Debian servers have been hacked

IlyaM on 2003-11-21T12:07:55

Just recieved this email:

From: Martin Schulze 
Subject: Some Debian Project machines have been compromised
To: Debian Announcements 
Date: Fri, 21 Nov 2003 11:46:19 +0100
Resent-From: debian-announce@lists.debian.org

------------------------------------------------------------------------
The Debian Project                                http://www.debian.org/
Some Debian Project machines compromised                press@debian.org
November 21st, 2003
------------------------------------------------------------------------

Some Debian Project machines have been compromised

This is a very unfortunate incident to report about.  Some Debian
servers were found to have been compromised in the last 24 hours.

The archive is not affected by this compromise!

In particular the following machines have been affected:

  . master (Bug Tracking System)
  . murphy (mailing lists)
  . gluck (web, cvs)
  . klecker (security, non-us, web search, www-master)
Expect seeing it on slashdot soon. First Apache, then OpenSSH, then FSF, now Debian. Who is next?

Update: Story on slashdot.