[mpalmer at debian.org: Re: [SLUG] What's up with the Debian Mirrors?]

[Shaun Oliver]

for those of you who've experienced problems with the debian
mirrors,
the following might provide a little light on the subject.
-----
Forwarded message from Matthew Palmer <mpalmer at debian.org> -----

Date: Fri, 21 Nov 2003 23:43:18 +1100
From: Matthew Palmer <mpalmer at debian.org>
Subject: Re: [SLUG] What's up with the Debian Mirrors?
To: slug at slug.org.au
X-MailScanner: Found to be clean
X-Spam-Status: No, hits=-4.5 required=2.5 tests=IN_REP_TO,SUBJ_ENDS_IN_Q_MARK version=2.20
X-Spam-Level: 

On Fri, Nov 21, 2003 at 11:15:17PM +1100, Tom Massey wrote:
> Is http://cert.uni-stuttgart.de/files/fw/debian-security-20031121.txt
> the official announcement?

That is identical to the announcement I saw earlier, yes.  I've reproduced
it here and signed it, so it can be verified as not being a hoax.

- ------------------------------------------------------------------------
The Debian Project                                http://www.debian.org/
Some Debian Project machines compromised                press at debian.org
November 21st, 2003
- ------------------------------------------------------------------------

Some Debian Project machines have been compromised

This is a very unfortunate incident to report about.  Some Debian
servers were found to have been compromised in the last 24 hours.

The archive is not affected by this compromise!

In particular the following machines have been affected:

  . master (Bug Tracking System)
  . murphy (mailing lists)
  . gluck (web, cvs)
  . klecker (security, non-us, web search, www-master)

Some of these services are currently not available as the machines
undergo close inspection.  Some services have been moved to other
machines (www.debian.org for example).

The security archive will be verified from trusted sources before it
will become available again.

Please note that we have recently prepared a new point release for
Debian GNU/Linux 3.0 (woody), release 3.0r2.  While it has not been
announced yet, it has been pushed to our mirrors already.  The
announcement was scheduled for this morning but had to be postponed.
This update has now been checked and it is not affected by the
compromise.

We apologise for the disruptions of some services over the next few
days.  We are working on restoring the services and verifying the
content of our archives.


Contact Information
- -------------------

For further information, please visit the Debian web pages at
<http://www.debian.org/> or send mail to <press at debian.org>.



-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


----- End forwarded message -----

-- 
Shaun Oliver
"Becareful of the toes u step on today, they maybe connected to the ass you have to kiss tomorrow!"

EMAIL: shaun_oliver at optusnet.com.au
ICQ: 76958435
YAHOO: blindman01_2000
MSN: blindman_2001 at hotmail.com
AIM: captain nemo 200
IRC: irc.awesomechat.net:6666
IRCNICK: blindman
CHANNELS: #awesomeradio #mircpopup-magic #linux #help #ourworld #audiofile #mauisun