[DONE] wml://{security/2016/dsa-3562.wml}
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- --- english/security/2016/dsa-3562.wml 2016-05-01 17:07:43.000000000 +0500
+++ russian/security/2016/dsa-3562.wml 2016-05-01 18:48:26.163697490 +0500
@@ -1,34 +1,35 @@
- -<define-tag description>security update</define-tag>
+#use wml::debian::translation-check translation="1.1" maintainer="Lev Lamberov"
+<define-tag description>обновление безопаÑ?ноÑ?Ñ?и</define-tag>
<define-tag moreinfo>
- -<p>Several vulnerabilities were discovered in tardiff, a tarball comparison
- -tool. The Common Vulnerabilities and Exposures project identifies the
- -following problems:</p>
+<p>Ð? tardiff, инÑ?Ñ?Ñ?Ñ?менÑ?е длÑ? Ñ?Ñ?авнениÑ? аÑ?Ñ?ивов tar, бÑ?ло обнаÑ?Ñ?жено
+неÑ?колÑ?ко Ñ?Ñ?звимоÑ?Ñ?ей. Ð?Ñ?оекÑ? Common Vulnerabilities and Exposures опÑ?еделÑ?еÑ?
+Ñ?ледÑ?Ñ?Ñ?ие пÑ?облемÑ?:</p>
<ul>
<li><a href="https://security-tracker.debian.org/tracker/CVE-2015-0857";>CVE-2015-0857</a>
- - <p>Rainer Mueller and Florian Weimer discovered that tardiff is prone
- - to shell command injections via shell meta-characters in filenames
- - in tar files or via shell meta-characters in the tar filename
- - itself.</p></li>
+ <p>РаинеÑ? Ð?Ñ?ллеÑ? и ФлоÑ?иан Ð?аймеÑ? обнаÑ?Ñ?жили, Ñ?Ñ?о tardiff подвеÑ?ген
+ инÑ?екÑ?ии команд командной оболоÑ?ки Ñ?еÑ?ез меÑ?аÑ?иволÑ? командной оболоÑ?ки в именаÑ?
+ Ñ?айлов в аÑ?Ñ?иваÑ? tar или Ñ?еÑ?ез меÑ?аÑ?имволÑ? командной оболоÑ?ки в именаÑ? Ñ?айлов
+ tar.</p></li>
<li><a href="https://security-tracker.debian.org/tracker/CVE-2015-0858";>CVE-2015-0858</a>
- - <p>Florian Weimer discovered that tardiff uses predictable temporary
- - directories for unpacking tarballs. A malicious user can use this
- - flaw to overwrite files with permissions of the user running the
- - tardiff command line tool.</p></li>
+ <p>ФлоÑ?иан Ð?аймеÑ? обнаÑ?Ñ?жил, Ñ?Ñ?о tardiff иÑ?полÑ?зÑ?еÑ?Ñ?Ñ? пÑ?едÑ?казÑ?емÑ?е имена длÑ? вÑ?еменнÑ?Ñ?
+ каÑ?алогов пÑ?и Ñ?аÑ?паковке аÑ?Ñ?ивов tar. Ð?лоÑ?мÑ?Ñ?ленник можеÑ? иÑ?полÑ?зоваÑ?Ñ? Ñ?Ñ?Ñ? Ñ?Ñ?звимоÑ?Ñ?Ñ?
+ длÑ? пеÑ?езапиÑ?и Ñ?айлов, доÑ?Ñ?Ñ?п к коÑ?оÑ?Ñ?м имееÑ?Ñ?Ñ? Ñ? полÑ?зоваÑ?елÑ?, запÑ?Ñ?Ñ?ивÑ?его
+ командÑ? tardiff.</p></li>
</ul>
- -<p>For the stable distribution (jessie), these problems have been fixed in
- -version 0.1-2+deb8u2.</p>
+<p>Ð? Ñ?Ñ?абилÑ?ном вÑ?пÑ?Ñ?ке (jessie) Ñ?Ñ?и пÑ?облемÑ? бÑ?ли иÑ?пÑ?авленÑ? в
+веÑ?Ñ?ии 0.1-2+deb8u2.</p>
- -<p>For the unstable distribution (sid), these problems have been fixed in
- -version 0.1-5 and partially in earlier versions.</p>
+<p>Ð? неÑ?Ñ?абилÑ?ном вÑ?пÑ?Ñ?ке (sid) Ñ?Ñ?и пÑ?облемÑ? бÑ?ли иÑ?пÑ?авленÑ? в
+веÑ?Ñ?ии 0.1-5, а Ñ?акже Ñ?аÑ?Ñ?иÑ?но в более Ñ?анниÑ? веÑ?Ñ?иÑ?Ñ?.</p>
- -<p>We recommend that you upgrade your tardiff packages.</p>
+<p>РекомендÑ?еÑ?Ñ?Ñ? обновиÑ?Ñ? пакеÑ?Ñ? tardiff.</p>
</define-tag>
# do not modify the following line
-----BEGIN PGP SIGNATURE-----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=4QdP
-----END PGP SIGNATURE-----
Reply to: