Re: Verify recent uploads for SourceForge.net project gtkpod
phantomjinx <[email protected]>
| Newsgroups | gmane.comp.ipod.gtkpod |
|---|---|
| Message-ID | <[email protected]> |
On 01/02/11 23:58, SourceForge Support wrote: > Hello, > > Please review this notice and contact us at [email protected] with any > concerns. > > There was recently an attack on SourceForge systems as detailed here: > http://sourceforge.net/blog/sourceforge-attack-full-report > > As a SourceForge user, you should already have received notice of our password > reset event, also noted on the sourceforge.net login page. > > As a precautionary measure, part of our response has been to examine all > project file release data. We have have reviewed files added or modified on > the gtkpod project between 2011-01-24 23:59:59 UTC through 2011-01-29 > 07:00:00 UTC, which is a time window larger than the attack window. > > Your project had 3 newly uploaded files during the time > window detailed above: > > * gtkpod/gtkpod-2.0.0-unstable/20110125/gtkpod-2.0.0.964dd1f-1.fc13.i686.rpm > * gtkpod/gtkpod-2.0.0-unstable/20110125/gtkpod-2.0.0.964dd1f.tar.gz > * gtkpod/gtkpod-2.0.0-unstable/20110125/gtkpod_2.0.0.964dd1f-1_i386.deb > > Please verify that the changes above are ones that your project made. We have > included MD5 sums for all your project's files (even older files) based on the > copies we have on our mirror (see the attached file, md5.sums). If you have > access to Linux, Cygwin, etc., and you have copies of your uploaded files, you > can verify that they match our checksums by running the following command in > the directory where your copies reside: > > md5sum --check<md5.sums > > Other MD5 checksum verification tools are also available. > > Note that files uploaded after the cut-off-point for this report's generation > will not be mentioned above, since more recent files should all be fine. The > MD5 checksum file, on the other hand, is the current checksums as of the time > right before this email was sent. > > Please reply to this email with the results of your checks to [email protected] > > Thank you, > > SourceForge.net staff > No problem with those files. Regards P. G. Richardson (a.k.a phantomjinx) ------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d