Re: Security features in Debian 8 (Jessie)

2015-04-30 Thread Javier Fernández-Sanguino Peña
On Mon, Apr 27, 2015 at 07:32:18PM +0200, oliver.schmid...@t-online.de wrote: You wrote that these hardening flags are individual for all packages. So is it possible to see which packages have which build flags enabled? (via the new package tracker or the package search). In

Re: the text in the formats should be translatable

2013-04-29 Thread Javier Fernández-Sanguino Peña
On Tue, Apr 30, 2013 at 08:30:02AM +0900, victory wrote: # TODO: the text in the formats should be translatable (PO?) # list of install manual output formats Thanks for taking care of this issue. That was fast! Regards Javier PS: Sorry for the mess I made with the English

Bug#648595: broken links under www.d.o/security/audit/

2011-11-19 Thread Javier Fernández-Sanguino Peña
On Sun, Nov 13, 2011 at 04:59:19PM +0800, Paul Wise wrote: These two links are referenced by the Debian security audit pages but the domain has been taken by squatters. I have modified the pages to a) remove the point to http://shellcode.org/Setuid/, there is currently no alternative (that I

Bug#648595: broken links under www.d.o/security/audit/

2011-11-19 Thread Javier Fernández-Sanguino Peña
On Sat, Nov 19, 2011 at 05:54:40PM +0800, Paul Wise wrote: a) remove the point to http://shellcode.org/Setuid/, there is currently no alternative (that I know of) I wonder if these pages could be an alternative? http://lintian.debian.org/tags/setuid-binary.html

Bug#648595: Debian Security Audit Team status

2011-11-18 Thread Javier Fernández-Sanguino Peña
On Fri, Nov 18, 2011 at 11:33:01AM -0800, Don Armstrong wrote: Is anything under http://www.debian.org/security/audit/ still relevant? [I'm asking because of #648595.] Yes, most under the audit/ dir is still relevant. Although: - The old infrastructure provided by Steve Kemp is no longer

Bug#648595: Debian Security Audit Team status

2011-11-18 Thread Javier Fernández-Sanguino Peña
On Sat, Nov 19, 2011 at 08:18:41AM +0100, Javier Fernández-Sanguino Peña wrote: On Fri, Nov 18, 2011 at 11:33:01AM -0800, Don Armstrong wrote: Is anything under http://www.debian.org/security/audit/ still relevant? [I'm asking because of #648595.] Yes, most under the audit/ dir is still

Re: DDP from its packages (Re: r8957 - /manuals/trunk/Makefile)

2011-10-29 Thread Javier Fernández-Sanguino Peña
On Sat, Oct 29, 2011 at 10:34:05AM -0400, David Prévot wrote: Who has taken this decision? The web team (CCed) want to do this for quite some time already and agreed about it last year during the sprint. We already began to take care of these documentations one at a time when needed. I'm

Re: About links in spanish section

2011-10-20 Thread Javier Fernández-Sanguino Peña
On Thu, May 19, 2011 at 07:51:42AM +0200, Javier Barroso wrote: Hi, All links from La Espiral to OpenResources in http://www.debian.org/international/Spanish.es.html are broken (I guess old links) Thanks for the reminder. I've reviewed the content of the web page and removed references to

Inquiry on DiscountLinuxDVD.com status

2011-10-12 Thread Javier Fernández-Sanguino Peña
Dear Sir/Madam, Your shop (DiscountLinuxDVD.com) was listed in the Debian web pages [1] as a site that provided CDs/DVDs of Debian but we have received complaints from some users of your service that they are not receving ordered DVDs. Please, confirm if the DiscountLinuxDVD.com service to buy

Re: Non-delivery of Debian

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Fri, Sep 30, 2011 at 10:57:02AM -0700, Ed Lane wrote: I ordered Debian 6.0 from DiscountLinuxDVD.com on Sept. 2, 2011. I have not received the order and they don't answer my emails. The site is still up. Dear Mr. Lane, Thanks for contacting us and letting us know. We have sent a message to

Re: Repositorios

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Tue, Sep 27, 2011 at 08:49:07AM -0300, Ruben Acosta wrote: Tengo el agrado de dirigirme a Uds, para consultar respecto a los repositorios en terminos de hardware, es decir, el debian 6 no soporta hardware viejo por lo tanto sigo recurriendo al lenny. Cuando seteo el /etc/apt/sources.list de

Emails to discountlinuxdvd.com bounaced (was Re: Non-delivery of Debian)

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Wed, Oct 12, 2011 at 11:30:21PM +0200, Javier Fernández-Sanguino Peña wrote: If the vendor contacts us and indicates that they are still active we will let you know. Website team: My emails to sa...@discountlinuxdvd.com and to d...@superiordata.net bounced. I will wait to see if the online

Automatically detecting inactive vendors (was Re: a little bit suspicious)

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Tue, Sep 20, 2011 at 09:23:29PM +0200, Martin Zobel-Helas wrote: (...) remove it. deburl is also not working any more I wonder: shouldn't we have an automate task to do this tasks? We have a script at the website sources (testvendors.pl) written by Craig Small in 2001 which certainly looks

Re: Issue in the generation of OVAL definitions at website (was Re: Debian Oval definitions for 2011)

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Tue, Oct 11, 2011 at 08:18:30PM -0400, David Prévot wrote: Le 11/10/2011 19:53, Javier Fernández-Sanguino Peña a écrit : Security Team: would you agree if I modified all the 2010 and 2011 advisories to include a new tag (which would not be printed, yet) to make it possible

Re: Automatically detecting inactive vendors (was Re: a little bit suspicious)

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Thu, Oct 13, 2011 at 12:25:20AM +0200, Javier Fernández-Sanguino Peña wrote: I have updated the testvendors.pl to make it possible to work with vendors.CD. However, there is still room for improvement: (...) Even with these changes the script seems to work fine. I've run it and reviewed

Bug#596558: automate processing of http://www.debian.org/CD/vendors/

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Sun, Sep 12, 2010 at 05:45:09PM +0200, Simon Paillard wrote: Package: www.debian.org Severity: wishlist Richard suggested a while ago automating checks around vendors : - at submission time - after submission Hi Simon, The testvendors.pl Perl script in the /CD/vendors/ dir was

Re: Debian CD Vendors information on the official site is outdated

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Mon, Feb 21, 2011 at 09:26:31AM +0530, Rohit R wrote: Hello, First of all let me say, Good work with the new site !! Here is my problem. The list of CD Vendors provided on http://www.debian.org/CD/vendors/, I feel is out-dated. I am from India, and when I checked the links provided

Re: Draft: policy for vendors listed on Debian website

2011-10-12 Thread Javier Fernández-Sanguino Peña
On Sat, Mar 05, 2011 at 12:06:34AM +0100, Francesca Ciceri wrote: Hi all, is my intent to proceed with a clean up of vendors listed on [1] and [2]. That's a good idea, I hope you are still interested in doing this :) To do it, I'm trying to write down some requirements which vendors need to

Issue in the generation of OVAL definitions at website (was Re: Debian Oval definitions for 2011)

2011-10-11 Thread Javier Fernández-Sanguino Peña
On Tue, Oct 11, 2011 at 12:38:27PM -0400, David Prévot wrote: Thanks for your hint, Javier (author of the script used to generate those) and the security team CCed to gather more information. Hi, I've reviewed this issue fully and have adjusted the Makefile to try to make it more evident when

Re: Bug#636582: Incorrect link in http://www.debian.org/doc/manuals/securing-debian-howto/ch7.en.html

2011-10-07 Thread Javier Fernández-Sanguino Peña
tag 636582 pending reassign 636582 harden-doc thanks On Tue, Oct 04, 2011 at 10:01:25AM -0400, David Prévot wrote: Hi Alex, Thanks for your report. Following up another bug alike, please note that the securing howto is directly handle within the harden-doc debian package. Hello, This bug

Error committing changes in CVS (Alioth-related?)

2011-05-23 Thread Javier Fernández-Sanguino Peña
This might be related to the Alioth update, could someone please confirm they get also this when comitting stuff: jfs@silicio:international$ cvs ci (...) Can't do setuid (cannot exec sperl) cvs commit: Pre-commit check failed cvs [commit aborted]: correct above errors first! this happens to me

Re: update of DDP related web pages (phase 1)

2011-02-20 Thread Javier Fernández-Sanguino Peña
On Mon, Feb 07, 2011 at 10:49:24PM +, Steve McIntyre wrote: In future, it would be nice to maybe re-think what we put on which CDs. Some people have suggested having a separate CD for docs, which I'll admit I'm not such a fan of for a variety of reasons. I'm tempted to suggest that we

Re: Debian FAQ (was: update of DDP related web pages)

2011-02-08 Thread Javier Fernández-Sanguino Peña
On Mon, Feb 07, 2011 at 03:46:56PM +0100, W. Martin Borgert wrote: Quoting Osamu Aoki os...@debian.org: Debian FAQ is DDP document still in debiandoc-sgml. Between 2008-05-19 and 2008-10-03, I created a docbookified, po4aified, and utf8ifed branch of the FAQ:

Re: update of DDP related web pages (phase 1)

2011-02-06 Thread Javier Fernández-Sanguino Peña
On Sun, Feb 06, 2011 at 10:02:33PM +0900, Osamu Aoki wrote: Hi, It is great to have squeeze released and web pages in the new design. It is not secret that Debian documentation pages can be reorganized to make more important things to be more accessible. I would like to update their

Re: update of DDP related web pages (phase 1)

2011-02-06 Thread Javier Fernández-Sanguino Peña
On Sun, Feb 06, 2011 at 05:18:36PM +0100, Martin Zobel-Helas wrote: Do you guys (from d-doc) see any possibility to help us with that? Most of the documentation nowadays is built using Docbook although some documents are still based on debiandoc-SGML. In any case, how can we help you? Regards

Re: Tweak required for release notes 'publishing' at www-master

2011-02-06 Thread Javier Fernández-Sanguino Peña
On Sun, Feb 06, 2011 at 09:25:43PM +0100, Javier Fernández-Sanguino Peña wrote: I cannot access www-master, could someone please take a look at this? If I'm pointed to where the cron tasks reside and given access to www-master I could probably take care of this myself I was pointed

Re: www-master move, final steps: /doc/manuals/sgml-howto

2010-10-11 Thread Javier Fernández-Sanguino Peña
On Tue, Sep 14, 2010 at 03:14:21PM +0200, W. Martin Borgert wrote: Quoting Osamu Aoki os...@debian.org: More problematic is: http://www.debian.org/doc/docpolicy Here, at least the following two points: # We'll use SGML as source format. (...) # We'll use debiandoc-sgml for our

Re: www-master move, final steps: international/spanish/contrib/

2010-09-13 Thread Javier Fernández-Sanguino Peña
On Mon, Sep 13, 2010 at 11:02:27PM +0200, Simon Paillard wrote: I guess contrib/ can be completely removed ? I guess so, the content there is quite out dated. I can always recover it from the Attic I guess. Regards Javier signature.asc Description: Digital signature

Agreed on title for debconf? (was Re: debconf10 is _11th_ debian conference)

2010-09-12 Thread Javier Fernández-Sanguino Peña
On Sun, Aug 15, 2010 at 10:37:40PM +0900, Hideki Yamane wrote: Hi list, at http://www.debian.org/News/2010/20100730 Tenth Annual Debian Developer Conference No, it's Eleventh - since first debconf was debconf*0*... http://debconf0.debconf.org/ Hi, Sorry to reopen this thread but I

Re: Request NOT to remove outdated translations from the website by removing files from CVS

2010-08-12 Thread Javier Fernández-Sanguino Peña
On Wed, Aug 11, 2010 at 09:46:02AM +0900, victory wrote: I don't think it's not good to issue 'system cvs...' for each copypage. I think this should be selectable to cancel (something like --no-cvs switch will be enough) Yes, that's a valid point. I can try to add that switch at some point in

Re: Request NOT to remove outdated translations from the website by removing files from CVS

2010-08-08 Thread Javier Fernández-Sanguino Peña
On Sun, Aug 08, 2010 at 01:07:07PM +0200, Gerfried Fuchs wrote: Hi! Hi there! What's worst, translators working in CVS do not have an easy way to recover removed/purged pages from CVS. It takes quite a lot of work (simplified only with shell access to cvs.debian.org) to review which

Re: oval - still active?

2010-08-08 Thread Javier Fernández-Sanguino Peña
On Thu, Jan 07, 2010 at 11:02:56AM +0100, Gerfried Fuchs wrote: While the new year changed there appeared webwml build errors because of the missing oval definitions for the new year (because of no new DSA yet). While digging around I found that the 2009 oval file is zero bytes long

Request NOT to remove outdated translations from the website by removing files from CVS

2010-08-07 Thread Javier Fernández-Sanguino Peña
(CCing debian-i18n) Hi guys, I would like to request that the taks that removes the 'outdated' translated web pages from CVS by removing them is stopped. Here's why: - We already have a mechanism to warn of outdated (or very out of date pages) - The sites see many cosmetic changes that

Fixed in website for local internationalistation subdirs

2009-07-24 Thread Javier Fernández-Sanguino Peña
[ Just a small note so other affected teams can check if everything is working OK ] After pondering for weeks why changes committed to the www CVS in spanish/international/spanish where not being compiled and visible at the website yesterday I found (and fixed) a bug in the webwml's

Re: Text mistake in /releases/unstable/index.es.html

2008-07-21 Thread Javier Fernández-Sanguino Peña
On Tue, Jul 15, 2008 at 08:28:25PM +0200, Simon Paillard wrote: Hello, (CC'ing debian-l10n-spanish) On Tue, Jul 15, 2008 at 06:57:24PM +0200, Borja Gonzalez wrote: So, in the page http://www.debian.org/releases/unstable/index.es.html (spanish), in the secon paragraph there is a mistake,

Re: Broken link to Bastille in Etch?

2008-06-15 Thread Javier Fernández-Sanguino Peña
On Sun, Jun 15, 2008 at 12:01:40AM +0100, Sam Kuper wrote: Dear Debian WWW maintainers, The page http://packages.debian.org/search?keywords=bastille has a link to http://packages.debian.org/etch/bastille which, the last few times I've tried it, has timed out (Safari gives me the message,

Bug#468765: Is oldstable security support duration something to be proud of?

2008-03-15 Thread Javier Fernández-Sanguino Peña
On Mon, Mar 10, 2008 at 04:13:43PM -0400, Filipus Klutiero wrote: RHEL and derivatives: 7 years RHEL does offer support for 7 years, but that's paid-for support. Notice that you *cannot* use official RHEL updates without paying for it (up2date requires a paid subscription to Red Hat's Network).

Re: CD/DVD clarification suggestion on download page

2007-12-25 Thread Javier Fernández-Sanguino Peña
On Sat, Nov 17, 2007 at 04:13:09PM +0100, Josip Rodin wrote: Okay, so I went ahead and did this. Now /distrib/ no longer links to the d-i mega-link-collection, and instead it links to those four pages, each of which have their own link collection. It's still fairly consistent, and the number

Re: debian.fr outdated (was: hyperlink down)

2007-12-25 Thread Javier Fernández-Sanguino Peña
On Sat, Nov 03, 2007 at 07:23:29PM +0100, Simon Paillard wrote: debian.fr is *NOT* an official mirror, and is operated by someone not affiliated to Debian. Many others issues on debian.fr (like /doc/ in error) have already been reported. I've sent an email to the contact of the domain

Re: Debian CD in spain

2007-12-25 Thread Javier Fernández-Sanguino Peña
On Fri, Nov 02, 2007 at 11:11:21AM +0100, Rodolfo García wrote: http://comprarlinux.com/index.php?main_page=product_infoproducts_id=1 says 15. Os, sorry, the web page in the debian-vendors-CD is http://www.compralinux.com/ not http://www.comprarlinux.com/ and is 63 euros:

Re: Request for support of installation of python-libxml2

2007-10-29 Thread Javier Fernández-Sanguino Peña
On Tue, Sep 04, 2007 at 01:35:14PM +0200, Frank Lichtenheld wrote: On Tue, Sep 04, 2007 at 12:27:48AM +0200, Javier Fernandez-Sanguino wrote: Could a 'debwww' member please approve for the installation of the python2.4-xml package? I do Gruesse, Over a month has gone since the original

Re: Switching from CVS to something else

2007-08-23 Thread Javier Fernández-Sanguino Peña
On Thu, Aug 23, 2007 at 10:58:49AM +0200, Gerfried Fuchs wrote: In an $Id$ line there is only one version stored. We can extract that in many other ways, too. The problem I tried to point out is with the mindelta and maxdelta feature of the translation-check. If they are not set maxdelta

Re: Switching from CVS to something else

2007-08-22 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 21, 2007 at 06:21:24PM +0200, Martin Schulze wrote: I have some problems with this approach since being able to commit to webwml means being able to execute arbitrary code on www-master which is currently the same as security-master. Thus, having only limited write access and a

Re: Switching from CVS to something else

2007-08-21 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 21, 2007 at 02:15:34PM +0200, Martin Schulze wrote: Gerfried Fuchs wrote: What also comes into my mind, the translation-check code would require quite a lot of changes with almost all VCSes especially with respect to checks about by how many commits the file is outdated. Might

Re: Switching from CVS to something else

2007-08-20 Thread Javier Fernández-Sanguino Peña
On Mon, Aug 20, 2007 at 09:05:38AM +0200, Raphael Hertzog wrote: On Mon, 20 Aug 2007, Bas Zoetekouw wrote: Indeed. Moreover, the only advantage of svn seems to be that to an end-user, it looks very similar as cvs. It also supports symbolic links, proper file/directory renaming, etc. All

Re: Switching from CVS to something else

2007-08-20 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 17, 2007 at 07:38:26PM +0200, Raphael Hertzog wrote: Alioth also supports CVS, so if you want to keep CVS, you can do that as well. But I encourage you to switch to something else and I can help you to convert the repository if needed. As I've said in the -doc mailing list I'd

Re: Dead link on DDP page

2007-08-20 Thread Javier Fernández-Sanguino Peña
On Sun, Aug 19, 2007 at 03:53:31PM +0200, m.v.wesstein wrote: Hello I found the link to http://manpages.debian.net/cgi-bin/search_man.cgi on the page http://www.debian.org/doc/todo#ideas to be dead. The server http://manpages.debian.net works as it displays the default Apache notice. Yes,

Re: typo in http://www.debian.org/donations

2007-07-19 Thread Javier Fernández-Sanguino Peña
On Thu, Jul 19, 2007 at 05:23:30PM +0200, David Richfield wrote: Debian to purchase and maintain it's own computers - Debian to purchase and maintain its own computers Thank you, I've fixed this typo. Should show up online in a few hours. Javier signature.asc Description: Digital signature

Re: New page (for the website) informing about the Debian trademark

2007-07-14 Thread Javier Fernández-Sanguino Peña
On Mon, Jul 02, 2007 at 05:06:45PM +0200, Javier Fernández-Sanguino Peña wrote: Attached is a first draft of such a page. I would appreciate input on this information as I would like to add it to the website soonish. Please note that it just states facts, it does not go into any opinions

Re: Dead links on http://www.debian.org/logos/

2007-07-14 Thread Javier Fernández-Sanguino Peña
On Wed, Jul 11, 2007 at 04:45:29PM -0400, Ricky Zhou wrote: Thank you very much, I fully agree that it is OK to apply your patch. No problem. If somebody applies this, it might be nice to document this somewhere as well: For files with non-standard extensions, the extension must be added to

Re: New page (for the website) informing about the Debian trademark

2007-07-14 Thread Javier Fernández-Sanguino Peña
On Sat, Jul 14, 2007 at 12:11:53PM +0200, Javier Fernández-Sanguino Peña wrote: How do I do that? I see no README in the PO subdir that really describes the process there... wmlxgettext.pl seems to do the job, but I have been unable to get it working in my first two tries.. Aggg.. I was blind

Re: New page (for the website) informing about the Debian trademark

2007-07-04 Thread Javier Fernández-Sanguino Peña
On Wed, Jul 04, 2007 at 02:32:05AM +0100, MJ Ray wrote: Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote: [...] As most developers (me included) are not very much aware of the status of the Debian trademark I believe it would be interesting to add a page to the website

New page (for the website) informing about the Debian trademark

2007-07-02 Thread Javier Fernández-Sanguino Peña
(CC'ing debian-project as there might be people in that list that might have an opinion about this change) As most developers (me included) are not very much aware of the status of the Debian trademark I believe it would be interesting to add a page to the website that described more information

Re: Wrong links in doc/obsolete.wml

2007-06-22 Thread Javier Fernández-Sanguino Peña
On Fri, Jun 22, 2007 at 06:45:43PM +0200, Johan Haggi wrote: 2 links in the version 1.3 of obsolete.wml are wrong: Thanks. I've also fixed the references in the ddp.wml file so that they now point to the obsolete file. Regards Javier signature.asc Description: Digital signature

Re: Doubts and Ideas

2007-06-04 Thread Javier Fernández-Sanguino Peña
On Mon, Jun 04, 2007 at 12:07:47PM +0200, Alexander Schmehl wrote: Hi! * Javier Fernández-Sanguino Peña [EMAIL PROTECTED] [070531 12:40]: - post to d-a that the license is going to change in X months and that contributors are going to be contacted. Provide pointers to anyone feels he

Re: Doubts and Ideas

2007-05-31 Thread Javier Fernández-Sanguino Peña
On Wed, May 30, 2007 at 10:58:43PM -0700, Don Armstrong wrote: And considering a lot of other people have infinite more understading of Copyright issues, what should we do if we can't find/contact the contributor and/or he/she decides to not relicense it? Is it possible to remove the

Re: Doubts and Ideas

2007-05-30 Thread Javier Fernández-Sanguino Peña
On Wed, May 30, 2007 at 04:08:25PM +0200, Josip Rodin wrote: I'm unsure if we should start contacting contributors and fix the long standing license problem of the website. What license problem? Everything is licensed to SPI, always has been. I'm suprised you ask this. Have you read

Re: Doubts and Ideas

2007-05-30 Thread Javier Fernández-Sanguino Peña
On Tue, May 29, 2007 at 10:25:31PM -0300, Felipe Augusto van de Wiel (faw) wrote: - Our procedure for out-of-date pages is this, the log of removed pages is here. That would be nice, actually, an automatic mechanism that would mail the l10n mailings everytime a batch of pages are

Re: Doubts and Ideas

2007-05-30 Thread Javier Fernández-Sanguino Peña
On Wed, May 30, 2007 at 05:51:25PM +0200, Javier Fernández-Sanguino Peña wrote: This means no content from the site can (legally) be copied over to, for example, a GPL-licensed document (such as those produced by the DDP) or a GPL program. For reference, this is #192748 (which was cloned

Re: Doubts and Ideas

2007-05-29 Thread Javier Fernández-Sanguino Peña
On Sun, May 27, 2007 at 06:20:40PM -0300, Felipe Augusto van de Wiel (faw) wrote: I would like to know if we have a Web Policy or if we should have one, some small lines, nothing complicate, just to say: There's no Policy AFAIK, just the documentation at www.debian.org/devel/website/

Major revision of the content of 'children-distros'

2007-05-29 Thread Javier Fernández-Sanguino Peña
As the one who originally introduced this page in 2002 but have not maintained it I feel partially responsible for #425792. I have done a full review of the content of this page, moving over to a separate listing all the distributions which are no longer active (stalled, server is dead or gives

Re: Inconsistency on translated pages links.

2007-04-23 Thread Javier Fernández-Sanguino Peña
On Mon, Apr 23, 2007 at 11:09:23AM +0200, NAGY Viktor wrote: Jens Seidel wrote: It was already suggested multiple times to remember users choice of the selected language. There where also some suggestions to a possible implementation such as using cookies. Don't know about the status.

Re: Improvements of the website

2007-04-22 Thread Javier Fernández-Sanguino Peña
On Thu, Apr 19, 2007 at 11:31:00PM +0200, Bastian Venthur wrote: Translators also have good tools for handling gettext. What's more, if we used gettext for more of the site, we could use nice web translation frontends more easily. I'm not sure it's worthwhile, but it seems a better

Re: [Fwd: Re: Improvements of the website]

2007-04-19 Thread Javier Fernández-Sanguino Peña
On Thu, Apr 19, 2007 at 09:46:23AM +0200, Wojciech Zareba wrote: Our company has used Debian since few yaears, but I never needed to visit Debian pages for security updates, documetation, etc. I had only two reasons: to read news about new releases and changes, and to download new testing

Re: Improvements of the website

2007-04-18 Thread Javier Fernández-Sanguino Peña
On Tue, Apr 17, 2007 at 12:33:43PM +0200, Bastian Venthur wrote: * I don't believe we should favor XML(-ish stuff) above simplified markup when the target audience are humans. XML is good for many things but definitely not for being edited by the casual user. BTW there are wiki engines

Re: problem with manpages.debian.net

2007-04-11 Thread Javier Fernández-Sanguino Peña
On Tue, Apr 10, 2007 at 11:02:16AM +1000, Robert Lowe wrote: Hi Debian-WWW, There appears to be a problem with manpages.debian.net, as when I visit this in my browser I'm redirected to http://manpages.debian.net/apache2-default/ serves a blank page that just says It works!. Yes, It's

Re: transposed extensions on install manual files

2007-04-11 Thread Javier Fernández-Sanguino Peña
On Sun, Apr 08, 2007 at 11:31:20AM -0400, Douglas Allan Tutty wrote: When downloading install manual files (both pdf and txt), the files are *.pdf.en instead of *.en.pdf. This means that, without translating, they will not appear as pdf files. Do you mean that your desktop will not recognise

Re: Incorrect statements in the release announcement, please fix! (was Re: Release announcement for Etch -- help needed by translators)

2007-04-10 Thread Javier Fernández-Sanguino Peña
On Tue, Apr 10, 2007 at 12:03:52PM +0200, Josselin Mouette wrote: I have just upgraded a few servers, and frankly I would recommend upgrading with apt-get instead of aptitude. As aptitude's own upgrade path is broken, it is proposing insane upgrade scenarii unless you do as described in the

Re: Release announcement for Etch -- help needed by translators

2007-04-08 Thread Javier Fernández-Sanguino Peña
On Sat, Apr 07, 2007 at 07:10:27PM +0200, Alexander Schmehl wrote: An annoucement has been written with the help of the people on the -publicity and -l10n-english mailing list. I think it would be ready to be translated to other languages as well. Then this should have been sent to -i18n

Re: Urgent -- Release announcement for Etch

2007-04-08 Thread Javier Fernández-Sanguino Peña
On Sun, Apr 08, 2007 at 12:33:41PM +0200, Alexander Schmehl wrote: I know of work in progress on: pt_BR dk Spanish is also in progress. Currently reviewing it. Regards Javier PS: You should *really* use -i18n to coordinate translations, not -www. All translation coordinators are

Incorrect statements in the release announcement, please fix! (was Re: Release announcement for Etch -- help needed by translators)

2007-04-08 Thread Javier Fernández-Sanguino Peña
On Sat, Apr 07, 2007 at 07:10:27PM +0200, Alexander Schmehl wrote: The announcement is available at http://people.debian.org/~tolimar/release.txt (and soon .wml). It would be great if you could translate it in time so the anouncement would be in all kind of languages in place. There's a few

Re: Urgent -- Release announcement for Etch

2007-04-08 Thread Javier Fernández-Sanguino Peña
On Sun, Apr 08, 2007 at 12:33:41PM +0200, Alexander Schmehl wrote: Hi again! * Alexander Schmehl [EMAIL PROTECTED] [070407 19:10]: [..] http://people.debian.org/~tolimar/release.txt [..] It would be great if you could translate it in time so the anouncement would be in all kind of

Re: Incorrect statements in the release announcement, please fix! (was Re: Release announcement for Etch -- help needed by translators)

2007-04-08 Thread Javier Fernández-Sanguino Peña
On Sun, Apr 08, 2007 at 04:17:08AM -0700, Steve Langasek wrote: - there *is* downtime, a new kernel needs to be installed and that requires a reboot Installing a new kernel doesn't *require* a reboot. Depends on whether you like your downtime to be scheduled or unscheduled. ;) Well

Re: Setting up a staging ground for etch release

2007-03-19 Thread Javier Fernández-Sanguino Peña
On Fri, Mar 16, 2007 at 03:09:45PM +0100, Frank Lichtenheld wrote: Hi. It was suggested to set up a page again that can be used to test the website's appearance after the etch release like we did before sarge. I'm currently setting this up on of my servers again. Notice that not only the

Re: http://www.debian.org/doc/FAQ/ch-getting.en.html says 4.0 is the latest stable

2007-03-15 Thread Javier Fernández-Sanguino Peña
On Wed, Feb 21, 2007 at 07:49:45PM +0100, Anders Andersson wrote: Hi, I just saw that this page: http://www.us.debian.org/doc/FAQ/ch-getting.en.html which I got to by choosing 'site map' and then 'Support: Debian FAQ', says: release 4.0, a.k.a. the `stable' distribution I guess this

Re: http://www.debian.org/doc/FAQ/ch-getting.en.html says 4.0 is the latest stable

2007-03-15 Thread Javier Fernández-Sanguino Peña
On Wed, Feb 21, 2007 at 07:49:45PM +0100, Anders Andersson wrote: Hi, I just saw that this page: http://www.us.debian.org/doc/FAQ/ch-getting.en.html It seems you are getting an outdated copy, for some reason, I don't see what you see. Instead I see: release 3.1, a.k.a. the `stable'

Re: http://www.debian.org/doc/FAQ/ch-getting.en.html says 4.0 is the latest stable

2007-02-22 Thread Javier Fernández-Sanguino Peña
On Thu, Feb 22, 2007 at 02:25:24AM +0100, Matt Kraai wrote: On Wed, Feb 21, 2007 at 07:49:45PM +0100, Anders Andersson wrote: Hi, I just saw that this page: http://www.us.debian.org/doc/FAQ/ch-getting.en.html which I got to by choosing 'site map' and then 'Support: Debian FAQ', says:

Update of advisories CVE references (CAN-CVE) in the website

2007-01-29 Thread Javier Fernández-Sanguino Peña
Hi there, I just wanted to mention that I have updated a *lot* of advisories today changing CVE references in quite a number of .data files. Most of the changes are related only to the CVE CANdidates name change. The CAN--XXX format is no longer used, Mitre just uses the CVE-- format.

Re: Out of date upgrade-reports page

2007-01-07 Thread Javier Fernández-Sanguino Peña
On Thu, Jan 04, 2007 at 04:49:50PM +0100, Javier Fernández-Sanguino Peña wrote: That being said, attached is a patch to the current upgrade-report.html page to add additional information (and do not make it depend on a specific Debian release). I think it's worthwhile mentioning that the user's

Re: Out of date upgrade-reports page

2007-01-04 Thread Javier Fernández-Sanguino Peña
On Sun, Dec 24, 2006 at 10:48:52AM +0100, Andreas Barth wrote: * Roberto C. Sanchez ([EMAIL PROTECTED]) [061224 02:10]: A Google search for debian upgrade reports (no quotes) returns a page [0] that is out of date since it is a template for a woody - sarge -- [0] is

Re: code injection in packages.debian.org

2006-12-13 Thread Javier Fernández-Sanguino Peña
On Tue, Dec 12, 2006 at 11:35:38PM +0100, Christian Boltz wrote: ? That would generate HTML files that point to content that do no exist in the any of the mirrors. The only way you can make those file valids if you break into one of the mirrors, and if a mirror is broken and you do not

Re: New page: how to contribute to Debian (comments?)

2006-12-13 Thread Javier Fernández-Sanguino Peña
On Wed, Dec 06, 2006 at 01:33:30PM +0100, Holger Levsen wrote: Hi, On Tuesday 05 December 2006 22:21, Javier Fernández-Sanguino Peña wrote: Waiting for comments... sounds like a good plan to me. I've applied the changes. They should be available in the next run. Javier signature.asc

Re: code injection in packages.debian.org

2006-12-11 Thread Javier Fernández-Sanguino Peña
On Mon, Dec 11, 2006 at 04:57:30PM +0100, Christian Boltz wrote: Hello, [please CC me in replies, I'm not subscribed] it's easy to do some code injection in packages.debian.org: This is not code injection, it's cross site-scripting. Given that: - packages.debian.org does not have any

Bug#402631: packages.debian.org: susceptible to XSS attacks

2006-12-11 Thread Javier Fernández-Sanguino Peña
Package: www.debian.org Version: N/A; reported 2006/12/11 Severity: minor Tags: security Christian Boltz reported in the debian-www mailing list [1] that the download.pl CGI used in packages.debian.org is vulnerable to XSS attacks. This seems to have been discovered by fefe [2] I don't believe

Re: code injection in packages.debian.org

2006-12-11 Thread Javier Fernández-Sanguino Peña
On Mon, Dec 11, 2006 at 10:11:34PM +0100, Christian Boltz wrote: Not that I wouldn't want to see this fixed but, really, this is as low risk as it can get. Through XSS no one could retrieve user credentials and no one should be trusting (in this day an age) the information from a website

Re: download.pl lets arbitrary stuff through

2006-12-11 Thread Javier Fernández-Sanguino Peña
On Mon, Dec 11, 2006 at 09:42:35PM +0100, Stefan Scheler wrote: Fixed and uploaded, see #402631. Erm, do you this is a good fix? You're only checking the length! Please provide a demonstration attack that would force users into downloading, and wrongly checking, a malicious package. The only

Re: New page: how to contribute to Debian (comments?)

2006-12-05 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 29, 2006 at 12:37:55AM +0100, Javier Fernández-Sanguino Peña wrote: I've written a page titled How can you help Debian? which tries to describe the different things a user, an experienced developer, a sysadmin, etc. can do to help with the Debian project. It includes link to other

Re: New page: how to contribute to Debian (comments?)

2006-12-02 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 29, 2006 at 12:37:55AM +0100, Javier Fernández-Sanguino Peña wrote: Either I'm blind or I'm missing a page in the website that describes how different people can contribute to the project. I've written a page titled How can you help Debian? which tries to describe the different

Re: New page: how to contribute to Debian (comments?)

2006-12-02 Thread Javier Fernández-Sanguino Peña
On Sat, Dec 02, 2006 at 11:00:01AM +0100, Frans Pop wrote: On Saturday 02 December 2006 10:10, Javier Fernández-Sanguino Peña wrote: Any more opinions? Right now it's 3 (Holger, Jens and me) for vs. 2 (Josip, Frans) against [1]. It's too few opinions to make such a change so I would like

Review of the spanish vendors list (some are out of business)

2006-11-30 Thread Javier Fernández-Sanguino Peña
I've reviewed the Spanish vendors list: - Atilon Inet SL - DNS does not answer - Ciberdroide - front page states it is out of business - COMPU QUICK S.L. Informática Profesional - domain seems to have been parked by an unrelated entity - Frikibytes.com - redirects to a parked domain

New page: how to contribute to Debian (comments?)

2006-11-29 Thread Javier Fernández-Sanguino Peña
Either I'm blind or I'm missing a page in the website that describes how different people can contribute to the project. I've written a page titled How can you help Debian? which tries to describe the different things a user, an experienced developer, a sysadmin, etc. can do to help with the

Re: New page: how to contribute to Debian (comments?)

2006-11-29 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 29, 2006 at 11:06:36PM +0100, Josip Rodin wrote: On Wed, Nov 29, 2006 at 12:37:55AM +0100, Javier Fernández-Sanguino Pe?a wrote: Either I'm blind or I'm missing a page in the website that describes how different people can contribute to the project.

Re: New page: how to contribute to Debian (comments?)

2006-11-29 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 29, 2006 at 11:43:56PM +0100, Frans Pop wrote: On Wednesday 29 November 2006 23:06, Josip Rodin wrote: On Wed, Nov 29, 2006 at 12:37:55AM +0100, Javier Fernández-Sanguino Pe?a wrote: Either I'm blind or I'm missing a page in the website that describes how different people

Re: New Debian Site

2006-10-25 Thread Javier Fernández-Sanguino Peña
On Thu, Oct 19, 2006 at 03:01:24PM +0200, Augusto Frausin wrote: Sorry, I do not know anything about web crumblers, is it something similar (maybe clickable)? I use the up button of Konqueror to go up but Firefox misses such a functionality IIRC. Basically, if you go in a section then into a

Re: References to Sarge instead of testing probably outdated on devel/buildd/setting-up

2006-10-07 Thread Javier Fernández-Sanguino Peña
On Sat, Oct 07, 2006 at 12:11:50PM +0200, Jens Seidel wrote: Hi, I noticed that http://www.debian.org/devel/buildd/setting-up has many fixed references to Debian distribution code names where variables or one of stable, testing and unstable should be used. Since the page was written by

Re: finding out the version of available packages impossible

2006-10-07 Thread Javier Fernández-Sanguino Peña
On Fri, Oct 06, 2006 at 08:59:36PM +0200, jan sekal wrote: Hi, I tried to find out the version of KDE desktop, and the only result I got was something like http://packages.debian.org/stable/kde/kde, whe it looks like the KDE was 5, Well, you could look in the Release Notes and easily see

Re: Reorganising Talk Pages

2006-10-05 Thread Javier Fernández-Sanguino Peña
On Wed, Oct 04, 2006 at 06:05:34PM +0200, Martin Schulze wrote: in my opinion, the web pages about speakers[1] and talks[2] given at various conferences could use an overhaul. From several occasions there also exist video or audio recordings which would be useful for a web visitor, especially

Bug#375705: http://www.debian.org/debian.css makes pages wider than the screen

2006-06-27 Thread Javier Fernández-Sanguino Peña
On Tue, Jun 27, 2006 at 05:25:51PM +, Miernik wrote: Package: www.debian.org Severity: normal The CSS code in http://www.debian.org/debian.css will always make the page wider than browser window width, which results in an horizontal scrollbar, for example in Konqueror: This doesn't

Re: Bug#339837: Publishing more data could maybe help

2006-04-25 Thread Javier Fernández-Sanguino Peña
On Mon, Apr 24, 2006 at 09:54:11PM -0700, Don Armstrong wrote: Here we basically have two choices. Who's *we*? Have you talked to the security team or is this just wishful thinking? 1. Certain people sign NDAs/agreements to get the early disclosure information; in return they cannot

Bug#194549: Wait for DFSG-free wiki

2006-04-25 Thread Javier Fernández-Sanguino Peña
On Sun, Apr 23, 2006 at 07:25:42AM +0200, Javier Fernández-Sanguino Peña wrote: On Wed, Apr 19, 2006 at 11:00:27AM -0400, Filipus Klutiero wrote: IMHO, it would be better to wait until wiki.d.o is DFSG-free, as I expect readers would expect that from Debian's wiki. That could take some

  1   2   3   >