-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Our server hosting the Trac issue tracker was vulnerable to the attack against OpenSSL known as "heartbleed". The OpenSSL software library was updated on 7th of April, shortly after the vulnerability was publicly disclosed. We have changed the private keys (and certificates) for all MPlayer servers. The new SHA1 fingerprints are: mplayerhq.hu: d0 4c 1f d0 08 f6 e0 24 f0 2c 31 de 4d 01 45 04 32 2e 36 29 trac.mplayerhq.hu: 2a 1c d7 a5 7e 39 6a bc c3 55 22 88 ba 2a cd e0 1f c1 9f 6e We encourage you to read up on "OpenSSL heartbleed"[1]. It is possible that login data for the issue tracker was exposed to people exploiting this security hole. You might want to change your password in the tracker and everywhere else you used that same password. [1] For example here: https://www.schneier.com/blog/archives/2014/04/heartbleed.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlNRakEACgkQp9ile6h25Y80OACfV/nUA0XE7MCGTgV9A29cMT1Y vWYAnjff6mon5Fu2Fk9IgB5H2EFxZngL =lFJq -----END PGP SIGNATURE-----
Alexander Strasser wrote on Fri, 18 Apr 2014 20:09:05 +0200:
You might want to change your password in the tracker and everywhere else you used that same password.
What about the password for svn access? Ingo
On 18.04.2014, at 21:34, Ingo Brückl <ib@wupperonline.de> wrote:
Alexander Strasser wrote on Fri, 18 Apr 2014 20:09:05 +0200:
You might want to change your password in the tracker and everywhere else you used that same password.
What about the password for svn access?
We use the svn:// protocol, which does not use the TLS protocol (in fact no encryption at all, only authentication) and thus is not affected. So no problem with the SVN password except the other way round: if you used the same password on other services and it was stolen there (not to encourage recklessness but even then, as long as we have people looking at commit mails the damage would hopefully be limited to at most very few unlucky users and some public shaming...) See also http://mail-archives.apache.org/mod_mbox/subversion-users/201404.mbox/%3C534...
participants (3)
-
Alexander Strasser -
Ingo Brückl -
Reimar Döffinger