MozillaZine

Full Article Attached Minutes of the mozilla.org Staff Meeting of Monday 17th November 2003

Sunday November 23rd, 2003

The minutes of the mozilla.org staff meeting of Monday 17th November 2003 are now online. Issues discussed include releases, localised builds, the new website, Mozilla Thunderbird tinderboxes and CVS over SSH.

#1 What's this "linux incident"?

by tseelee

Sunday November 23rd, 2003 5:33 PM

I'm slow and dumb. Did someone break in?

#2 Re: What's this "linux incident"?

by AlexBishop

Sunday November 23rd, 2003 5:41 PM

"Did someone break in?"

Yep. http://slashdot.org/articles/03/11/06/058249.shtml

Alex

#3 Re: Re: What's this "linux incident"?

by drathos

Monday November 24th, 2003 8:26 AM

I would change that "Yep" to "Kinda, sorta"..

Someone attempted to get a backdoor into the Linux kernel by putting some code in the public CVS tree. Thing is, it was spotted almost right away and even if it weren't, it wouldn't've gotten into a full release of the kernel. The code was only put into the CVS tree, not the BitKeeper tree that all the releases are built from (including the CVS tree). I'm suprised there's even commit access to the CVS tree since it's supposed to be pull only.