FYI -----Forwarded Message----- From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [ph-freebsd] [OT] [Fwd: [SECURITY] Some Debian Project machines have been compromised] Date: Sat, 22 Nov 2003 04:17:37 +0800
just received this from the bugtraq mailing list this morning. ---------------------------- Original Message ---------------------------- Subject: [SECURITY] Some Debian Project machines have been compromised From: "Martin Schulze" <[EMAIL PROTECTED]> Date: Sat, November 22, 2003 12:46 am To: [EMAIL PROTECTED] -------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory http://www.debian.org/security/ Some Debian Project machines compromised [EMAIL PROTECTED] November 21st, 2003 [EMAIL PROTECTED] - ------------------------------------------------------------------------ Some Debian Project machines have been compromised This is a very unfortunate incident to report about. Some Debian servers were found to have been compromised in the last 30 hours. The archive is not affected by this compromise! The security server is not yet restored and security updates are currently not available. In particular the following machines have been affected: . master (Bug Tracking System) . murphy (mailing lists) . gluck (web, cvs) . klecker (security, non-us, web search, www-master, qa) Some of these services are currently not available as the machines undergo close inspection. Some services have been moved to other machines (www.debian.org for example). The security archive will be verified from trusted sources before it will become available again. Please note that we have recently prepared a new point release for Debian GNU/Linux 3.0 (woody), release 3.0r2. While it has not been announced yet, it has been pushed to our mirrors already. The announcement was scheduled for this morning but had to be postponed. This update has now been checked and it is not affected by the compromise. We apologise for the disruptions of some services over the next few days. We are working on restoring the services and verifying the content of our archives. Contact Information - ------------------- For further information, please visit the Debian web pages at <http://www.debian.org/> or send mail to <[EMAIL PROTECTED]>. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD4DBQE/vkFtW5ql+IAeqTIRApL5AJjT8aptDgGwDV+5diAwFJo9M1lnAKCg46pU D2oP7vcGYBJF0hFSD5YU6Q== =7brj -----END PGP SIGNATURE----- ------------------------ Yahoo! Groups Sponsor ---------------------~--> Buy Ink Cartridges or Refill Kits for your HP, Epson, Canon or Lexmark Printer at MyInks.com. Free s/h on orders $50 or more to the US & Canada. http://www.c1tracking.com/l.asp?cid=5511 http://us.click.yahoo.com/mOAaAA/3exGAA/qnsNAA/sXFolB/TM ---------------------------------------------------------------------~-> To Post a message, send it to: [EMAIL PROTECTED] To Unsubscribe, send a blank message to: [EMAIL PROTECTED] Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ -- Jimmy Lim IT Operation & Support Team Leader Tricom -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
