for those of you who've experienced problems with the debian mirrors, the following might provide a little light on the subject. ----- Forwarded message from Matthew Palmer <mpalmer@xxxxxxxxxx> ----- Date: Fri, 21 Nov 2003 23:43:18 +1100 From: Matthew Palmer <mpalmer@xxxxxxxxxx> Subject: Re: [SLUG] What's up with the Debian Mirrors? To: slug@xxxxxxxxxxx X-MailScanner: Found to be clean X-Spam-Status: No, hits=-4.5 required=2.5 tests=IN_REP_TO,SUBJ_ENDS_IN_Q_MARK version=2.20 X-Spam-Level: On Fri, Nov 21, 2003 at 11:15:17PM +1100, Tom Massey wrote: > Is http://cert.uni-stuttgart.de/files/fw/debian-security-20031121.txt > the official announcement? That is identical to the announcement I saw earlier, yes. I've reproduced it here and signed it, so it can be verified as not being a hoax. - ------------------------------------------------------------------------ The Debian Project http://www.debian.org/ Some Debian Project machines compromised press@xxxxxxxxxx November 21st, 2003 - ------------------------------------------------------------------------ Some Debian Project machines have been compromised This is a very unfortunate incident to report about. Some Debian servers were found to have been compromised in the last 24 hours. The archive is not affected by this compromise! In particular the following machines have been affected: . master (Bug Tracking System) . murphy (mailing lists) . gluck (web, cvs) . klecker (security, non-us, web search, www-master) Some of these services are currently not available as the machines undergo close inspection. Some services have been moved to other machines (www.debian.org for example). The security archive will be verified from trusted sources before it will become available again. Please note that we have recently prepared a new point release for Debian GNU/Linux 3.0 (woody), release 3.0r2. While it has not been announced yet, it has been pushed to our mirrors already. The announcement was scheduled for this morning but had to be postponed. This update has now been checked and it is not affected by the compromise. We apologise for the disruptions of some services over the next few days. We are working on restoring the services and verifying the content of our archives. Contact Information - ------------------- For further information, please visit the Debian web pages at <http://www.debian.org/> or send mail to <press@xxxxxxxxxx>. -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug ----- End forwarded message ----- -- Shaun Oliver "Becareful of the toes u step on today, they maybe connected to the ass you have to kiss tomorrow!" EMAIL: shaun_oliver@xxxxxxxxxxxxxxx ICQ: 76958435 YAHOO: blindman01_2000 MSN: blindman_2001@xxxxxxxxxxx AIM: captain nemo 200 IRC: irc.awesomechat.net:6666 IRCNICK: blindman CHANNELS: #awesomeradio #mircpopup-magic #linux #help #ourworld #audiofile #mauisun _______________________________________________ Blinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/blinux-list