-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - --- english/security/2015/dla-268.wml 2016-04-08 00:21:20.000000000 +0500 +++ russian/security/2015/dla-268.wml 2016-05-04 13:30:45.729915969 +0500 @@ -1,29 +1,30 @@ - -<define-tag description>LTS security update</define-tag> +#use wml::debian::translation-check translation="1.2" maintainer="Lev Lamberov" +<define-tag description>обновление безопаÑноÑÑи LTS</define-tag> <define-tag moreinfo> - -<p>Three vulnerabilities have been fixed in the Debian squeeze-lts version of - -VirtualBox (package name: virtualbox-ose), a x86 virtualisation solution.</p> +<p>РвеÑÑии VirtualBox (пакеÑ: virtualbox-ose), ÑеÑении Ð´Ð»Ñ Ð²Ð¸ÑÑÑализаÑии Ð´Ð»Ñ Ð°ÑÑ Ð¸ÑекÑÑÑÑ x86, +Ð²Ñ Ð¾Ð´ÑÑей в ÑоÑÑав Debian squeeze-lts, бÑло обнаÑÑжено ÑÑи ÑÑзвимоÑÑи.</p> <ul> <li><a href="https://security-tracker.debian.org/tracker/CVE-2015-0377">CVE-2015-0377</a> - - <p>Avoid VirtualBox allowing local users to affect availability via - - unknown vectors related to Core, which might result in denial of - - service. (Other issue than <a href="https://security-tracker.debian.org/tracker/CVE-2015-0418">CVE-2015-0418</a>).</p></li> + <p>Ðе допÑÑение VirtualBox ÑазÑеÑаÑÑ Ð»Ð¾ÐºÐ°Ð»ÑнÑм полÑзоваÑелÑм влиÑÑÑ Ð½Ð° доÑÑÑпноÑÑÑ ÑеÑез + неизвеÑÑнÑе векÑоÑÑ, ÑвÑзаннÑе Ñ Core, ÑÑо Ð¼Ð¾Ð¶ÐµÑ Ð¿ÑиводиÑÑ Ðº оÑÐºÐ°Ð·Ñ Ð² + обÑлÑживании. (ÐÑо оÑлиÑÐ½Ð°Ñ Ð¾Ñ <a href="https://security-tracker.debian.org/tracker/CVE-2015-0418">CVE-2015-0418</a> пÑоблема).</p></li> <li><a href="https://security-tracker.debian.org/tracker/CVE-2015-0418">CVE-2015-0418</a> - - <p>Avoid VirtualBox allowing local users to affect availability via - - unknown vectors related to Core, which might result in denial of - - service. (Other issue than <a href="https://security-tracker.debian.org/tracker/CVE-2015-0377">CVE-2015-0377</a>).</p></li> + <p>Ðе допÑÑение VirtualBox ÑазÑеÑаÑÑ Ð»Ð¾ÐºÐ°Ð»ÑнÑм полÑзоваÑелÑм влиÑÑÑ Ð½Ð° доÑÑÑпноÑÑÑ ÑеÑез + неизвеÑÑнÑе векÑоÑÑ, ÑвÑзаннÑе Ñ Core, ÑÑо Ð¼Ð¾Ð¶ÐµÑ Ð¿ÑиводиÑÑ Ðº оÑÐºÐ°Ð·Ñ Ð² + обÑлÑживании. (ÐÑо оÑлиÑÐ½Ð°Ñ Ð¾Ñ <a href="https://security-tracker.debian.org/tracker/CVE-2015-0377">CVE-2015-0377</a> пÑоблема).</p></li> <li><a href="https://security-tracker.debian.org/tracker/CVE-2015-3456">CVE-2015-3456</a> - - <p>The Floppy Disk Controller (FDC) in QEMU, also used in VirtualBox and - - other virtualization products, allowed local guest users to cause a - - denial of service (out-of-bounds write and guest crash) or possibly - - execute arbitrary code via the (1) FD_CMD_READ_ID, (2) - - FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, + <p>ÐонÑÑÐ¾Ð»Ð»ÐµÑ Ð³Ð¸Ð±ÐºÐ¸Ñ Ð¼Ð°Ð³Ð½Ð¸ÑнÑÑ Ð´Ð¸Ñков (FDC) в QEMU, иÑполÑзÑемÑй в VirtualBox и + в дÑÑÐ³Ð¸Ñ Ð¿ÑодÑкÑÐ°Ñ Ð´Ð»Ñ Ð²Ð¸ÑÑÑализаÑии, позволÑÐµÑ Ð»Ð¾ÐºÐ°Ð»ÑнÑм полÑзоваÑелÑм гоÑÑевой ÑиÑÑÐµÐ¼Ñ Ð²ÑзÑваÑÑ + оÑказ в обÑлÑживании (запиÑÑ Ð·Ð° пÑеделами вÑделенного бÑÑеÑа памÑÑи и аваÑÐ¸Ð¹Ð½Ð°Ñ Ð¾ÑÑановка гоÑÑевой ÑиÑÑемÑ) или + поÑенÑиалÑно вÑполнÑÑÑ Ð¿ÑоизволÑнÑй код Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ (1) FD_CMD_READ_ID, (2) + FD_CMD_DRIVE_SPECIFICATION_COMMAND, либо вÑполнÑÑÑ Ð´ÑÑгие неопÑеделÑннÑе командÑ, aka VENOM.</p></li> </ul> - --- english/security/2015/dla-272.wml 2016-04-07 03:10:35.000000000 +0500 +++ russian/security/2015/dla-272.wml 2016-05-04 12:34:26.547711512 +0500 @@ -1,35 +1,36 @@ - -<define-tag description>LTS security update</define-tag> +#use wml::debian::translation-check translation="1.1" maintainer="Lev Lamberov" +<define-tag description>обновление безопаÑноÑÑи LTS</define-tag> <define-tag moreinfo> - -<p>Several vulnerabilities were discovered in Django, a high-level Python web - -development framework:</p> +<p>Ð Django, вÑÑокоÑÑовневой инÑÑаÑÑÑÑкÑÑÑе веб-ÑазÑабоÑки на ÑзÑке Python, бÑло +обнаÑÑжено неÑколÑко ÑÑзвимоÑÑей:</p> <ul> <li><a href="https://security-tracker.debian.org/tracker/CVE-2015-2317">CVE-2015-2317</a> - - <p>Daniel Chatfield discovered that python-django, a high-level Python - - web development framework, incorrectly handled user-supplied redirect - - URLs. A remote attacker could use this flaw to perform a cross-site - - scripting attack.</p></li> + <p>ÐÑÐ½Ð¸ÐµÐ»Ñ Ð§Ð°ÑÑилд обнаÑÑжил, ÑÑо python-django, вÑÑокоÑÑÐ¾Ð²Ð½ÐµÐ²Ð°Ñ Ð¸Ð½ÑÑаÑÑÑÑкÑÑÑа веб-ÑазÑабоÑки + на ÑзÑке Python, непÑавилÑно обÑабаÑÑÐ²Ð°ÐµÑ Ð¿ÐµÑедаваемÑе полÑзоваÑелем пеÑенапÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ + URL. УдалÑннÑй злоÑмÑÑленник Ð¼Ð¾Ð¶ÐµÑ Ð¸ÑполÑзоваÑÑ ÑÑÑ Ð¿ÑÐ¾Ð±Ð»ÐµÐ¼Ñ Ð´Ð»Ñ Ð²ÑÐ¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ñ Ð¼ÐµÐ¶ÑайÑового + ÑкÑипÑинга.</p></li> <li><a href="https://security-tracker.debian.org/tracker/CVE-2015-5143">CVE-2015-5143</a> - - <p>Eric Peterson and Lin Hua Cheng discovered that a new empty record - - used to be created in the session storage every time a session was - - accessed and an unknown session key was provided in the request - - cookie. This could allow remote attackers to saturate the session - - store or cause other users' session records to be evicted.</p></li> + <p>ÐÑик ÐеÑеÑÑон и ÐÐ¸Ð½Ñ Ð¥Ñа ЧÑн обнаÑÑжили, ÑÑо новÑе пÑÑÑÑе запиÑи + иÑполÑзÑÑÑÑÑ Ð´Ð»Ñ ÑÐ¾Ð·Ð´Ð°Ð½Ð¸Ñ ÑеÑÑионного Ñ ÑанилиÑа каждÑй Ñаз, когда пÑоиÑÑ Ð¾Ð´Ð¸Ñ + обÑаÑение к ÑеÑÑии и пÑедоÑÑавлÑеÑÑÑ Ð½ÐµÐ¸Ð·Ð²ÐµÑÑнÑй клÑÑ ÑеÑÑии в запÑоÑе + кÑки. ÐÑо позволÑÐµÑ ÑдалÑннÑм злоÑмÑÑленникам заполнÑÑÑ ÑеÑÑионное Ñ ÑанилиÑе + или ÑдалÑÑÑ ÑеÑÑионнÑе запиÑи дÑÑÐ³Ð¸Ñ Ð¿Ð¾Ð»ÑзоваÑелей.</p></li> <li><a href="https://security-tracker.debian.org/tracker/CVE-2015-5144">CVE-2015-5144</a> - - <p>Sjoerd Job Postmus discovered that some built-in validators did not - - properly reject newlines in input values. This could allow remote - - attackers to inject headers in emails and HTTP responses.</p></li> + <p>СÑÑÑд Ðоб ÐоÑÑмÑÑ Ð¾Ð±Ð½Ð°ÑÑжил, ÑÑо некоÑоÑÑе вÑÑÑоеннÑе Ð¼ÐµÑ Ð°Ð½Ð¸Ð·Ð¼Ñ Ð¿ÑовеÑки непÑавилÑно + оÑклонÑÑÑ Ð½Ð¾Ð²Ñе ÑÑÑоки во Ð²Ñ Ð¾Ð´Ð½ÑÑ Ð·Ð½Ð°ÑениÑÑ . ÐÑо Ð¼Ð¾Ð¶ÐµÑ Ð¿Ð¾Ð·Ð²Ð¾Ð»Ð¸ÑÑ ÑдалÑннÑм + злоÑмÑÑленникам вводиÑÑ Ð·Ð°Ð³Ð¾Ð»Ð¾Ð²ÐºÐ¸ в ÑообÑÐµÐ½Ð¸Ñ ÑлекÑÑонной поÑÑÑ Ð¸ запÑоÑÑ HTTP.</p></li> </ul> - -<p>For the oldoldstable distribution (squeeze), these problems have been fixed in - -version 1.2.3-3+squeeze13.</p> +<p>РпÑедÑдÑÑем ÑÑаÑом ÑÑабилÑном вÑпÑÑке (squeeze) ÑÑи пÑÐ¾Ð±Ð»ÐµÐ¼Ñ Ð±Ñли иÑпÑÐ°Ð²Ð»ÐµÐ½Ñ Ð² +веÑÑии 1.2.3-3+squeeze13.</p> </define-tag> # do not modify the following line -----BEGIN PGP SIGNATURE-----
iQIcBAEBCgAGBQJXKbM6AAoJEF7nbuICFtKlcJEP+wU5RZenBf9+gXIZN13wIKJG OG6o6q1M2CUFI/YfmzAg9Dflgh5hCweSDoP//sB9MKP/N5UIKaU8ixgHvL4+vB/6 1xOrRbYizNn4/wuABl6Vrg7LqAYnoksIgQ7dmIqtYZvKUBeuyxFDJtRu+dqC46bE xA+eLnPI6R0m+W/qp/wlG/q8hBnqLHyUV7C4oSo2/jHRYRa1+FIEQOt01hCzh4w5 sGIBdZn6ed0VVSnqVOeau4rEXjz3hX1dGnMwmPFOifSmsgK2X9HbmysAKy1w6A3K q72rwkdZ6zW82PDm4OwRYYLMFMXouWx4vJD4WFUW6trMepg5ws6jeWIGVG1gIguI ZpywnKoBCbB1JT9uXHXD47yh/OfvZNXOKFk1bh+7btF8yXYlLrLR99QDmpbqZDGv ilMUxlPbmsXdOdGPXJ1BbC/n+PJHPYzzTZOH0VelSgH7AMo97BVym/46MFBonzVR uRAVArvzEi3cXrqgiVONJdkKLTBk/dsQe6AehR9rgi/tNDIOTpgJr+EgVzov5HRx Q5TBlv8SG3QODRWwDs3zUDDwTlW/nMpnTGA2cJgb/qtAH22le2vNd1VUlSdErfed 8owSlVfQWOzApMwAXXNHoB+CNAKf+db3HX8cBOtQVt2hrDvyzecz8caYexXT74ti hrG5LU+lnPRWGw45II8S =fLhQ -----END PGP SIGNATURE-----