Nov
19
FreeBSD Security Incident
As many of you are now aware, part of the FreeBSD build infrastructure was compromised recently. Many people have been contacting us asking how this relates to PC-BSD users. We currently locally compile and distribute all of our own packages, and at this time it looks like nothing on the PC-BSD side was impacted.
However if you are a power-user and have been manually using pkg_add to install packages from the FreeBSD package cluster, you may wish to remove these packages and rebuild from source. For more details regarding the security compromise, please take a look at the official FreeBSD page.
Trackback from your site.
Comments (5)
Thanks a lot Dru, Kris and everyone else.
Now why would they tell Power-Users to rebuild from source if “nothing was impacted”. I smell a lie.
RE: “Now why would they tell Power-Users to rebuild from source if “nothing was impacted”. I smell a lie.”
^—-I smell a noob—-^
Reread SLOWWWLYYYY, novice…sheesh:
“However if you are a power-user and have been manually using pkg_add to install packages from the FreeBSD package cluster,”
It’s actually over-cautiousness. While the forensic analysis didn’t find any packages that were modified, this disclaimer was included for those in a security environment that warrants erring on the side of caution.
*nods*
I bet you could smell a bit an exabyte away. Of course you smell me, I’m downloading every package on the cluster.