Puppy Linux Discussion Forum

[scsijon]

Passed on through the Opensuse Forum:

Considering it's seriousness I'm posting it here

regards
scsijon

-------- Original Message --------
Subject: [opensuse-offtopic] Hackers break into Linux kernel home
Date: Fri, 02 Sep 2011 15:45:36 +1000
From: Basil Chupin <blchupin@iinet.net.au>
To: opensuse-offtopic <opensuse-offtopic@opensuse.org>

*MULTIPLE SERVERS* that are part of the Linux kernel.org infrastructure
were affected during a recent intrusion where attackers managed to gain
root access and plant Trojan scripts.

According to an email sent out to the community
<http://pastebin.com/i4LFsQPW> by kernel.org chief administrator John
Hawley, known as warthog9, the incident started with the compromise of a
server referred to as Hera. The personal colocated machine of Linux
developer H Peter Anvin (HPA) and additional kernel.org systems were
also affected.

"Upon some investigation there are a couple of kernel.org boxes,
specifically hera and odin1, with potential pre-cursors on demeter2,
zeus1 and zeus2, that have been hit by this," Hawley wrote.

The intrusion was discovered on 28 August and according to preliminary
findings attackers gained access by using a set of compromised
credentials. They then elevated their privileges to root by exploiting a
zero-day vulnerability that the kernel.org administrators have yet to
identify.

[Full story:]

http://www.theinquirer.net/inquirer/news/2105947/hackers-break-linux-kernel-home?WT.rss_f=&WT.rss_a=Hackers+break+into+Linux+kernel+home

--
Bob Hope's wife: "Where would like to be buried when you die?"
Bob Hope : "Why don't you surprise me!"

[AF Branden]

Someone beat ya to it:

http://www.murga-linux.com/puppy/viewtopic.php?p=559645#559645