GraphicsMagick CVS Security

Due to weaknesses in the implementation of CVS's popular pserver 
protocol (used to access the source code over the net), there has been 
a rash of cracker attacks (many successful) on open source sites which 
use CVS.  It is not clear why anyone would want to disturb open source 
sites which exist for the common good, but it is very clear that the 
GraphicsMagick site is among those who have been attacked.

While there is no indication that GraphicsMagick CVS or the server it 
resides on has been compromised, we are taking every possible 
precation to ensure its security.  It would be a dreadful thing if a 
hacker successfully inserted trojan code into the source base.  As of 
this past weekend, GraphicsMagick CVS write access is only available 
under the protection of SSH.  We plan to take additional steps to 
protect the software since its security is vital to its users.

Bob
======================================
Bob Friesenhahn
[email protected]
http://www.simplesystems.org/users/bfriesen


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND