***DEBIAN USERS READ THIS***

[pbharris]

It seems the debian server infrastructure has been comprised. Do not apt-get anything from the official security servers right now. And take a very close look at anything that you installed from there during the last 2 days. Here's the official announcement:

http://cert.uni-stuttgart.de/files/f...y-20031121.txt

[Praetorian]

Poor Debian. Is it okay for me to apt-get crap if I'm using Sid? I'd assume it was since I don't use the security servers anyhow. Oh well, I'll do it anyway and see what happens.

Good luck Debian!

[TOAD6147]

...debian server infrastructure has been comprised.

What exactly do they mean by "compromised"?

[jkrohn]

MEaning the machines have been comprimised. Meaning that someone had complete unauthorized access and it is unsure what they did. Could be nothing, could be inserting backdoors into packages. Unknown.

It should still be perfectly fine to use apt-get though.

In particular the following machines have been affected:

. master (Bug Tracking System)
. murphy (mailing lists)
. gluck (web, cvs)
. klecker (security, non-us, web search, www-master)

Some of these services are currently not available as the machines
undergo close inspection. Some services have been moved to other
machines (www.debian.org for example).

The security archive will be verified from trusted sources before it
will become available again.

Jkrohn

[lynchmob]

I just did a test install of the Debian-based distro called Mepis.It's a Live-on-CD that can be installed to a hard drive from the KDE desktop,which was the main reason I installed it to a spare drive tray I had:I wanted to see how ithe install went without having to leave X.
Anyway,not knowing about the servers being hacked on at Debian,I ran apt-get update; it updated about 3-4 MB of stuff but would not install any security-related updates.It said to run apt-get update at a later time.
So I guess I might have a little lab rat on my hands
lynch

[nochay]

could this have been something SCO did? Seriously. They are pretty petty.

I hope debian is okay Hang in there.

Dane