[MPlayer-dev-eng] trac.ffmpeg.org / trac.mplayerhq.hu Security Breach

[Grozdan]

On Thu, Feb 13, 2014 at 7:56 PM, Alexander Strasser <eclipse7 at gmx.net> wrote:
> Some people might not follow mplayerhq.hu closely, the following news were posted
> originally at https://mplayerhq.hu/design7/news.html#trac_sec
>
> The server on which FFmpeg and MPlayer Trac issue trackers were installed was compromised.
> The affected server was taken offline and has been replaced and all software reinstalled.
>
> MPlayer SVN, releases, web and mailinglists are on other servers and were not affected. We
> believe that the original compromise happened to a server, unrelated to FFmpeg and MPlayer,
> several months ago. That server was used as a source to clone the VM that we recently moved
> Trac to. It is not known if anyone used the backdoor that was found.
>
> We recommend all users to change their passwords. Especially users who use a password on
> Trac that they also use elsewhere, should change that password at least elsewhere.
>
>
>   Alexander

Thanks for letting us know! I wasn't aware of the issue as I seldom
visit the MPlayer site. I changed my pwd on trac.ffmpeg.org just now

>
> _______________________________________________
> MPlayer-dev-eng mailing list
> MPlayer-dev-eng at mplayerhq.hu
> https://lists.mplayerhq.hu/mailman/listinfo/mplayer-dev-eng



-- 
Yours truly