[DONE] wml://security/2000/200011{11,20}.wml

To: <debian-l10n-russian@lists.debian.org>
Subject: [DONE] wml://security/2000/200011{11,20}.wml
From: Lev Lamberov <dogsleg@debian.org>
Date: Tue, 19 Jan 2016 17:38:20 +0500
Message-id: <[🔎] E1aLVYC-0001rH-LF@rosencrantz>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- --- english/security/2000/20001111.wml	2001-04-19 21:52:09.000000000 +0600
+++ russian/security/2000/20001111.wml	2016-01-19 17:13:45.203216640 +0500
@@ -1,20 +1,21 @@
+#use wml::debian::translation-check translation="1.3" maintainer="Lev Lamberov"
 <define-tag moreinfo>
- -The version of gnupg that was distributed in Debian GNU/Linux 2.2 had
- -a logic error in the code that checks for valid signatures which could
- -cause false positive results: Jim Small discovered that if the input
- -contained multiple signed sections the exit-code gnupg returned was
- -only valid for the last section, so improperly signed other sections
- -were not noticed.
+Ð?ÐµÑ?Ñ?Ð¸Ñ? gnupg, Ð¿Ð¾Ñ?Ñ?Ð°Ð²Ð»Ñ?ÐµÐ¼Ð°Ñ? Ð² Ñ?Ð¾Ñ?Ñ?Ð°Ð²Ðµ Debian GNU/Linux 2.2, Ñ?Ð¾Ð´ÐµÑ?Ð¶Ð¸Ñ?
+Ð»Ð¾Ð³Ð¸Ñ?ÐµÑ?ÐºÑ?Ñ? Ð¾Ñ?Ð¸Ð±ÐºÑ? Ð² ÐºÐ¾Ð´Ðµ Ð´Ð»Ñ? Ð¿Ñ?Ð¾Ð²ÐµÑ?ÐºÐ¸ Ð¿Ñ?Ð°Ð²Ð¸Ð»Ñ?Ð½Ð¾Ñ?Ñ?Ð¸ Ð¿Ð¾Ð´Ð¿Ð¸Ñ?ÐµÐ¹, ÐºÐ¾Ñ?Ð¾Ñ?Ð°Ñ? Ð¼Ð¾Ð¶ÐµÑ?
+Ð¿Ñ?Ð¸Ð²Ð¾Ð´Ð¸Ñ?Ñ? Ðº Ð»Ð¾Ð¶Ð½Ñ?Ð¼ Ñ?Ñ?Ð°Ð±Ð°Ñ?Ñ?Ð²Ð°Ð½Ð¸Ñ?Ð¼: Ð?Ð¶Ð¸Ð¼ Ð¡Ð¼Ð¾Ð»Ð» Ð¾Ð±Ð½Ð°Ñ?Ñ?Ð¶Ð¸Ð», Ñ?Ñ?Ð¾ ÐµÑ?Ð»Ð¸ Ð²Ñ?Ð¾Ð´Ð½Ñ?Ðµ Ð´Ð°Ð½Ð½Ñ?Ðµ
+Ñ?Ð¾Ð´ÐµÑ?Ð¶Ð°Ñ? Ð½ÐµÑ?ÐºÐ¾Ð»Ñ?ÐºÐ¾ Ð¿Ð¾Ð´Ð¿Ð¸Ñ?Ð°Ð½Ð½Ñ?Ñ? Ñ?Ð°Ð·Ð´ÐµÐ»Ð¾Ð², Ñ?Ð¾ ÐºÐ¾Ð´ Ð²Ñ?Ñ?Ð¾Ð´Ð°, Ð²Ð¾Ð·Ð²Ñ?Ð°Ñ?Ð°ÐµÐ¼Ñ?Ð¹ gnupg,
+Ð¿Ñ?Ð°Ð²Ð¸Ð»ÐµÐ½ Ñ?Ð¾Ð»Ñ?ÐºÐ¾ Ð´Ð»Ñ? Ð¿Ð¾Ñ?Ð»ÐµÐ´Ð½ÐµÐ³Ð¾ Ñ?Ð°Ð·Ð´ÐµÐ»Ð°, Ð¸Ð·-Ð·Ð° Ñ?Ñ?Ð¾Ð³Ð¾ Ð½ÐµÐ¿Ñ?Ð°Ð²Ð¸Ð»Ñ?Ð½Ð¾ Ð¿Ð¾Ð´Ð¿Ð¸Ñ?Ð°Ð½Ð½Ñ?Ðµ
+Ñ?Ð°Ð·Ð´ÐµÐ»Ñ? Ð¿ÐµÑ?ÐµÐ´ Ð¿Ð¾Ñ?Ð»ÐµÐ´Ð½Ð¸Ð¼ Ð½Ðµ Ð·Ð°Ð¼ÐµÑ?Ð°Ñ?Ñ?Ñ?Ñ?.
 
- -<p>This has been fixed in version 1.0.4-1 and we recommend that you upgrade
- -your gnupg package to that version. Please note that this version of gnupg
- -includes the RSA code directly instead of relying on the gpg-rsa package.
- -This means that the <code>"load-extension rsa"</code> command in
- -<code>~/.gnupg/options</code> is no longer needed and must be removed: gnupg
- -will not work correctly if it tries to load an extension that is not
- -present.
+<p>ÐÑ?Ð° Ñ?Ñ?Ð·Ð²Ð¸Ð¼Ð¾Ñ?Ñ?Ñ? Ð±Ñ?Ð»Ð° Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ð° Ð² Ð²ÐµÑ?Ñ?Ð¸Ð¸ 1.0.4-1, Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ñ?ÐµÑ?Ñ?Ñ? Ð¾Ð±Ð½Ð¾Ð²Ð¸Ñ?Ñ?
+Ð¿Ð°ÐºÐµÑ? gnupg Ð´Ð¾ Ñ?Ñ?Ð¾Ð¹ Ð²ÐµÑ?Ñ?Ð¸Ð¸. Ð?Ð°Ð¼ÐµÑ?Ñ?Ñ?Ðµ, Ñ?Ñ?Ð¾ Ñ?Ñ?Ð° Ð²ÐµÑ?Ñ?Ð¸Ñ? gnupg
+Ñ?Ð¾Ð´ÐµÑ?Ð¶Ð¸Ñ? ÐºÐ¾Ð´ RSA, Ð° Ð½Ðµ Ð¾Ð±Ñ?Ð°Ñ?Ð°ÐµÑ?Ñ?Ñ? Ðº Ð¿Ð°ÐºÐµÑ?Ñ? gpg-rsa.
+ÐÑ?Ð¾ Ð¾Ð·Ð½Ð°Ñ?Ð°ÐµÑ?, Ñ?Ñ?Ð¾ ÐºÐ¾Ð¼Ð°Ð½Ð´Ð° <code>"load-extension rsa"</code> Ð²
+<code>~/.gnupg/options</code> Ð±Ð¾Ð»ÐµÐµ Ð½Ðµ Ð½Ñ?Ð¶Ð½Ð° Ð¸ Ð´Ð¾Ð»Ð¶Ð½Ð° Ð±Ñ?Ñ?Ñ? Ñ?Ð´Ð°Ð»ÐµÐ½Ð°: gnupg
+Ð±Ñ?Ð´ÐµÑ? Ñ?Ð°Ð±Ð¾Ñ?Ð°Ñ?Ñ? Ð½ÐµÐºÐ¾Ñ?Ñ?ÐµÐºÑ?Ð½Ð¾ Ð² Ñ?Ð¾Ð¼ Ñ?Ð»Ñ?Ñ?Ð°Ðµ, ÐµÑ?Ð»Ð¸ Ð±Ñ?Ð´ÐµÑ? Ð¿Ñ?Ð¾Ð¸Ð·Ð²ÐµÐ´ÐµÐ½Ð° Ð¿Ð¾Ð¿Ñ?Ñ?ÐºÐ° Ð·Ð°Ð³Ñ?Ñ?Ð·Ð¸Ñ?Ñ?
+Ð¾Ñ?Ñ?Ñ?Ñ?Ñ?Ñ?Ð²Ñ?Ñ?Ñ?ÐµÐµ Ñ?Ð°Ñ?Ñ?Ð¸Ñ?ÐµÐ½Ð¸Ðµ.
 </define-tag>
- -<define-tag description>incorrect signature verification</define-tag>
+<define-tag description>Ð½ÐµÐºÐ¾Ñ?Ñ?ÐµÐºÑ?Ð½Ð°Ñ? Ð¿Ñ?Ð¾Ð²ÐµÑ?ÐºÐ° Ð¿Ð¾Ð´Ð¿Ð¸Ñ?Ð¸</define-tag>
 
 # do not modify the following line
 #include '$(ENGLISHDIR)/security/2000/20001111.data'
- --- english/security/2000/20001120.wml	2001-04-19 21:52:09.000000000 +0600
+++ russian/security/2000/20001120.wml	2016-01-19 17:36:33.036212890 +0500
@@ -1,19 +1,20 @@
- -<define-tag moreinfo>Sebastian Krahmer found a problem in the modprobe utility
- -that could be exploited by local users to run arbitrary commands as root if the
- -machine is running a kernel with kmod enabled.
+#use wml::debian::translation-check translation="1.2" maintainer="Lev Lamberov"
+<define-tag moreinfo>Ð¡ÐµÐ±Ð°Ñ?Ñ?Ð¸Ð°Ð½ Ð?Ñ?Ð°Ð¼ÐµÑ? Ð¾Ð±Ð½Ð°Ñ?Ñ?Ð¶Ð¸Ð» Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ñ? Ð² Ñ?Ñ?Ð¸Ð»Ð¸Ñ?Ðµ modprobe,
+ÐºÐ¾Ñ?Ð¾Ñ?Ð°Ñ? Ð¼Ð¾Ð¶ÐµÑ? Ð¸Ñ?Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?Ñ?Ñ?Ñ? Ð»Ð¾ÐºÐ°Ð»Ñ?Ð½Ñ?Ð¼Ð¸ Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ?Ð¼Ð¸ Ð´Ð»Ñ? Ð·Ð°Ð¿Ñ?Ñ?ÐºÐ° Ð¿Ñ?Ð¾Ð¸Ð·Ð²Ð¾Ð»Ñ?Ð½Ñ?Ñ? ÐºÐ¾Ð¼Ð°Ð½Ð´ Ð¾Ñ? Ð»Ð¸Ñ?Ð° Ñ?Ñ?Ð¿ÐµÑ?Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ? Ð² Ñ?Ð¾Ð¼ Ñ?Ð»Ñ?Ñ?Ð°Ðµ,
+ÐµÑ?Ð»Ð¸ Ð½Ð° Ð¼Ð°Ñ?Ð¸Ð½Ðµ Ð·Ð°Ð¿Ñ?Ñ?ÐµÐ½Ð¾ Ñ?Ð´Ñ?Ð¾ Ñ? Ð²ÐºÐ»Ñ?Ñ?Ñ?Ð½Ð½Ð¾Ð¹ Ð¾Ð¿Ñ?Ð¸ÐµÐ¹ kmod.
 
- -<p>The kmod kernel feature allows the kernel to dynamically load kernel modules if
- -functionality is required that is not present in the running kernel. It does
- -this by invoking the modprobe command with the requested module as parameter.
- -This parameter can be influenced by users, for example by opening a currently
- -non-existing files on a devfs filesystem, or trying to access a non-existing
- -network interface. Since modprobe did not properly escape shell meta-characters
- -when calling external commands or check if the last parameters was an option
- -instead of a modulename, users can cause it to run arbitrary commands.
+<p>Ð?Ð¿Ñ?Ð¸Ñ? kmod Ð¿Ð¾Ð·Ð²Ð¾Ð»Ñ?ÐµÑ? Ñ?Ð´Ñ?Ñ? Ð´Ð¸Ð½Ð°Ð¼Ð¸Ñ?ÐµÑ?ÐºÐ¸ Ð·Ð°Ð³Ñ?Ñ?Ð¶Ð°Ñ?Ñ? Ð¼Ð¾Ð´Ñ?Ð»Ð¸ Ñ?Ð´Ñ?Ð°, ÐµÑ?Ð»Ð¸
+Ñ?Ñ?ÐµÐ±Ñ?ÐµÐ¼Ð°Ñ? Ñ?Ñ?Ð½ÐºÑ?Ð¸Ð¾Ð½Ð°Ð»Ñ?Ð½Ð¾Ñ?Ñ?Ñ? Ð¾Ñ?Ñ?Ñ?Ñ?Ñ?Ñ?Ð²Ñ?ÐµÑ? Ð² Ð·Ð°Ð¿Ñ?Ñ?ÐµÐ½Ð½Ð¾Ð¼ Ñ?Ð´Ñ?Ðµ. ÐÑ?Ð¾ Ð²Ñ?Ð¿Ð¾Ð»Ð½Ñ?ÐµÑ?Ñ?Ñ?
+Ð±Ð»Ð°Ð³Ð¾Ð´Ð°Ñ?Ñ? Ð·Ð°Ð¿Ñ?Ñ?ÐºÑ? ÐºÐ¾Ð¼Ð°Ð½Ð´Ñ? modprobe Ñ? Ñ?Ñ?ÐµÐ±Ñ?ÐµÐ¼Ñ?Ð¼ Ð¼Ð¾Ð´Ñ?Ð»ÐµÐ¼ Ð² ÐºÐ°Ñ?ÐµÑ?Ñ?Ð²Ðµ Ð¿Ð°Ñ?Ð°Ð¼ÐµÑ?Ñ?Ð°.
+ÐÑ?Ð¾Ñ? Ð¿Ð°Ñ?Ð°Ð¼ÐµÑ?Ñ? Ð¼Ð¾Ð¶ÐµÑ? Ð±Ñ?Ñ?Ñ? Ð¸Ð·Ð¼ÐµÐ½Ñ?Ð½ Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ñ?Ð¼Ð¸, Ð½Ð°Ð¿Ñ?Ð¸Ð¼ÐµÑ?, Ð¿Ñ?Ñ?Ñ?Ð¼ Ð¾Ñ?ÐºÑ?Ñ?Ñ?Ð¸Ñ?
+Ð½ÐµÑ?Ñ?Ñ?ÐµÑ?Ñ?Ð²Ñ?Ñ?Ñ?Ð¸Ñ? Ð² Ð´Ð°Ð½Ð½Ñ?Ð¹ Ð¼Ð¾Ð¼ÐµÐ½Ñ? Ñ?Ð°Ð¹Ð»Ð¾Ð² Ð² Ñ?Ð°Ð¹Ð»Ð¾Ð²Ð¾Ð¹ Ñ?Ð¸Ñ?Ñ?ÐµÐ¼Ðµ devfs, Ð»Ð¸Ð±Ð¾ Ð¿Ñ?Ð¸ Ð¿Ð¾Ð¿Ñ?Ñ?ÐºÐµ Ð¾Ð±Ñ?Ð°Ñ?ÐµÐ½Ð¸Ñ? Ðº Ð½ÐµÑ?Ñ?Ñ?ÐµÑ?Ñ?Ð²Ñ?Ñ?Ñ?ÐµÐ¼Ñ?
+Ñ?ÐµÑ?ÐµÐ²Ð¾Ð¼Ñ? Ð¸Ð½Ñ?ÐµÑ?Ñ?ÐµÐ¹Ñ?Ñ?. Ð?Ð¾Ñ?ÐºÐ¾Ð»Ñ?ÐºÑ? modprobe Ð½ÐµÐ¿Ñ?Ð°Ð²Ð¸Ð»Ñ?Ð½Ð¾ Ñ?ÐºÑ?Ð°Ð½Ð¸Ñ?Ñ?ÐµÑ? Ð¼ÐµÑ?Ð°Ñ?Ð¸Ð¼Ð²Ð¾Ð»Ñ? ÐºÐ¾Ð¼Ð°Ð½Ð´Ð½Ð¾Ð¹ Ð¾Ð±Ð¾Ð»Ð¾Ñ?ÐºÐ¸
+Ð¿Ñ?Ð¸ Ð²Ñ?Ð·Ð¾Ð²Ðµ Ð²Ð½ÐµÑ?Ð½Ð¸Ñ? ÐºÐ¾Ð¼Ð°Ð½Ð´, Ð»Ð¸Ð±Ð¾ Ð½ÐµÐ¿Ñ?Ð°Ð²Ð¸Ð»Ñ?Ð½Ð¾ Ð²Ñ?Ð¿Ð¾Ð»Ð½Ñ?ÐµÑ? Ð¿Ñ?Ð¾Ð²ÐµÑ?ÐºÑ? Ð¿Ð¾Ñ?Ð»ÐµÐ´Ð½ÐµÐ³Ð¾ Ð¿Ð°Ñ?Ð°Ð¼ÐµÑ?Ñ?Ð° Ð½Ð° Ð¿Ñ?ÐµÐ´Ð¼ÐµÑ? Ñ?Ð¾Ð³Ð¾, Ñ?Ð²Ð»Ñ?ÐµÑ?Ñ?Ñ?
+Ð»Ð¸ Ð¾Ð½ Ð¸Ð¼ÐµÐ½ÐµÐ¼ Ð¼Ð¾Ð´Ñ?Ð»Ñ?, Ð¿Ð¾Ñ?Ñ?Ð¾Ð»Ñ?ÐºÑ? Ð¿Ð¾Ð»Ñ?Ð·Ð¾Ð²Ð°Ñ?ÐµÐ»Ð¸ Ð¼Ð¾Ð³Ñ?Ñ? Ð·Ð°Ð¿Ñ?Ñ?ÐºÐ°Ñ?Ñ? Ð¿Ñ?Ð¾Ð¸Ð·Ð²Ð¾Ð»Ñ?Ð½Ñ?Ðµ ÐºÐ¾Ð¼Ð°Ð½Ð´Ñ?.
 
- -<p>This has been fixed in version 2.3.11-12 and we recommend that you upgrade your
- -modutils package immediately.</define-tag>
- -<define-tag description>local exploit</define-tag>
+<p>ÐÑ?Ð° Ð¿Ñ?Ð¾Ð±Ð»ÐµÐ¼Ð° Ð±Ñ?Ð»Ð° Ð¸Ñ?Ð¿Ñ?Ð°Ð²Ð»ÐµÐ½Ð° Ð² Ð²ÐµÑ?Ñ?Ð¸Ð¸ 2.3.11-12, Ñ?ÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ñ?ÐµÑ?Ñ?Ñ? ÐºÐ°Ðº Ð¼Ð¾Ð¶Ð½Ð¾ Ñ?ÐºÐ¾Ñ?ÐµÐµ
+Ð¾Ð±Ð½Ð¾Ð²Ð¸Ñ?Ñ? Ð¿Ð°ÐºÐµÑ? modutils.</define-tag>
+<define-tag description>Ð»Ð¾ÐºÐ°Ð»Ñ?Ð½Ð°Ñ? Ñ?Ñ?Ð·Ð²Ð¸Ð¼Ð¾Ñ?Ñ?Ñ?</define-tag>
 
 # do not modify the following line
 #include '$(ENGLISHDIR)/security/2000/20001120.data'
-----BEGIN PGP SIGNATURE-----
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=WUf8
-----END PGP SIGNATURE-----
Reply to:
Prev by Date: [DONE] wml://security/2016/dsa-344{3,4,5,7}.wml
Next by Date: [DONE] wml://{security/2016/dsa-3448.wml}
Previous by thread: [DONE] wml://security/2016/dsa-344{3,4,5,7}.wml
Next by thread: [DONE] wml://{security/2016/dsa-3448.wml}
Index(es):
- Date
- Thread