Re: Keeping your Debian system secure =>why non-free

2014-09-11 Thread Thijs Kinkhorst
On Wed, September 10, 2014 22:27, Yves-Alexis Perez wrote: >> > I'm adding debian-www (contact point for all web pages) to CC: so they >> > can get a look. >> >> This section is handled by the security team (people in the team have >> commit access), but if they feel the need to let someone else fi

Re: minor typo with website

2013-05-13 Thread Thijs Kinkhorst
Hoi Tjipke, On Sun, May 12, 2013 15:49, Andrei POPESCU wrote: > [Sorry for the CC, I assumed you are not subscribed] > > On Du, 12 mai 13, 13:01:31, Tjipke van der Heide wrote: >> "De volgende image bestanden hebben een grootte to 180MB", where 'to' >> has to be 'tot'. > > I've copied the Dutch te

Bug#388141: Progress in relicensing agreements

2012-10-17 Thread Thijs Kinkhorst
Hi, > We sent the first batch to the Alioth users, and are quite happy that, > among the 213 members of the Alioth webwml group we contacted, 104 > members already sent us back the agreement, and 44 other persons (who > already provided content but who currently don't have commit access) > sent it

Bug#671852: several dysfunctional backports mirrors on p.d.o

2012-05-07 Thread Thijs Kinkhorst
Package: www.debian.org Hi, When going to the download page of a package on package.debian.org which is in squeeze-backports, one is presented with a list of mirrors. Of those, the following are dysfunctional: Discontinued: debian.acantho.net/backports.org backports.essentkabel.com/backports.org

Bug#652631: www.debian.org: please clarify the distinction between 'events@d.o' and 'debian-events-*@lists.d.o'

2012-02-28 Thread Thijs Kinkhorst
On Mon, February 27, 2012 14:03, Arne Wichmann wrote: >> France-speaking area: Carl Chenet, Sylvestre Ledru >> UK: ... >> US: ... >> Hispano America: Fernando Estrada, Gunnar Wolf >> Brazil: Ana Caroll Comandulli, Marcelo Santana >> India: Praveen Arimbrathodiyil >> Taiwan: Andrew Lee > > -nl had a

Re: openssl version

2012-01-26 Thread Thijs Kinkhorst
seems like the web page you mention has not updated (yet). I'm CC'ing debian-www, who maintain that infrastructure, so they can investigate. Kind regards, Thijs Kinkhorst Debian Security Team -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of &q

Re: changelogs?

2011-03-13 Thread Thijs Kinkhorst
Hi, On Sunday 13 March 2011 03:14:13 Ztatik Light wrote: > all the latest changelogs aren't being posted.. > > for example i have a security update from iceweasel 3.5.16-4 to 3.5.16-5... > > The latest version on packages.debian.org is listed properly as 3.5.16-5 > with the page at http://packag

Re: intro/organization updates

2010-06-30 Thread Thijs Kinkhorst
On woansdei 30 Juny 2010, Raphael Geissert wrote: > Please update the Security Team's section as follows: > > /Raphael Geissert/s/assistant/member/ > and add: > assistant Luciano Bello > assistant Sebastien Delafond > > Also, please remove the link to the Debian Handheld mailing list as it was >

Re: Ubuntu Forum being used as a vampire's kitchen...

2009-03-31 Thread Thijs Kinkhorst
st under "How do I report bad posts or bad behavior on the forums?" for more information: http://ubuntuforums.org/announcement.php?f=48 Regards, Thijs Kinkhorst Debian Security Team -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of "unsubscribe&quo

Re: some parse-advisory.pl updates (was: DSA listings on http://www.debian.org/ are out of date)

2008-07-07 Thread Thijs Kinkhorst
Hi Simon, On Mon, July 7, 2008 19:55, Simon Paillard wrote: > Indeed, the current solution doesn't handle DSA--x with x > 1. > That is due to the workflow (we try to parse a mail without any strong > structure, while the data are structured in dak / security-tracker, as far > as I understood f

Re: some parse-advisory.pl updates (was: DSA listings on http://www.debian.org/ are out of date)

2008-07-07 Thread Thijs Kinkhorst
Hi Simon, On Fri, June 13, 2008 12:32, Thijs Kinkhorst wrote: > Hi Simon, > > >> Applied as well :) >> >> >> >> (I assume that all DSA fit on a unique web page per year, assumption >> true past years) >> >> So now, the only remaining manu

Bug#487518: packages.debian.org: 'current' changelog is most recent overall, not most recent in sid

2008-07-03 Thread Thijs Kinkhorst
On Thu, July 3, 2008 15:48, Frank Lichtenheld wrote: > On Thu, Jul 03, 2008 at 12:57:18PM +0200, Thijs Kinkhorst wrote: > >> On Tue, July 1, 2008 00:00, Frank Lichtenheld wrote: >> >>> Hmm, I can understand that some people don't want to see the >>> experi

Bug#487518: packages.debian.org: 'current' changelog is most recent overall, not most recent in sid

2008-07-03 Thread Thijs Kinkhorst
On Tue, July 1, 2008 00:00, Frank Lichtenheld wrote: > Hmm, I can understand that some people don't want to see the experimental > changelog, and to fix that at some point might be nice, I really don't > see why you wouldn't want to have the newest version from > stable/testing/unstable? The PTS

Bug#487518: packages.debian.org: 'current' changelog is most recent overall, not most recent in sid

2008-06-22 Thread Thijs Kinkhorst
Package: www.debian.org Severity: normal Hi, When I want to view the 'current' changelog of phpmyadmin, as linked from the PTS: http://packages.debian.org/changelogs/pool/main/p/phpmyadmin/current/changelog I get the stable changelog while I expected the unstable one. The problem seems to be that

Re: some parse-advisory.pl updates (was: DSA listings on http://www.debian.org/ are out of date)

2008-06-13 Thread Thijs Kinkhorst
Hi Simon, > Applied as well :) > > > (I assume that all DSA fit on a unique web page per year, assumption > true past years) > > So now, the only remaining manual work to do is the check step. This script seems to be working fine now for a while and only in a few cases do I need to change the out

Bug#484635: packages.debian.org: incorrect "also a virtual package" note

2008-06-05 Thread Thijs Kinkhorst
Package: www.debian.org Hi, This page: http://packages.debian.org/sid/gnupg has the following text: xloadimage [not hppa, hurd-i386, ia64, sparc] Graphics file viewer under X11 or imagemagick image manipulation programs also a virtual package provided by graphicsmagick-imagemagick-

Re: [Pkg-cryptsetup-devel] key rollover page: cryptsetup

2008-05-17 Thread Thijs Kinkhorst
Hey people, There's an wml escaping problem in the cryptsetup instructions, as detailed below by David Härdeman. I don't know how to escape that string, perhaps you do? thanks, Thijs On Saturday 17 May 2008 10:29, David Härdeman wrote: > The info at http://www.debian.org/security/key-rollover/

iceweasel x590 vulnerability info

2008-05-14 Thread Thijs Kinkhorst
Hi guys, It would be great if the following could be incorporated into the key-rollover page: "The Iceweasel ("firefox") web browser functionality for generating X509 public/private keypairs (certificates) is not affected by this vulnerability. Iceweasel uses nss, a different cryptography engi

Re: [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator

2008-05-14 Thread Thijs Kinkhorst
On Wednesday 14 May 2008 12:50, Rene Mayrhofer wrote: > What's the current status concerning an automated "fixer" package that > would do all the work of re-created the keys like the openssh-server > package currently does? I don't think it's reasonable to just distribute > the fixed openssl and sa

Re: [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator

2008-05-14 Thread Thijs Kinkhorst
On Wednesday 14 May 2008 11:16, Gerfried Fuchs wrote: >  I've asked several times on #debian-security about what to add to > there, a question to [EMAIL PROTECTED] got unanswered so far, too. I would > be fine to add any informations, I just don't like linking to a wiki > page[1] for security relat

Re: some parse-advisory.pl updates (was: DSA listings on http://www.debian.org/ are out of date)

2008-04-27 Thread Thijs Kinkhorst
Hi Simon, On Friday 11 April 2008 12:40, Simon Paillard wrote: > On Fri, Apr 11, 2008 at 12:33:04AM +0200, Simon Paillard wrote: > > Next step, discover the right link to lists.debian.org/.../msgN.html > > Applied as well :) > > (I assume that all DSA fit on a unique web page per year, assumpt

Re: DSA listings on http://www.debian.org/ are out of date

2008-02-07 Thread Thijs Kinkhorst
On Tue, February 5, 2008 23:02, Moritz Muehlenhoff wrote: > Thijs volunteered to automate the processing of the advisories to webwml. Yeah, I will. But until that's fixed, DSA's need to be added to the website still. I'll do that, but of course cannot be sure I'll be present every day to fix the n

Re: Processed: reassign

2008-01-25 Thread Thijs Kinkhorst
On Thu, January 24, 2008 23:56, Moritz Muehlenhoff wrote: > The solution would be a script, which is subscribed to d-s-a, transforms > the advisory mails and auto-commits them. If a transformation error is > detected, a note can be sent to [EMAIL PROTECTED] and fixed manually. We are going to chan

Re: DSA listings on http://www.debian.org/ are out of date

2008-01-25 Thread Thijs Kinkhorst
Hi Daniel, > Looking at http://www.debian.org/ today (2008-01-25), i noticed that > the security section of the home page is out of date. I only lists through > DSA 1467, which is nearly a week old at this point. There are > 10 more-recent DSAs missing from the list. > http://www.debian.org/secu

Re: Info on this site

2007-11-09 Thread Thijs Kinkhorst
On Fri, November 9, 2007 12:43, MJ Ray wrote: > "Hans-J. Ullrich" <[EMAIL PROTECTED]> wrote: > >> Well, I think, if a debian server would have been compromised, this >> should be appear at once on the webside. Also, when the main server is >> down, everyone should be informed about the non-reachabl

Bug#362421: wiki: Returns 200 OK for non-existing entires, should be 404

2006-04-13 Thread Thijs Kinkhorst
Package: www.debian.org Severity: minor The wiki returns a "200 OK" response for every page, even ones that do not exist yet. It would be better if it returned a 404 so these pages do not get crawled or indexed. If it's a problem to accomplish that, then the page should at least use a so complyi

Bug#322152: Please mention forums.debian.net

2005-08-09 Thread Thijs Kinkhorst
Hello, > The current list of 4 websites is a bit on the short side in my opinion > anyway, with also only 1 out of 4 websites actually being > Debian-specific. A simple google query alone give a lot more useful > resources for Debian users. While you're there, another site that would suit well is

Bug#309768: acknowledged by developer (New changelog->html conversion code)

2005-07-04 Thread Thijs Kinkhorst
On Mon, July 4, 2005 00:18, Debian Bug Tracking System wrote: > Some completly new code is now used on packages.debian.org for the > conversion of changelogs to HTML and should fix most issues that > did exist with the old code used before. > (Mostly by not trying some things where the old code fai

Bug#315949: /events/keysigning should mention signing-party package

2005-06-27 Thread Thijs Kinkhorst
Package: www.debian.org File: http://www.debian.org/events/keysigning Severity: wishlist Hello, The page http://www.debian.org/events/keysigning introduces Debianers to the concepts and practice of key signing. It might be a good idea to mention the `signing-party' package on this page, which pr

Bug#315735: "United States" in top-right selectbox is not US mirror

2005-06-25 Thread Thijs Kinkhorst
Package: www.debian.org Hey people, The "United States" mirror selectbox at the top-right of the website points to www.debian.org, which is located in Amsterdam, NL. This should be changed to www.us.debian.org. Regards, Thijs signature.asc Description: This is a digitally signed message part

Bug#309768: packages.debian.org: also adds unlogical ftp:// links

2005-05-20 Thread Thijs Kinkhorst
On Fri, May 20, 2005 13:39, Frank Lichtenheld wrote: > On Thu, May 19, 2005 at 11:27:07PM +0200, Thijs Kinkhorst wrote: > >> As a followup to my previous mail: the HTML parser also adds weird FTP >> links. See for example: > > I'm working on a updated script. Thanks f

Bug#251218: /devel/people gives recognition for quantity of packages, not quality

2005-05-20 Thread Thijs Kinkhorst
There's of course the question if this page has any use at all, but that is a different point. Regards, Thijs Kinkhorst signature.asc Description: OpenPGP digital signature

Bug#309882: acknowledged by developer (Re: Bug#309882: packages.debian.org: dsc/orig/diff/changelog/copyright links broken for non-free packages)

2005-05-20 Thread Thijs Kinkhorst
reopen 309882 thanks > Please, try again, as I cannot reproduce this. I'm closing this bug. Thanks for your swift reply, but the closing is perhaps a bit too swift since I can still easily reproduce the problem here. Some example URLs that exhibit the behaviour: http://packages.debian.org/unstab

Bug#309882: packages.debian.org: dsc/orig/diff/changelog/copyright links broken for non-free packages

2005-05-20 Thread Thijs Kinkhorst
eful package pages btw! Regards, Thijs Kinkhorst -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#309768: packages.debian.org: also adds unlogical ftp:// links

2005-05-19 Thread Thijs Kinkhorst
Package: www.debian.org Followup-For: Bug #309768 As a followup to my previous mail: the HTML parser also adds weird FTP links. See for example: http://packages.debian.org/changelogs/pool/main/p/phpbb2/phpbb2_2.0.13+1-6/changelog The entry "Add README.multiboard:documentation for setting up mult

Bug#309768: packages.debian.org: changelog: standards-version parsed as telnet: link

2005-05-19 Thread Thijs Kinkhorst
;t find it logical at all to link a random IP-address to the telnet protocol... there's as much sense in that as in linking it with FTP, HTTP, irc or any other protocol. Therefore I propose to drop the IP-address-to-telnet-links-parsing entirely. Regards, Thijs Kinkhorst -- To UNSUBSCRIBE,

Keysigning page: add signing-party reference

2005-03-16 Thread Thijs Kinkhorst
Hello webmasters, Just a quick note. Perhaps it would be a good idea to add a reference to the Debian package signing-party on the http://www.debian.org/events/keysigning webpage. The package provides useful tools for people attending such parties. Regards, Thijs Kinkhorst -- To UNSUBSCRIBE