newsNews: Savannah Commit Access Nearly Restored

 
 
Latest News
Savannah https SSL Certificates Updated posted by rwp, Thu 06 Mar 2014 09:11:43 AM UTC - 0 replies
Bazaar upgraded posted by mjflick, Tue 22 May 2012 02:49:11 AM UTC - 0 replies
git / cgit updated posted by mjflick, Fri 09 Dec 2011 12:13:52 AM UTC - 0 replies
New Project Submissions Re-enabled posted by mjflick, Tue 22 Nov 2011 09:52:31 PM UTC - 0 replies
new project submissions disabled posted by karl, Thu 10 Nov 2011 12:27:27 AM UTC - 0 replies
[172 news in archive]

Savannah Commit Access Nearly Restored

Item posted by Bradley M. Kuhn <bkuhn> on Tue 23 Dec 2003 12:49:31 AM UTC.

A GPG-signed text file of this statement is available at:

http://savannah.gnu.org/statements/almost-done.txt.asc

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thursday 18 December 2003, 10:00 EST

As most of you know, we have now provided the RCS files for the projects
for those of you that want to work independently. For project FOO, you
can find the RCS files at:

ftp://ftp.gnu.org/savannah/cvs/FOO-cvs-latest.tar.gz

And:
ftp://ftp.gnu.org/savannah/cvs/md5sums.asc

has md5sums for all the files in that directory.

We are working today to finish securing various parts of the savannah
system infrastructure, and hope to have the software running again by the
end of the day on this Friday. (Although there could be delays, we have
set this as a very serious deadline.)

We have discovered many possible ways that someone could have used to gain
root access illegitimately to the system. These problems were primarily
due to configuration issues and bugs in various custom scripts installed
on the system. We are completing now an audit of the Savannah software
before placing it back into production. We have also used chroot
environments and other methods to tighten how much access is provided to
the system for project management.

We appreciate your patience and will work hard to meet our targeted roll
out for tomorrow.

Sincerely,

Bradley M. Kuhn
Executive Director, Free Software Foundation
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/4c9x53XjJNtBs4cRAv5rAJ9EJmuGhSQJPzwvD4dmiyWyTFTHfwCaAkh8
FOQesuacZ1ZsKA/GcHMc7o8=
=XjE0
-----END PGP SIGNATURE-----

Comments:

No messages in Savannah Commit Access Nearly Restored

 

Back to the top


Powered by Savane 3.1-cleanup