Исходное сообщение
"Сайт wiki.debian.org подвергся взлому" Отправлено тигар, 05-Янв-13 09:11
>> На FreeBSD исправлено почти 4 месяца назад. > Проблема только в том что вон то - другая дырка. А эта > - обход директорий, о ней известно без году неделю. Какие нафиг > 4 месяца? О ней новость едва ли неделю назад была. Subject: FreeBSD wiki offline for a bit Date: Fri, 4 Jan 2013 22:38:53 +0000 Hey, Due to a security issue in the moinmoin wiki software, the FreeBSD wiki will be offline for a bit. I do not yet know if the issue actually has been exploited in the FreeBSD wiki (haven't had the time yet to examine it), but I took the wiki down just in case. Note that even if the software was compromised, it was considered untrusted from the start and as such heavily sandboxed (including jailed) to keep it away from any sensitive FreeBSD.org parts, so there is absolutely no reason to believe a compromise would go any further than the wiki itself. I hope to have the wiki back within 24 hours, assuming not too much gets in the way. For further reference see: http://moinmo.in/SecurityFixes and http://permalink.gmane.org/gmane.linux.debian.devel.announce... . PS. this is entirely unrelated to the 2012 November FreeBSD.org compromise. -- Simon L. B. Nielsen Hat: FreeBSD clusteradm / FreeBSD Security Officer