Just recieved this email:
From: Martin SchulzeExpect seeing it on slashdot soon. First Apache, then OpenSSH, then FSF, now Debian. Who is next?Subject: Some Debian Project machines have been compromised To: Debian Announcements Date: Fri, 21 Nov 2003 11:46:19 +0100 Resent-From: debian-announce@lists.debian.org ------------------------------------------------------------------------ The Debian Project http://www.debian.org/ Some Debian Project machines compromised press@debian.org November 21st, 2003 ------------------------------------------------------------------------ Some Debian Project machines have been compromised This is a very unfortunate incident to report about. Some Debian servers were found to have been compromised in the last 24 hours. The archive is not affected by this compromise! In particular the following machines have been affected: . master (Bug Tracking System) . murphy (mailing lists) . gluck (web, cvs) . klecker (security, non-us, web search, www-master)
Update: Story on slashdot.