(sorry for cross-posting)

Hi all,

we all have all had our trouble with SVN since yesterday, and I think I 
tracked down why. A Debian server was compromised proving the existence of an 
exploit for a kernel security issue, and on the same day SF takes 
shell/svn/cvs access for a kernel exploit too (must be the same one):

"( 2006-07-13 09:23:52 - Project CVS Service, Project Shell Service, Project 
Subversion (SVN) Service, SourceForge.net Web Site  )   A recent kernel 
exploit was released that allowed a non admin user to escalate privileges on 
the host pr-shell1. We urge all users who frequent this host to change their 
password immediately and check their project group space for any tampering. 
As a precaution, we have blocked access to all project resources by password 
until the user resets their password. After the password has been reset, 
project resources should be accessible within 5 minutes."

So, to enable write access for SVN again, you will have to change your SF 
password, which you can do by logging in on the SF webpage, going to "My 
Page" -> Preferences and choosing [Change Password] (how suprising ;)

After I had done this I could commit to SVN again, though it did require me to 
authenticate with my passward, as it was not done automatically using my SSH 
key.

Egon

-- 
CUBIC
blog: http://chem-bla-ics.blogspot.com/


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Jmol-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jmol-developers

Reply via email to