[gentoo-announce] Gentoo Github Organization hacked.


–000000000000552dea056fba3307
Content-Type: text/plain; charset=”UTF-8″

Today 28 June at approximately 20:20 UTC unknown individuals have gained
control of the Github Gentoo organization, and modified the content of
repositories as well as pages there. We are still working to determine the
exact extent and to regain control of the organization and its
repositories.

All Gentoo code hosted on github should for the moment be considered
compromised. This does NOT affect any code hosted on the Gentoo
infrastructure. Since the master Gentoo ebuild repository is hosted on our
own infrastructure and since Github is only a mirror for it, you are fine
as long as you are using rsync or webrsync from gentoo.org.

Also, the gentoo-mirror repositories including metadata are hosted under a
separate Github organization and likely not affected as well.

All Gentoo commits are signed, and you should verify the integrity of the
signatures when using git.

More updates will follow.

-A

–000000000000552dea056fba3307
Content-Type: text/html; charset=”UTF-8″
Content-Transfer-Encoding: quoted-printable

Today 28 June at approximately 20:20 UTC unknown individua=
ls have gained control of the Github Gentoo organization, and modified the =
content of repositories as well as pages there. We are still working to det=
ermine the exact extent and to regain control of the organization and its r=
epositories.=C2=A0

All Gentoo code hosted on github shou=
ld for the moment be considered compromised. This does NOT affect any code =
hosted on the Gentoo infrastructure. Since the master Gentoo ebuild reposit=
ory is hosted on our own infrastructure and since Github is only a mirror f=
or it, you are fine as long as you are using rsync or webrsync from gentoo.org.

Also, the gentoo-mirror =
repositories including metadata are hosted under a separate Github organiza=
tion and likely not affected as well.

All Gentoo commits are si=
gned, and you should verify the integrity of the signatures when using git.=

More updates will follow.

-A

–000000000000552dea056fba3307–