Jerome posts:
What happens to www.debian.org ?
Someone has cracked all the servers of the Debian Project. There has been a severe security mishap and guys should uninstall all stuff downloaded and installed in the past 2 days. Please do not apt-get anything right now! Please wait till an `official' release happens!
I just updated my Woody box yesterday, and these are the pakcages that were updated:
[UPGRADE] bsdutils 1:2.11n-4 -> 1:2.11n-7 [UPGRADE] console-data 1999.08.29-24 -> 1999.08.29-24.2 [UPGRADE] debianutils 1.16 -> 1.16.2woody1 [UPGRADE] gnupg 1.0.6-3 -> 1.0.6-4 [UPGRADE] mount 2.11n-4 -> 2.11n-7 [UPGRADE] procps 1:2.0.7-8 -> 1:2.0.7-8.woody1 [UPGRADE] shorewall 1.2.12-1 -> 1.2.12-2 [UPGRADE] util-linux 2.11n-4 -> 2.11n-7 [UPGRADE] util-linux-locales 2.11n-4 -> 2.11n-7 [UPGRADE] zlib1g 1:1.1.4-1 -> 1:1.1.4-1.0woody0
The odd thing is that they downloaded from stable, instead of stable/updates. I also downloaded chkrootkit from the upstream site, and it came out clean. Should I worry yet?
-Roberto
pgp00000.pgp
Description: PGP signature