-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - --- english/security/2016/dsa-3655.wml 2016-08-27 01:36:09.000000000 +0500 +++ russian/security/2016/dsa-3655.wml 2016-08-27 13:13:35.072062868 +0500 @@ -1,33 +1,34 @@ - -<define-tag description>security update</define-tag> +#use wml::debian::translation-check translation="1.1" maintainer="Lev Lamberov" +<define-tag description>обновление безопаÑноÑÑи</define-tag> <define-tag moreinfo> - -<p>Two vulnerabilities were discovered in MuPDF, a lightweight PDF viewer. - -The Common Vulnerabilities and Exposures project identifies the - -following problems:</p> +<p>Ð MuPDF, легковеÑном пÑоÑмоÑÑÑике PDF, бÑли обнаÑÑÐ¶ÐµÐ½Ñ Ð´Ð²Ðµ ÑÑзвимоÑÑи. +ÐÑÐ¾ÐµÐºÑ Common Vulnerabilities and Exposures опÑеделÑÐµÑ +ÑледÑÑÑие пÑоблемÑ:</p> <ul> <li><a href="https://security-tracker.debian.org/tracker/CVE-2016-6265">CVE-2016-6265</a> - - <p>Marco Grassi discovered a use-after-free vulnerability in MuPDF. An - - attacker can take advantage of this flaw to cause an application - - crash (denial-of-service), or potentially to execute arbitrary code - - with the privileges of the user running MuPDF, if a specially - - crafted PDF file is processed.</p></li> + <p>ÐаÑко ÐÑаÑÑи обнаÑÑжил иÑполÑзование ÑказаÑелей поÑле оÑÐ²Ð¾Ð±Ð¾Ð¶Ð´ÐµÐ½Ð¸Ñ Ð¿Ð°Ð¼ÑÑи в MuPDF. + ÐлоÑмÑÑленник Ð¼Ð¾Ð¶ÐµÑ Ð¸ÑполÑзоваÑÑ ÑÑÑ ÑÑзвимоÑÑÑ Ð´Ð»Ñ Ð°Ð²Ð°Ñийной оÑÑановки пÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ + (оÑказ в обÑлÑживании) или поÑенÑиалÑного вÑÐ¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ñ Ð¿ÑоизволÑного кода + Ñ Ð¿Ñавами полÑзоваÑелÑ, запÑÑÑивÑего MuPDF, в ÑлÑÑае обÑабоÑки + ÑпеÑиалÑно ÑÑоÑмиÑованного Ñайла в ÑоÑмаÑе PDF.</p></li> <li><a href="https://security-tracker.debian.org/tracker/CVE-2016-6525">CVE-2016-6525</a> - - <p>Yu Hong and Zheng Jihong discovered a heap overflow vulnerability - - within the pdf_load_mesh_params function, allowing an attacker to - - cause an application crash (denial-of-service), or potentially to - - execute arbitrary code with the privileges of the user running - - MuPDF, if a specially crafted PDF file is processed.</p></li> + <p>Юй Ð¥Ñн и ЧжÑн Ð¦Ð·Ð¸Ñ Ñн обнаÑÑжили пеÑеполнение динамиÑеÑкой памÑÑи + в ÑÑнкÑии pdf_load_mesh_params, позволÑÑÑее злоÑмÑÑÐ»ÐµÐ½Ð½Ð¸ÐºÑ + аваÑийно завеÑÑаÑÑ ÑабоÑÑ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ (оÑказ в обÑлÑживании) или поÑенÑиалÑно + вÑполнÑÑÑ Ð¿ÑоизволÑнÑй код Ñ Ð¿Ñавами полÑзоваÑелÑ, запÑÑÑивÑего + MuPDF, в ÑлÑÑае обÑабоÑки ÑпеÑиалÑно ÑÑоÑмиÑованного Ñайла в ÑоÑмаÑе PDF.</p></li> </ul> - -<p>For the stable distribution (jessie), these problems have been fixed in - -version 1.5-1+deb8u1.</p> +<p>Ð ÑÑабилÑном вÑпÑÑке (jessie) ÑÑи пÑÐ¾Ð±Ð»ÐµÐ¼Ñ Ð±Ñли иÑпÑÐ°Ð²Ð»ÐµÐ½Ñ Ð² +веÑÑии 1.5-1+deb8u1.</p> - -<p>We recommend that you upgrade your mupdf packages.</p> +<p>РекомендÑеÑÑÑ Ð¾Ð±Ð½Ð¾Ð²Ð¸ÑÑ Ð¿Ð°ÐºÐµÑÑ mupdf.</p> </define-tag> # do not modify the following line -----BEGIN PGP SIGNATURE-----
iQIcBAEBCgAGBQJXwUuyAAoJEF7nbuICFtKlj5MP/AhFZVCODig6EX1pLYGM6iZm DbuKJT+bzzAmGVkQpL5nDwSLE7djpGIxnLQxseXN56OCi+N+Rta4TPSonOhYWwQS 0G0FXuF7qcvGD8Y4kU9RreFXAqHcS7/2wZJtWV8nOi8chGWUbsUfn5PVKsX2DIim IrvgN8bxskrMNcd0oxvaii3nqsXDZ6wpDJK4diNQomJnVIFXekcmUMKXi2szLrQS tF/ic160/pTzSB4/j/601v+KE8JcHgxnoDLqHITsH8oqDdoG5Ov4Yra8PGNFT1c3 jgHYTFjCLG1i2uAhZcY+uMzLSnbW4j+g+WZ62I8+/tZyN5cwMk2kWbJjvgJoLtEf d8F2qBDLWXa47plB8kaquxVeMliXvWMsgPWGFuakZbauChnn/4yy86CwT8KiCZ/i iaamt3KY4XbPtjN13wLhHA4hg9EXlB96SJ/3bZLolaSYTtTaeZusdC5KyPIwXls5 inUBLmiwF1uOwe+oRx6BeJycb+OgR1Z2nToMQZpdOWVPh5VcVsdX7e62vDTkLWo6 JfpGqx21SipXBGSFvd8X8dlKMRF+TWH27j2ZxUmKeJ5TPjXRMIyj44UoHKrTVH+7 gU+1m1zob1iTE8ZrpyKzCBDNNQOWAPDvWXghBZGJhPuu51NHQiXzLHGuiMOvUMMm 7GW49I8FyCQZq0yrYdje =ih8q -----END PGP SIGNATURE-----