[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[DONE] wml://{security/2017/dsa-3778.wml}



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- --- english/security/2017/dsa-3778.wml	2017-02-01 01:17:45.000000000 +0500
+++ russian/security/2017/dsa-3778.wml	2017-02-01 01:20:45.377754877 +0500
@@ -1,15 +1,16 @@
- -<define-tag description>security update</define-tag>
+#use wml::debian::translation-check translation="1.1" maintainer="Lev Lamberov"
+<define-tag description>обновление безопаÑ?ноÑ?Ñ?и</define-tag>
 <define-tag moreinfo>
- -<p>Michal Marek discovered that ruby-archive-tar-minitar, a Ruby library
- -that provides the ability to deal with POSIX tar archive files, is prone
- -to a directory traversal vulnerability. An attacker can take advantage
- -of this flaw to overwrite arbitrary files during archive extraction via
- -a .. (dot dot) in an extracted filename.</p>
+<p>Ð?иÑ?ал Ð?аÑ?ек обнаÑ?Ñ?жил, Ñ?Ñ?о ruby-archive-tar-minitar, библиоÑ?ека Ruby,
+пÑ?едоÑ?Ñ?авлÑ?Ñ?Ñ?аÑ? возможноÑ?Ñ?и длÑ? обÑ?абоÑ?ки tar-аÑ?Ñ?ивов Ñ?Ñ?андаÑ?Ñ?а POSIX,
+Ñ?Ñ?звима к обÑ?одÑ? каÑ?алога. Ð?лоÑ?мÑ?Ñ?ленник можеÑ? иÑ?полÑ?зоваÑ?Ñ?
+Ñ?Ñ?Ñ? Ñ?Ñ?звимоÑ?Ñ?Ñ? длÑ? пеÑ?езапиÑ?и пÑ?оизволÑ?нÑ?Ñ? Ñ?айлов в Ñ?оде Ñ?аÑ?паковки
+Ñ? помоÑ?Ñ?Ñ? .. (Ñ?оÑ?ка Ñ?оÑ?ка) в имени Ñ?аÑ?паковÑ?ваемого Ñ?айла.</p>
 
- -<p>For the stable distribution (jessie), this problem has been fixed in
- -version 0.5.2-2+deb8u1.</p>
+<p>Ð? Ñ?Ñ?абилÑ?ном вÑ?пÑ?Ñ?ке (jessie) Ñ?Ñ?а пÑ?облема бÑ?ла иÑ?пÑ?авлена в
+веÑ?Ñ?ии 0.5.2-2+deb8u1.</p>
 
- -<p>We recommend that you upgrade your ruby-archive-tar-minitar packages.</p>
+<p>РекомендÑ?еÑ?Ñ?Ñ? обновиÑ?Ñ? пакеÑ?Ñ? ruby-archive-tar-minitar.</p>
 </define-tag>
 
 # do not modify the following line
-----BEGIN PGP SIGNATURE-----
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=uMMQ
-----END PGP SIGNATURE-----


Reply to: