wiki.debian.org security breach: global passwords reset

Steve McIntyre, administrator of the Debian wiki, announced that due to a security breach, all wiki.debian.org account passwords are being reset. In order to regain access to your wiki account, you'll need to follow the password recovery process. In the mail, Steve explained that the Debian Security Team recently found a vulnerability in the moin package which had been succesfully exploited for wiki.debian.org. The wiki has already been moved to another server and an audit of the old server is ongoing.

Bits from the DPL

Stefano Zacchiroli sent his \ monthly report of DPL activities for December 2012. Stefano reported about progress in the DPL helpers experiment, as well as collaborations with external projects such as the Open Source Initiative (OSI) and Free Software Foundation (FSF). In addition, Stefano reported that the debian.eu domain is finally under control of the Debian System Administrators.

Other news
  • amd64 most popular architecture according to popcon
  • Register your media types to the IANA
  • First release of dput-ng in unstable
  • Recent changes on the Debian QA front
  • Fancy graphs on lintian.debian.org

Andreas Tille announced that the statistics about selected Debian teams have been updated, and now include all of 2012.

New Debian Contributors Release-Critical bugs statistics for the upcoming release Important Debian Security Advisories

Debian's Security Team recently released advisories for these packages (among others): wireshark, mahara, elinks, moin, virtualbox-ose, ghostscript, mediawiki-extensions, rails, weechat, nss, cups, gnupg, and gnupg2. Please read them carefully and take the proper measures.

Work-needing packages Want to continue reading DPN?