Savannah Administration - News: * RESET YOUR PASSWORD * - And we're back!
* RESET YOUR PASSWORD * - And we're back!
Item posted by Michael J. Flickinger <mjflick> on Thu 02 Dec 2010 08:02:42 PM UTC.
Your password won't work and you'll need to request a reset.
Recently we were down for a few days due to a SQL injection attack, where user account passwords were compromised.
To best protect everyone's account and project data all user passwords in the system have been reset and we've reverted
Savannah to its backup from Nov 23rd.
A more detailed postmortem will be coming shortly.
Note: due to a PHP limitation in the crypt(3) in PHP 5.2 [1], some hashes were not properly generated. The password is still secure, but we'll see about regenerating it automatically next time you login. Meanwhile, the issue is now addressed [2] and you can regenerate it right now.
[1] http://fr2.php.net/crypt
[2] http://git.savannah.gnu.org/cgit/savane-cleanup.git/commit/?id=9391f4ac107a845a24386f40fea015eeeeb1bae8
Old password not working (posted by Pablo RodrÃguez, Sat 18 Dec 2010 08:58:30 PM UTC) |
Michael,
|
Powered by Savane 3.13-54b4.
Corresponding source code