Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
Compromise of gluck.debian.org
Posted by Philipp Esselbach on: 07/13/2006 10:06 AM [ Print | 0 comment(s) ]
From the Debian mailing list:
Early this morning we discovered that someone had managed to compromise gluck.debian.org. We've taken the machine offline and are preparing to reinstall it. This means the following debian.org services are currently offline:
cvs, ddtp, lintian, people, popcon, planet, ports, release
Based on the results of our initial investigation we've locked down most other debian.org machines, limiting access to DSA only, until they can be fixed for what we suspect is the exploit used to compromise gluck.
We're still investigating exactly what happened and the extent of the damage. We'll post more info as soon as we reasonably can.
- --
James
cvs, ddtp, lintian, people, popcon, planet, ports, release
Based on the results of our initial investigation we've locked down most other debian.org machines, limiting access to DSA only, until they can be fixed for what we suspect is the exploit used to compromise gluck.
We're still investigating exactly what happened and the extent of the damage. We'll post more info as soon as we reasonably can.
- --
James
Related Threads
12/03/2003 08:00 PM: rsync.gentoo.org rotation server compromised (0) by spunz