[DONE] wml://security/2015/dla-{349,133}.wml
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- --- english/security/2015/dla-133.wml 2016-04-09 01:32:23.000000000 +0500
+++ russian/security/2015/dla-133.wml 2016-04-29 22:29:47.188727595 +0500
@@ -1,23 +1,24 @@
- -<define-tag description>LTS security update</define-tag>
+#use wml::debian::translation-check translation="1.3" maintainer="Lev Lamberov"
+<define-tag description>обновление безопаÑ?ноÑ?Ñ?и LTS</define-tag>
<define-tag moreinfo>
<ul>
<li><a href="https://security-tracker.debian.org/tracker/CVE-2014-9274";>CVE-2014-9274</a>:
- - <p>check that accesses to color table stay within bounds
- - Patches taken from upstream commits:
+ <p>Ð?Ñ?овеÑ?ка Ñ?ого, Ñ?Ñ?о доÑ?Ñ?Ñ?п к Ñ?аблиÑ?е Ñ?веÑ?ов оÑ?Ñ?Ñ?еÑ?Ñ?влÑ?еÑ?Ñ?Ñ? в пÑ?еделаÑ? вÑ?деленного бÑ?Ñ?еÑ?а памÑ?Ñ?и.
+ Ð?аплаÑ?Ñ? взÑ?Ñ?Ñ? из оÑ?новной веÑ?ки Ñ?азÑ?абоÑ?ки:
- <a href="https://security-tracker.debian.org/tracker/CVE-2014-9274";>CVE-2014-9274</a>: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a</p></li>
<li><a href="https://security-tracker.debian.org/tracker/CVE-2014-9275";>CVE-2014-9275</a>:
- - <p>various crashes
- - . - <a href="https://security-tracker.debian.org/tracker/CVE-2014-9275";>CVE-2014-9275</a>: 1df886f2e65f7c512a6217588ae8d94d4bcbc63d
+ <p>РазлиÑ?нÑ?е аваÑ?ийнÑ?е оÑ?Ñ?ановки.
+ - <a href="https://security-tracker.debian.org/tracker/CVE-2014-9275";>CVE-2014-9275</a>: 1df886f2e65f7c512a6217588ae8d94d4bcbc63d
3c7ff3f888de0f0d957fe67b6bd4bec9c0d475f3</p></li>
</ul>
- -<p>For Debian 6 <q>Squeeze</q>, these issues have been fixed in unrtf version 0.19.3-1.1+deb6u1</p>
+<p>Ð? Debian 6 <q>Squeeze</q> Ñ?Ñ?и пÑ?облемÑ? бÑ?ли иÑ?пÑ?авленÑ? в unrtf веÑ?Ñ?ии 0.19.3-1.1+deb6u1</p>
</define-tag>
# do not modify the following line
- --- english/security/2015/dla-349.wml 2016-04-08 01:24:54.000000000 +0500
+++ russian/security/2015/dla-349.wml 2016-04-29 22:27:03.858347981 +0500
@@ -1,21 +1,22 @@
- -<define-tag description>LTS security update</define-tag>
+#use wml::debian::translation-check translation="1.2" maintainer="Lev Lamberov"
+<define-tag description>обновление безопаÑ?ноÑ?Ñ?и LTS</define-tag>
<define-tag moreinfo>
- -<p>It was discovered that there was a potential settings leak in date
- -template filter of Django, a web-development framework.</p>
+<p>Ð?Ñ?ло обнаÑ?Ñ?жено, Ñ?Ñ?о в Ñ?илÑ?Ñ?Ñ?е Ñ?алонÑ? даÑ?Ñ? в Django, инÑ?Ñ?аÑ?Ñ?Ñ?Ñ?кÑ?Ñ?Ñ?Ñ? веб-Ñ?азÑ?абоÑ?ки,
+имееÑ?Ñ?Ñ? поÑ?енÑ?иалÑ?наÑ? Ñ?Ñ?еÑ?ка наÑ?Ñ?Ñ?оек.</p>
- -<p>If an application allows users to specify an unvalidated format for
- -dates and passes this format to the date filter, e.g.
- -<tt>{{ last_updated|date:user_date_format }}</tt>, then a malicious user
- -could obtain any secret in the application's settings by specifying
- -a settings key instead of a date format. e.g. <q>SECRET_KEY</q> instead
- -of "j/m/Y".</p>
+<p>Ð?Ñ?ли пÑ?иложениÑ? позволÑ?еÑ? полÑ?зоваÑ?елÑ?м опÑ?еделÑ?Ñ?Ñ? непÑ?овеÑ?еннÑ?й Ñ?оÑ?маÑ?
+длÑ? пÑ?едÑ?Ñ?авлениÑ? даÑ? и пеÑ?едаÑ?Ñ? Ñ?Ñ?оÑ? Ñ?оÑ?маÑ? Ñ?илÑ?Ñ?Ñ?Ñ? даÑ?, напÑ?.
+<tt>{{ last_updated|date:user_date_format }}</tt>, Ñ?о злоÑ?мÑ?Ñ?ленник
+можеÑ? полÑ?Ñ?иÑ?Ñ? лÑ?бÑ?Ñ? закÑ?Ñ?Ñ?Ñ?Ñ? инÑ?оÑ?маÑ?иÑ? из наÑ?Ñ?Ñ?оек пÑ?иложениÑ? пÑ?Ñ?Ñ?м опÑ?еделениÑ?
+клÑ?Ñ?а наÑ?Ñ?Ñ?оек вмеÑ?Ñ?о Ñ?оÑ?маÑ?а даÑ?Ñ?. напÑ?. <q>SECRET_KEY</q> вмеÑ?Ñ?о
+"j/m/Y".</p>
- -<p>To remedy this, the underlying function used by the date template
- -filter, django.utils.formats.get_format(), now only allows accessing
- -the date/time formatting settings.</p>
+<p>Ð?лÑ? иÑ?пÑ?авлениÑ? Ñ?Ñ?ой пÑ?облемÑ? в наÑ?Ñ?оÑ?Ñ?ее вÑ?емÑ? Ñ?Ñ?нкÑ?иÑ?, иÑ?полÑ?зÑ?емаÑ? в Ñ?илÑ?Ñ?Ñ?е Ñ?аблона
+даÑ?Ñ?, django.utils.formats.get_format(), позволÑ?еÑ? полÑ?Ñ?аÑ?Ñ? доÑ?Ñ?Ñ?п
+Ñ?олÑ?ко к наÑ?Ñ?Ñ?ойкам Ñ?оÑ?маÑ?а даÑ?Ñ? и вÑ?емени.</p>
- -<p>For Debian 6 Squeeze, this issue has been fixed in python-django
- -version 1.2.3-3+squeeze15.</p>
+<p>Ð? Debian 6 Squeeze Ñ?Ñ?а пÑ?облема бÑ?ла иÑ?пÑ?авлена в python-django
+веÑ?Ñ?ии 1.2.3-3+squeeze15.</p>
</define-tag>
# do not modify the following line
-----BEGIN PGP SIGNATURE-----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=K50X
-----END PGP SIGNATURE-----
Reply to: