analysis of Debian wiki security breach
Dear editors of the Debian wiki, Please recall our recent email regarding the moinmoin [1] vulnerability [2] and the penetration of Debian's wiki [3]. We have reset all password hashes and sent individual notification to all Debian wiki account holders with instructions on how to recover (and thereby reset) their passwords [4]. More technical details about the attack are available [5]. We have completed our audit of the original server hosting wiki.debian.org and have concluded that the penetration did not yield escalated privileges for the attacker(s) beyond the 'wiki' service account. That said, it is clear that the attacker(s) have captured the email addresses and corresponding password hashes of all wiki editors. The attacker(s) were particularly interested in the password hashes belonging to users of Debian, Intel, Dell, Google, Microsoft, GNU, any .gov and any .edu. Presumably, the intent was to generate domain / username / password tuples from the email addresses and (eventually cracked) hashes, and to use these to attack the home instititions of these users. If the localpart of your email address (the portion to the left of the @) is your username at your home institution AND if you tend to use the same password with multiple services, then we *VERY STRONGLY* recommend changing your password at your home institution (the portion to the right of the @). Even if the localpart is not your username at your home institution, we recommend updating your password as other mechanisms to map your email address to your username may be available to the attacker(s). If you have any questions or concerns, please contact the Debian Wiki Administrator Team [6] and/or the Debian System Administration Team [7]. With kind regards, Paul Wise for the Debian Wiki Administrator Team Luca Filipozzi for the Debian System Administration Team [1] http://packages.qa.debian.org/m/moin.html [2] http://www.debian.org/security/2012/dsa-2593 [3] http://wiki.debian.org [4] http://wiki.debian.org/FrontPage?action=recoverpass [5] http://wiki.debian.org/DebianWiki/SecurityIncident2012 [6] debian-www@lists.debian.org [7] debian-ad...@debian.org -- Luca Filipozzi Member, Debian System Administration Team signature.asc Description: Digital signature
analysis of Debian wiki security breach
Dear editors of the Debian wiki, Please recall our recent email regarding the moinmoin [1] vulnerability [2] and the penetration of Debian's wiki [3]. We have reset all password hashes and sent individual notification to all Debian wiki account holders with instructions on how to recover (and thereby reset) their passwords [4]. More technical details about the attack are available [5]. We have completed our audit of the original server hosting wiki.debian.org and have concluded that the penetration did not yield escalated privileges for the attacker(s) beyond the 'wiki' service account. That said, it is clear that the attacker(s) have captured the email addresses and corresponding password hashes of all wiki editors. The attacker(s) were particularly interested in the password hashes belonging to users of Debian, Intel, Dell, Google, Microsoft, GNU, any .gov and any .edu. Presumably, the intent was to generate domain / username / password tuples from the email addresses and (eventually cracked) hashes, and to use these to attack the home instititions of these users. If the localpart of your email address (the portion to the left of the @) is your username at your home institution AND if you tend to use the same password with multiple services, then we *VERY STRONGLY* recommend changing your password at your home institution (the portion to the right of the @). Even if the localpart is not your username at your home institution, we recommend updating your password as other mechanisms to map your email address to your username may be available to the attacker(s). If you have any questions or concerns, please contact the Debian Wiki Administrator Team [6] and/or the Debian System Administration Team [7]. With kind regards, Paul Wise for the Debian Wiki Administrator Team Luca Filipozzi for the Debian System Administration Team [1] http://packages.qa.debian.org/m/moin.html [2] http://www.debian.org/security/2012/dsa-2593 [3] http://wiki.debian.org [4] http://wiki.debian.org/FrontPage?action=recoverpass [5] http://wiki.debian.org/DebianWiki/SecurityIncident2012 [6] debian-www@lists.debian.org [7] debian-ad...@debian.org -- Luca Filipozzi Member, Debian System Administration Team signature.asc Description: Digital signature
Lack of SSL for Debian Wiki login (was: Re: wiki.debian.org password reset)
* Luca Filipozzi lfili...@debian.org wrote: Please recall our recent email regarding the moinmoin [1] vulnerability [2] and the penetration of Debian's wiki [3]. We have reset all password hashes and sent individual notification to all Debian wiki account holders with instructions on how to recover (and thereby reset) their passwords [4]. More technical details about the attack are available [5]. [snip] Thanks, I just reset the password on my account only to realize that SSL is not being used by default on wiki.d.o. Surely this will be fixed in the very near future? Off to change my password again, -JLG -- Jeremy L. Gaddis e: jlgad...@gnu.org Network Engineer m: +1.812.865.0581 PGP: 0x95E2C8FE w: http://evilrouters.net -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107000808.ga10...@hq.evilrouters.net
Re: Lack of SSL for Debian Wiki login (was: Re: wiki.debian.org password reset)
On Sun, Jan 06, 2013 at 07:08:08PM -0500, Jeremy L. Gaddis wrote: * Luca Filipozzi lfili...@debian.org wrote: Please recall our recent email regarding the moinmoin [1] vulnerability [2] and the penetration of Debian's wiki [3]. We have reset all password hashes and sent individual notification to all Debian wiki account holders with instructions on how to recover (and thereby reset) their passwords [4]. More technical details about the attack are available [5]. [snip] Thanks, I just reset the password on my account only to realize that SSL is not being used by default on wiki.d.o. Yes. :/ Surely this will be fixed in the very near future? DSA and DWA are in discussion about enforcing encryption at all authentication points. We're currently debating the pros/cons of using a commercial SSL cert vs a Debian SSL cert. Given the dubious value of commercial certificates, I'm in favour of the latter but I appreciate that some users will find the browser warnings to be confusing. OTOH, I'd argue that if one wishes to maintain content at wiki.debian.org, then one should understand the basics of PKI. What do you think? Thanks, Luca DSA = Debian System Administration Team DWA = Debian Wiki/Web Administration Team (my coinage) -- Luca Filipozzi Member, Debian System Administration Team -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107014149.gb13...@emyr.net
Re: Lack of SSL for Debian Wiki login (was: Re: wiki.debian.org password reset)
Le Mon, Jan 07, 2013 at 01:41:49AM +, Luca Filipozzi a écrit : OTOH, I'd argue that if one wishes to maintain content at wiki.debian.org, then one should understand the basics of PKI. What do you think? Hi Luca, how about Debian Single Sign On (https://sso.debian.org) ? Have a nice day, -- Charles Plessy Tsurumi, Kanagawa, Japan -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107020217.ga31...@falafel.plessy.net
Project Participants page: name errors.
Joachim Breiter and Joachim Breitner have the same e-mail address. The correct one is Joachim Breitner. You might need to fix this error. -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/camumztcphyxq6kdyvdkc-fz4b3smwlsuthrr_yc9fxi5fjs...@mail.gmail.com
Re: wiki.debian.org password reset
On Mon, Jan 07, 2013 at 02:28:20AM +, Luca Filipozzi wrote: On Mon, Jan 07, 2013 at 12:57:38PM +1100, Andrew McGlashan wrote: What I want to know is the following Do you perform hardening practices such as described at this page: http://crackstation.net/hashing-security.htm lucaf@portabofh:~$ curl http://crackstation.net/hashing-security.htm Count not connect to PHPCount MySQL server! lucaf@portabofh:~$ Having looked at Google's cached version of that page... - if so, then we should be safe, if not, WHY NOT? That site is broken (see above). moin 1.9.x uses SSHA (salted SHA1): http://moinmo.in/MoinMoin2.0/SecurePasswordStorage It is understood that SHA1 is outdated. We've begun a discussion regarding using a newer hash algorithm and possibly a key stretching algorithm. Please consider adding debian-www@lists.debian.org and/or debian-ad...@debian.org to the thread if/when you reply. I've done this. Cheers, Luca -- Luca Filipozzi Member, Debian System Administration Team -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107024206.gb15...@emyr.net
Re: Lack of SSL for Debian Wiki login (was: Re: wiki.debian.org password reset)
* Luca Filipozzi lfili...@debian.org wrote: On Sun, Jan 06, 2013 at 07:08:08PM -0500, Jeremy L. Gaddis wrote: Thanks, I just reset the password on my account only to realize that SSL is not being used by default on wiki.d.o. Yes. :/ Surely this will be fixed in the very near future? DSA and DWA are in discussion about enforcing encryption at all authentication points. We're currently debating the pros/cons of using a commercial SSL cert vs a Debian SSL cert. Given the dubious value of commercial certificates, I'm in favour of the latter but I appreciate that some users will find the browser warnings to be confusing. Coincidentally, I'm taking a break from rolling out a new (internal only) PKI infrastructure at $work to write this e-mail. Enforcing encryption at any/all authentication points is something that, I hope, should not even need discussing. It should be enabled at any such points. If money wasn't a concern, I'd be in favor of rolling out commercial certificates everywhere simply to avoid any of the browser warnings. I'll admit ignorance when it comes to not knowing how or where Debian uses SSL certificates on public-facing infrastructure (although a quick check seems to indicate SSL isn't enabled on www.d.o), but I see no reason why certificates signed by SPI's CA (whose certificate is included in ca-certificates) could not be used. Alternatively, perhaps certificates from CAcert.org for public-facing services (does anyone besides Debian include their root CA certificate) and certificates from a private CA for use on Debian internal services? Obviously, there are a number of things to consider; I'm simply tossing out ideas at this point. OTOH, I'd argue that if one wishes to maintain content at wiki.debian.org, then one should understand the basics of PKI. What do you think? Agree. Being technical folks, I would guess that a large number of Debian users *do* understand the basics of PKI and why a certificate signed by a commercial CA is not technically more secure than one signed by a private CA. For those who don't, well, they should be able to understand why after ten minutes of reading. -- Jeremy Gaddis -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107024611.gb10...@hq.evilrouters.net
Re: Project Participants page: name errors.
Le 06/01/2013 22:19, Tae Wong a écrit : You might need to fix this error. As already mentioned countless times to you via this list [0], and via private emails, THIS IS NOT THE PLACE TO MENTION SUCH ISSUE! PLEASE GO AWAY TIA David 0: http://lists.debian.org/debian-www/2012/12/msg00085.html http://lists.debian.org/debian-www/2012/12/msg00098.html http://lists.debian.org/debian-www/2012/12/msg00109.html http://lists.debian.org/debian-www/2012/12/msg00123.html signature.asc Description: OpenPGP digital signature
Re: Lack of SSL for Debian Wiki login (was: Re: wiki.debian.org password reset)
* Charles Plessy ple...@debian.org wrote: Le Mon, Jan 07, 2013 at 01:41:49AM +, Luca Filipozzi a écrit : OTOH, I'd argue that if one wishes to maintain content at wiki.debian.org, then one should understand the basics of PKI. What do you think? how about Debian Single Sign On (https://sso.debian.org) ? Unfortunately, that is not an option for everyone at this time. From http://wiki.debian.org/DebianSingleSignOn: The web password single signon method only works for Debian Developers. While I may make a few contributions here and there, for example, I am not a DD. I would suspect there are a great number of wiki editors, for example, that are not DDs. I am not sure if wiki supports Debian SSO or not. If not, hopefully that support will be added in the future. In the meantime, however, requiring encryption when logging in to any site is a good idea. Actually, I'll go one step further and say that *not* requiring encrypted authentication is a *very bad idea*. -- Jeremy Gaddis -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107025232.gc10...@hq.evilrouters.net
Re: Project Participants page: name errors.
On Mon, 7 Jan 2013 11:19:48 +0900 Tae Wong wrote: Joachim Breiter and Joachim Breitner have the same e-mail address. The correct one is Joachim Breitner. You might need to fix this error. As already said repeatedly, www-team do NOT have permissions to fix those, you MUST talk such errors to the package's maintainer(s), not to -www. even if you report this here 1000 times, www-team CANNOT fix this. -- victory no need to CC me :-) http://userscripts.org/scripts/show/102724 0.0.1.3 -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107115345.a6fa62a36b8f74c20865d...@gmail.com
Re: Lack of SSL for Debian Wiki login (was: Re: wiki.debian.org password reset)
On Mon, Jan 7, 2013 at 8:08 AM, Jeremy L. Gaddis wrote: Thanks, I just reset the password on my account only to realize that SSL is not being used by default on wiki.d.o. As you found out, there is SSL available but not enforced. I strongly suggest installing xul-ext-https-everywhere and xul-ext-https-finder, which will maximise your use of SSL. There will be times you need to disable SSL for certain sites or parts of sites. -- bye, pabs http://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAKTje6G5Y2dNsTK2dWQvF1dKVKSaPZRhCAEj=+azosjjomy...@mail.gmail.com
Re: Lack of SSL for Debian Wiki login (was: Re: wiki.debian.org password reset)
On Mon, Jan 7, 2013 at 9:41 AM, Luca Filipozzi wrote: OTOH, I'd argue that if one wishes to maintain content at wiki.debian.org, then one should understand the basics of PKI. What do you think? Many of the Debian wiki editors are there to translate content to their own language. Some of these don't use Debian, some do. I don't think translators should need to learn about PKI to contribute. Only if we use a CA that is trusted by their browsers will we be not affecting anyone. -- bye, pabs http://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAKTje6EehMEF5ku=_g4pb4ucyntbv3r4e9scgxbqabrkp_o...@mail.gmail.com
Re: Project Participants page: name errors.
As you look, the messages you delete have to be re-created. Chrissie Caulfield is the correct one and Christie Caulfield is the incorrect one. These both have the same e-mail, chris...@debian.org. -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/camumztd3fbazx5tgmtnrvddgxl5rz59dapgn_aznqrpuby9...@mail.gmail.com
Re: Project Participants page: name errors.
On Mon, 7 Jan 2013 12:14:16 +0900 Tae Wong wrote: As you look, the messages you delete have to be re-created. Chrissie Caulfield is the correct one and Christie Caulfield is the incorrect one. These both have the same e-mail, chris...@debian.org. As already said repeatedly, www-team do NOT have permissions to fix those, you MUST talk such errors to the package's maintainer(s), not to -www. even if you report this here 1000 times, www-team CANNOT fix this. Then, if you continue to do so, we'll have to treat you as a spammer :( Again, what you should do is report such issues to the package's maintainer(s). -- victory no need to CC me :-) http://userscripts.org/scripts/show/102724 0.0.1.3 -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130107124057.2ba655e4d3e56b5fef1bb...@gmail.com
Re: wiki.debian.org password reset
Hi, On 7/01/2013 1:42 PM, Luca Filipozzi wrote: On Mon, Jan 07, 2013 at 02:28:20AM +, Luca Filipozzi wrote: On Mon, Jan 07, 2013 at 12:57:38PM +1100, Andrew McGlashan wrote: What I want to know is the following Do you perform hardening practices such as described at this page: http://crackstation.net/hashing-security.htm Having looked at Google's cached version of that page... ;) It worked last time I checked, but I too get the broken page now :( moin 1.9.x uses SSHA (salted SHA1): http://moinmo.in/MoinMoin2.0/SecurePasswordStorage It is understood that SHA1 is outdated. Okay, but SHA1 with key stretching would be better in the short term. We've begun a discussion regarding using a newer hash algorithm and possibly a key stretching algorithm. Please consider adding debian-www@lists.debian.org and/or debian-ad...@debian.org to the thread if/when you reply. I've done this. Thank you, I've done a reply all now. Cheers A. -- To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/50ea487f.6060...@affinityvision.com.au
Debian WWW CVS commit by victory-guest: webwml/english/security/2013 dsa-2599.data dsa ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: victory-guest 13/01/06 15:03:04 Added files: english/security/2013: dsa-2599.data dsa-2599.wml Log message: dsa-2599 -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by victory-guest: webwml english/security/2011/dsa-2176.data eng ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: victory-guest 13/01/06 15:07:31 Added files: english/security/2011: dsa-2176.data dsa-2176.wml french/security/2011: dsa-2176.wml Log message: [SECURITY] [DSA 2176-1] cups security update Modified files: danish/News/2011: 20110318.wml Log message: Typo Modified files: english/security/2013: dsa-2599.wml Log message: dsa-2599: s/CA's/CAs/g -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/english/security/2013 dsa-2599.data
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:10:39 Modified files: english/security/2013: dsa-2599.data Log message: document CVE-2013-0743 for DSA-2599-1 (r20833) -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/french/security/2013 dsa-2599.wml
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:23:01 Added files: french/security/2013: dsa-2599.wml Log message: (fr) Initial translation -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by victory-guest: webwml/japanese/security/2013 dsa-2599.wml
CVSROOT:/cvs/webwml Module name:webwml Changes by: victory-guest 13/01/06 15:23:31 Added files: japanese/security/2013: dsa-2599.wml Log message: dsa-2599 translated by victory -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by victory-guest: webwml/japanese/security/2007 dsa-1273.wml dsa ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: victory-guest 13/01/06 15:25:21 Added files: japanese/security/2007: dsa-1273.wml dsa-1274.wml dsa-1275.wml dsa-1276.wml Log message: dsa-1273-1276 translated by victory -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by victory-guest: webwml german/MailingLists/desc/user/translati ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: victory-guest 13/01/06 15:26:05 Modified files: german/MailingLists/desc/user: translation-check Added files: german/MailingLists/desc/user: debian-stable-announce Log message: Initial German translation of debian-stable-announce Added files: english/security/2011: dsa-2213.data dsa-2213.wml french/security/2011: dsa-2213.wml Log message: [DSA 2213-1] New x11-xserver-utils packages fix missing input sanitization Modified files: japanese/security/2007: dsa-1276.wml Log message: committed before save... -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/galician
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:46:52 webwml/galician Update of /cvs/webwml/webwml/galician In directory vasks:/tmp/cvs-serv13218/galician Log Message: Directory /cvs/webwml/webwml/galician added to the repository -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/galician/international
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:47:26 webwml/galician/international Update of /cvs/webwml/webwml/galician/international In directory vasks:/tmp/cvs-serv13279/international Log Message: Directory /cvs/webwml/webwml/galician/international added to the repository -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/galician/po
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:47:27 webwml/galician/po Update of /cvs/webwml/webwml/galician/po In directory vasks:/tmp/cvs-serv13279/po Log Message: Directory /cvs/webwml/webwml/galician/po added to the repository -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/galician/international/galician
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:48:58 webwml/galician/international/galician Update of /cvs/webwml/webwml/galician/international/galician In directory vasks:/tmp/cvs-serv13486/international/galician Log Message: Directory /cvs/webwml/webwml/galician/international/galician added to the repository -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml danish/security/2012/dsa-2506.wml galic ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:54:42 Modified files: danish/security/2012: dsa-2506.wml Log message: Sync Added files: galician : contact.wml donations.wml index.wml social_contract.wml support.wml Makefile Make.lang .wmlrc search.gl.xml Log message: Initial commit of Galician translation, thanks to Jorge Barreiro -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml danish/security/2012/dsa-2506.wml galic ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:54:45 Modified files: danish/security/2012: dsa-2506.wml Log message: Sync Added files: galician : contact.wml donations.wml index.wml social_contract.wml support.wml Makefile Make.lang .wmlrc search.gl.xml galician/po: bugs.gl.po cdimage.gl.po consultants.gl.po countries.gl.po date.gl.po distrib.gl.po doc.gl.po l10n.gl.po langs.gl.po legal.gl.po mailinglists.gl.po newsevents.gl.po organization.gl.po others.gl.po ports.gl.po security.gl.po stats.gl.po templates.gl.po vendors.gl.po vote.gl.po wnpp.gl.po Makefile Log message: Initial commit of Galician translation, thanks to Jorge Barreiro -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml danish/security/2012/dsa-2506.wml galic ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:54:46 Modified files: danish/security/2012: dsa-2506.wml Log message: Sync Added files: galician : contact.wml donations.wml index.wml social_contract.wml support.wml Makefile Make.lang .wmlrc search.gl.xml galician/po: bugs.gl.po cdimage.gl.po consultants.gl.po countries.gl.po date.gl.po distrib.gl.po doc.gl.po l10n.gl.po langs.gl.po legal.gl.po mailinglists.gl.po newsevents.gl.po organization.gl.po others.gl.po ports.gl.po security.gl.po stats.gl.po templates.gl.po vendors.gl.po vote.gl.po wnpp.gl.po Makefile galician/international: Makefile Log message: Initial commit of Galician translation, thanks to Jorge Barreiro -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml danish/security/2012/dsa-2506.wml galic ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:54:47 Modified files: danish/security/2012: dsa-2506.wml Log message: Sync Added files: galician : contact.wml donations.wml index.wml social_contract.wml support.wml Makefile Make.lang .wmlrc search.gl.xml galician/po: bugs.gl.po cdimage.gl.po consultants.gl.po countries.gl.po date.gl.po distrib.gl.po doc.gl.po l10n.gl.po langs.gl.po legal.gl.po mailinglists.gl.po newsevents.gl.po organization.gl.po others.gl.po ports.gl.po security.gl.po stats.gl.po templates.gl.po vendors.gl.po vote.gl.po wnpp.gl.po Makefile galician/international: Makefile galician/international/galician: mail_obsolete.txt mail_unmaintained.txt mail_user.txt translator.db.pl Log message: Initial commit of Galician translation, thanks to Jorge Barreiro -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml english/template/debian/languages.wml e ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:56:55 Modified files: english/template/debian: languages.wml language_names.wml . : Makefile Log message: Activate Galician translation -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml english/template/debian/languages.wml e ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:56:56 Modified files: english/template/debian: languages.wml language_names.wml . : Makefile english/devel/website: tc.data validation.data Log message: Activate Galician translation -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/english/template/debian languages.wml l ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 15:56:54 Modified files: english/template/debian: languages.wml language_names.wml Log message: Activate Galician translation -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml english/security/2013/dsa-2600.data eng ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 19:07:33 Added files: english/security/2013: dsa-2600.data dsa-2600.wml french/security/2013: dsa-2600.wml Log message: [DSA 2600-1] cups security update -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/english/security/2013 dsa-2600.data dsa ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 19:07:31 Added files: english/security/2013: dsa-2600.data dsa-2600.wml Log message: [DSA 2600-1] cups security update -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/english/security/2013 dsa-2601.data dsa ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 19:17:55 Added files: english/security/2013: dsa-2601.data dsa-2601.wml Log message: [DSA 2601-1] cups security update -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml english/security/2013/dsa-2601.data eng ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 19:17:56 Added files: english/security/2013: dsa-2601.data dsa-2601.wml french/security/2013: dsa-2601.wml Log message: [DSA 2601-1] cups security update -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by geissert: webwml japanese/security/2010/dsa-2133.wml jap ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: geissert13/01/06 21:47:46 Added files: japanese/security/2010: dsa-2133.wml Log message: Subject: [PATCH 5/6] Update japanese translation DSA 2133 (d-u@jp:54718) Added files: japanese/security/2012: dsa-2536.wml Log message: Subject: [PATCH 2/4] Update japanese translation DSA 2536 (d-u@jp:56484) Modified files: english/mirror : Mirrors.masterlist Log message: Add hosteurope.de's backports mirror 50e6ac4c.8030...@hosteurope.de -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by taffit: webwml/english/News/weekly Makefile
CVSROOT:/cvs/webwml Module name:webwml Changes by: taffit 13/01/06 22:00:31 Modified files: english/News/weekly: Makefile Log message: The current stuff are in projectnews now -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Debian WWW CVS commit by victory-guest: webwml english/security/2012/dsa-2574.data eng ...
CVSROOT:/cvs/webwml Module name:webwml Changes by: victory-guest 13/01/07 03:06:55 Added files: english/security/2012: dsa-2574.data dsa-2574.wml Log message: dsa-2574 Added files: japanese/security/2013: dsa-2600.wml dsa-2601.wml Log message: dsa-2600-2601 translated by victory -- To UNSUBSCRIBE, email to debian-www-cvs-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
