berlios.de compromised since 2005

[Seth Vidal]

Hi folks,
  This lwn article reports that berlios.de has been compromised for a long, 
long time.

http://lwn.net/Articles/369633/

So I compiled a little list of pkgs that need a look:

http://skvidal.fedorapeople.org/misc/berlios-pkg-owners-list.txt


Here is the list as well:

arbiter:slim:http://slim.berlios.de/
athimm:freenx-client:http://freenx.berlios.de/
athimm:freenx-server:http://freenx.berlios.de/
ausil:oooqs2:http://segfaultskde.berlios.de/index.php?content=oooqs2
awjb:gimmix:http://gimmix.berlios.de/
bjohnson:unpaper:http://unpaper.berlios.de
bouska:wifi-radar:http://wifi-radar.berlios.de/
caolanm:mythes-es:http://openthes-es.berlios.de
dmaphy:graphem:http://graphem.berlios.de/
dnglaze:openocd:http://openocd.berlios.de/web/
drago01:hardinfo:http://hardinfo.berlios.de/
drago01:pinot:http://pinot.berlios.de/
dwmw2:bcm43xx-fwcutter:http://bcm43xx.berlios.de/
fab:python-wifi:https://developer.berlios.de/projects/pythonwifi/
hguemar:sonata:http://sonata.berlios.de/
hubbitus:sim:http://sim-im.berlios.de/
isimluk:ruby-ncurses:http://ncurses-ruby.berlios.de/
ixs:bitbake:http://developer.berlios.de/projects/bitbake/
jamatos:python-cpio:http://developer.berlios.de/projects/python-cpio/
jcollie:radiusclient-ng:http://developer.berlios.de/projects/radiusclient-ng/
jreznik:kio-ftps:http://kasablanca.berlios.de/kio-ftps/
jspaleta:gpodder:http://gpodder.berlios.de/
kkofler:kio_gopher:http://kgopher.berlios.de/
kwizart:atmel-firmware:http://at76c503a.berlios.de/
kwizart:tslib:http://tslib.berlios.de/
laxathom:soundconverter:http://soundconverter.berlios.de/
limb:netpanzer:http://netpanzer.berlios.de
limb:wavextract:http://developer.berlios.de/projects/wavextract
mgarski:smb4k:http://smb4k.berlios.de/
michaelc:scsi-target-utils:http://stgt.berlios.de
mtasaka:mirage:http://mirageiv.berlios.de/
musuruan:hatari:http://hatari.berlios.de/
oget:canorus:http://canorus.berlios.de/
oget:jjack:http://jjack.berlios.de/
oron:libhocr:http://hocr.berlios.de
ovasik:star:http://cdrecord.berlios.de/old/private/star.html
rdieter:kasablanca:http://kasablanca.berlios.de/
rdieter:lensfun:http://lensfun.berlios.de/
rishi:libgringotts:http://gringotts.berlios.de/
rjones:ocaml-pgocaml:http://developer.berlios.de/projects/pgocaml/
rvokal:net-tools:http://net-tools.berlios.de/
silfreed:gpsd:http://developer.berlios.de/projects/gpsd/
spot:lincity-ng:http://lincity-ng.berlios.de/
stingray:cuetools:http://developer.berlios.de/projects/cuetools/
sundaram:gimmage:http://gimmage.berlios.de/
terjeros:cpipe:http://developer.berlios.de/projects/cpipe/
terjeros:python-tidy:http://utidylib.berlios.de/
till:fatsort:http://fatsort.berlios.de/
twaugh:pyusb:http://pyusb.berlios.de/
vcrhonek:fetchmail:http://fetchmail.berlios.de/

if you're on this list then you need to talk to upstream and find out if 
they have done an audit yet. You might consider doing an audit yourself, 
if you have the background to know what sort of things to look for.

thanks,
-sv