GNU网站被入侵

观看地址,请猛击http://savannah.gnu.org/

Savannah downtime

Savannah is currently down - details to follow.

There's been a SQL injection leading to leaking of encrypted account passwords, some of them discovered by brute-force attack, leading in turn to project membership access.
We're reinstalling the system and restoring the data from a safe backup, November 23th circa 12:00 GMT.
Please prepare to recommit your changes since that date.
While effort was made in the past to fix injection vulnerabilities in the Savane2 legacy codebase, it appears this was not enough :/

No firm ETA for the return online yet (but during the week).

你可能感兴趣的:(网站,gnu,入侵)