apologise for the disruptions of some services over the next few
days. We are working on restoring the services and verifying the
content of our archives.
--
Rob Davies
rob at rjdarts.com
' To converse is one strategy that separates us, from the Apes.'
_______________________________________________
plug mailing list
plug at plug.linux.org.au
http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug
More information about the plug
mailing list