Re: kernel.org compromised

2011-09-03 Thread Andreas Barth
* Joerg Jaspert (jo...@debian.org) [110903 12:44]: > > > Yeah, yeah. We've beaten that horse to death, and our side lost. I also > > advocate that all debs should be signed, but that was not the will of the > > ftp-masters the last time the issue was up for discussion. > > Thats wrong. > Since

Re: kernel.org compromised

2011-09-03 Thread Joerg Jaspert
> Yeah, yeah. We've beaten that horse to death, and our side lost. I also > advocate that all debs should be signed, but that was not the will of the > ftp-masters the last time the issue was up for discussion. Thats wrong. Since 03 Aug 2008 at least. See http://bugs.debian.org/cgi-bin/bugrepo

Re: kernel.org compromised

2011-09-02 Thread Henrique de Moraes Holschuh
On Fri, 02 Sep 2011, Philipp Kern wrote: > On 2011-09-02, Henrique de Moraes Holschuh wrote: > > On Fri, 02 Sep 2011, Bastian Blank wrote: > >> On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh > >> wrote: > >> > Our kernels are not a problem. The Debian mirror in mirrors.ker

Re: kernel.org compromised

2011-09-02 Thread Philipp Kern
On 2011-09-02, Henrique de Moraes Holschuh wrote: > On Fri, 02 Sep 2011, Bastian Blank wrote: >> On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh wrote: >> > Our kernels are not a problem. The Debian mirror in mirrors.kernel.org, >> > on the other hand... While the apt signa

Re: kernel.org compromised

2011-09-02 Thread Henrique de Moraes Holschuh
On Fri, 02 Sep 2011, Bastian Blank wrote: > On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh wrote: > > Our kernels are not a problem. The Debian mirror in mirrors.kernel.org, > > on the other hand... While the apt signature will protect users > > downloading packages through

Re: kernel.org compromised

2011-09-02 Thread Bastian Blank
On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh wrote: > Our kernels are not a problem. The Debian mirror in mirrors.kernel.org, > on the other hand... While the apt signature will protect users > downloading packages through the package manager, users that get binary > pack

Re: kernel.org compromised

2011-09-01 Thread Henrique de Moraes Holschuh
(debian-kernel dropped from CC, since our kernels have already been reported to be safe elsewhere in the thread). On Thu, 01 Sep 2011, Christoph Anton Mitterer wrote: > Any knowledge how far Debian's kernels and sources are concerned by this? > Do you guys take them from git, or from the kernel.or

Re: kernel.org compromised

2011-09-01 Thread Christoph Anton Mitterer
On Thu, 1 Sep 2011 16:03:52 +0100, Ben Hutchings wrote: >> There was apparently a security break in on kernel.org >> https://www.kernel.org/#news > I am well aware of this as a kernel.org user. Is suspected this ;) ... >> Any knowledge how far Debian's kernels and sources are concerned by this?

Re: kernel.org compromised

2011-09-01 Thread Ben Hutchings
On Thu, Sep 01, 2011 at 11:56:27AM +, Christoph Anton Mitterer wrote: > Hi. > > CCing this to d-d, as it's perhaps of more general interest: > > There was apparently a security break in on kernel.org > https://www.kernel.org/#news I am well aware of this as a kernel.org user. > Any knowledg

kernel.org compromised

2011-09-01 Thread Christoph Anton Mitterer
Hi. CCing this to d-d, as it's perhaps of more general interest: There was apparently a security break in on kernel.org https://www.kernel.org/#news Any knowledge how far Debian's kernels and sources are concerned by this? Do you guys take them from git, or from the kernel.org tar balls. How d