little sourceforge security issue

Two little announcements on the SourceForge site:

  2008-03-06 14:21:20 - Project CVS Service, Project Shell Service, 
Project Subversion (SVN) Service )   As of 2:20PM Pacific time, project 
shell, CVS, and Subversion services will be unavailable for system 
maintenance.

(  2008-03-06 14:23:47 - SourceForge.net Web Site  )   In support of 
improved security, all SourceForge.net user passwords have been expired 
and must be changed upon next login. CVS, Subversion and Shell users 
will need to login to the site to change their password before they will 
be able to access these services.


I'm going to assume that these events are related; someone needed to 
lock down the system after a security incident, and they don't know what 
passwords have been acquired.

We need to assume the worst.

1. Follow the instructions; change the password.

2. If you have been logging in to shell.sf.net and then using ssh to 
connect to another site, assume your password has been grabbed. Change it.

3. If you have used the same password(s) anywhere else (a very bad 
practise) change them too.

-Steve
-- 
-----------------------
Hewlett-Packard Limited
Registered Office: Cain Road, Bracknell, Berks RG12 1HN
Registered No: 690597 England

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/