Chattanooga
Unix
Gnu
Android
Linux
Users
Group

 

Hot Topics:

Sponsoring:

Kernel.org compromised

From: David White 
------------------------------------------------------
Kernel.org announced today that their site and repo was compromised.
Investigation is still ongoing, but OpenSSH was apparently modified.

http://t.co/tVP88s5

Sent from my iPhone

=============================================================== From: Dave Brockman ------------------------------------------------------ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 "While we currently believe that the source code repositories were unaffected, we are in the process of verifying this and taking steps to enhance security across the kernel.org infrastructure." OpenSSH files running live on the server in question were modified. No indication any sources in any repositories were affected. http://kernel.org/ Regards, dtb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk5fAXcACgkQABP1RO+tr2T9WACeOGTBt24dNBM5+JHAq3LLHZ84 ftYAni/eOcYTmkW7Vzx+BYnMB0zNdlsI =iynl -----END PGP SIGNATURE-----

=============================================================== From: Ed King ------------------------------------------------------ I pray that the job title database was not compromised ----- Original Message ---- From: David White To: CHUGALUG Sent: Wed, August 31, 2011 11:35:48 PM Subject: [Chugalug] Kernel.org compromised Kernel.org announced today that their site and repo was compromised. Investigation is still ongoing, but OpenSSH was apparently modified. http://t.co/tVP88s5 Sent from my iPhone

=============================================================== From: Adam Jimerson ------------------------------------------------------ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It is nice to know that they contacted the US and European police asking them to help with the investigation. Dave Brockman wrote:

=============================================================== From: David White ------------------------------------------------------ Obviously I didn't read the actual announcement. I was on my way to sleep when I saw the 3rd party post from sans isc. Sent from my iPhone