com web/php: Security note: archive/archive.xml archive/entries/2011-03-19-1.xml

Commit: d7ddf51ed1fccd299724d548690ffe83e86abfc7 Author: Rasmus Lerdorf <rasmus@php.net> Sat, 19 Mar 2011 19:00:33 +0000 Parents: 0aa221662b108f44d3a9d50980be18fed8c185a5 Branches: master Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=d7ddf51ed1fccd299724d548690ffe83e86abfc7 Log: Security note Changed paths: M archive/archive.xml A archive/entries/2011-03-19-1.xml Diff: diff --git a/archive/archive.xml b/archive/archive.xml index 6414caa..4e440c1 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2011-03-19-1.xml"/> <xi:include href="entries/2011-03-17-1.xml"/> <xi:include href="entries/2011-03-03-1.xml"/> <xi:include href="entries/2011-01-06-1.xml"/> diff --git a/archive/entries/2011-03-19-1..xml b/archive/entries/2011-03-19-1.xml new file mode 100644 index 0000000..4d9c734 --- /dev/null +++ b/archive/entries/2011-03-19-1.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>php.net security notice</title> + <id>http://www.php.net/archive/2011.php#id2011-03-19-2</id> + <published>2011-03-19T11:20:04-07:00</published> + <updated>2011-03-19T11:20:04-07:00</updated> + <category term="frontpage" label="PHP.net frontpage news"/> + <link href="http://www.php.net/index.php#id2011-03-19-2" rel="alternate" type="text/html"/> + <link href="http://www.php.net/archive/2011.php#id2011-03-19-2" rel="via" type="text/html"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The wiki.php.net box was compromised and the attackers were able to + collect wiki account credentials. No other machines in the php.net + infrastructure appear to have been affected. Our biggest concern is, + of course, the integrity of our source code. We did an extensive code + audit and looked at every commit since 5.3.5 to make sure that no stolen + accounts were used to inject anything malicious.. Nothing was found. + The compromised machine has been wiped and we are forcing a password + change for all svn accounts.</p> + + <p>We are still investigating the details of the attack which combined a + vulnerability in the Wiki software with a Linux root exploit.</p> + </div> + </content> +</entry>