Gentoo Archives: gentoo-user

From:	Peter Humphrey <peter@××××××××××××.uk>
To:	gentoo-user@l.g.o
Subject:	Re: [gentoo-user] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!
Date:	Fri, 29 Jun 2018 16:33:16
Message-Id:	`12546973.IAyE9UUhgB@peak`
In Reply to:	[gentoo-user] Hostile takeover of our github mirror. Don't use ebuild from there until new warning! by "Francisco Blas Izquierdo Riera (klondike)"

1	On Thursday, 28 June 2018 22:15:36 BST Francisco Blas Izquierdo Riera
2	(klondike) wrote:
3	> Hi!
4	>
5	> I just want to notify that an attacker has taken control of the Gentoo
6	> organization in Github and has among other things replaced the portage
7	> and musl-dev trees with malicious versions of the ebuilds intended to
8	> try removing all of your files.
9	>
10	> Whilst the malicious code shouldn't work as is and GitHub has now
11	> removed the organization, please don't use any ebuild from the GitHub
12	> mirror ontained before 28/06/2018, 18:00 GMT until new warning.
13
14	Does this mean that we're safe to use anything from after your warning?
15
16	--
17	Regards,
18	Peter.

Subject	Author
Re: [gentoo-user] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!	"Francisco Blas Izquierdo Riera (klondike)" <klondike@g.o>