--- ../../english/security/2018/dsa-4253.wml 2018-07-24 10:39:25.076550278 +0500 +++ 2018/dsa-4253.wml 2018-07-24 10:43:34.922868923 +0500 @@ -1,22 +1,23 @@ -<define-tag description>security update</define-tag> +#use wml::debian::translation-check translation="aa50a8a71248a2894016a08e6c47690f3e21bc06" mindelta="1" maintainer="Lev Lamberov" +<define-tag description>обновление безопаÑноÑÑи</define-tag> <define-tag moreinfo> -<p>Denis Andzakovic discovered that network-manager-vpnc, a plugin to -provide VPNC support for NetworkManager, is prone to a privilege -escalation vulnerability. A newline character can be used to inject a -Password helper parameter into the configuration data passed to vpnc, -allowing a local user with privileges to modify a system connection to -execute arbitrary commands as root.</p> +<p>ÐÐµÐ½Ð¸Ñ ÐÐ½Ð´Ð·Ð°ÐºÐ¾Ð²Ð¸Ñ Ð¾Ð±Ð½Ð°ÑÑжил, ÑÑо network-manager-vpnc, дополнение, +пÑедоÑÑавлÑÑÑее поддеÑÐ¶ÐºÑ VPNC Ð´Ð»Ñ NetworkManager, ÑÑзвимо к повÑÑÐµÐ½Ð¸Ñ +пÑивилегий. Символ новой ÑÑÑоки Ð¼Ð¾Ð¶ÐµÑ Ð¸ÑполÑзоваÑÑÑÑ Ð´Ð»Ñ Ð²Ð²Ð¾Ð´Ð° паÑамеÑÑа +вÑпомогаÑелÑной ÑÑилиÑÑ Password в наÑÑÑойки, пеÑедаваемÑе vpnc, ÑÑо +позволÑÐµÑ Ð»Ð¾ÐºÐ°Ð»ÑÐ½Ð¾Ð¼Ñ Ð¿Ð¾Ð»ÑзоваÑелÑ, имеÑÑÐµÐ¼Ñ ÑооÑвеÑÑÑвÑÑÑие пÑава на изменение +ÑиÑÑемного ÑоединениÑ, вÑполнÑÑÑ Ð¿ÑоизволÑнÑе ÐºÐ¾Ð¼Ð°Ð½Ð´Ñ Ð¾Ñ Ð»Ð¸Ñа ÑÑпеÑполÑзоваÑелÑ.</p> -<p>For the stable distribution (stretch), this problem has been fixed in -version 1.2.4-4+deb9u1.</p> +<p>Ð ÑÑабилÑном вÑпÑÑке (stretch) ÑÑа пÑоблема бÑла иÑпÑавлена в +веÑÑии 1.2.4-4+deb9u1.</p> -<p>We recommend that you upgrade your network-manager-vpnc packages.</p> +<p>РекомендÑеÑÑÑ Ð¾Ð±Ð½Ð¾Ð²Ð¸ÑÑ Ð¿Ð°ÐºÐµÑÑ network-manager-vpnc.</p> -<p>For the detailed security status of network-manager-vpnc please refer to -its security tracker page at: -<a href="https://security-tracker.debian.org/tracker/network-manager-vpnc">https://security-tracker.debian.org/tracker/network-manager-vpnc</a></p> +<p>С подÑобнÑм ÑÑаÑÑÑом поддеÑжки безопаÑноÑÑи network-manager-vpnc можно ознакомиÑÑÑÑ Ð½Ð° +ÑооÑвеÑÑÑвÑÑÑей ÑÑÑаниÑе оÑÑÐ»ÐµÐ¶Ð¸Ð²Ð°Ð½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑноÑÑи по адÑеÑÑ +<a href="https://security-tracker.debian.org/tracker/network-manager-vpnc">\ +https://security-tracker.debian.org/tracker/network-manager-vpnc</a></p> </define-tag> # do not modify the following line #include "$(ENGLISHDIR)/security/2018/dsa-4253.data" -# $Id: $