Mailinglist Archive: opensuse-announce (5 mails)

[Adrian Schroeter <adrian@xxxxxxx>]

Dear openSUSE community,

For 45 minutes on October 1st, the openSUSE website was defaced by an Internet 
attacker. The attacker exploited a vulnerability with a blogging application 
that was running on the same server as the www.openSUSE.org home page. The 
servers were taken offline when the attack was detected and were replaced 
with new servers so that the attack could be studied in more detail by our 
forensics team. 

We apologize for any inconvenience we may have caused while bringing the new 
servers on line. 

Our distribution, SUSE Linux, the SUSE Linux build system or any other 
services below the opensuse.org domain were not exposed to attack at any 
time. The wiki was the only openSUSE service that was compromised.  We have 
restored the wiki and are back to business as usual.  

Thank you for your continued support

The openSUSE team

-- 

Adrian Schroeter
Project Manager openSUSE
SUSE Linux Products GmbH,  Maxfeldstr. 5, 90409 Nuernberg, Germany
email: adrian@xxxxxxx