summaryrefslogtreecommitdiff
path: root/po/zh_CN.po
diff options
context:
space:
mode:
authorThorsten Kukuk <kukuk@thkukuk.de>2015-06-22 14:53:01 +0200
committerThorsten Kukuk <kukuk@thkukuk.de>2015-06-22 14:53:01 +0200
commite89d4c97385ff8180e6e81e84c5aa745daf28a79 (patch)
tree17ef8bacb38a0f60a7476420ab62627cc8af440c /po/zh_CN.po
parentf4fbbbcc52696d67ebe57ee8214fbbdf4c479dbc (diff)
Release version 1.2.1
Security fix: CVE-2015-3238 If the process executing pam_sm_authenticate or pam_sm_chauthtok method of pam_unix is not privileged enough to check the password, e.g. if selinux is enabled, the _unix_run_helper_binary function is called. When a long enough password is supplied (16 pages or more, i.e. 65536+ bytes on a system with 4K pages), this helper function hangs indefinitely, blocked in the write(2) call while writing to a blocking pipe that has a limited capacity. With this fix, the verifiable password length will be limited to PAM_MAX_RESP_SIZE bytes (i.e. 512 bytes) for pam_exec and pam_unix. * NEWS: Update * configure.ac: Bump version * modules/pam_exec/pam_exec.8.xml: document limitation of password length * modules/pam_exec/pam_exec.c: limit password length to PAM_MAX_RESP_SIZE * modules/pam_unix/pam_unix.8.xml: document limitation of password length * modules/pam_unix/pam_unix_passwd.c: limit password length * modules/pam_unix/passverify.c: Likewise * modules/pam_unix/passverify.h: Likewise * modules/pam_unix/support.c: Likewise
Diffstat (limited to 'po/zh_CN.po')
-rw-r--r--po/zh_CN.po22
1 files changed, 11 insertions, 11 deletions
diff --git a/po/zh_CN.po b/po/zh_CN.po
index bb2b7756..00b783bc 100644
--- a/po/zh_CN.po
+++ b/po/zh_CN.po
@@ -11,7 +11,7 @@ msgid ""
msgstr ""
"Project-Id-Version: Linux-PAM\n"
"Report-Msgid-Bugs-To: http://sourceforge.net/projects/pam\n"
-"POT-Creation-Date: 2015-03-25 16:52+0100\n"
+"POT-Creation-Date: 2015-06-22 14:16+0200\n"
"PO-Revision-Date: 2012-12-24 06:31+0000\n"
"Last-Translator: Christopher Meng <cickumqt@gmail.com>\n"
"Language-Team: Chinese (China) <trans-zh_cn@lists.fedoraproject.org>\n"
@@ -245,12 +245,12 @@ msgid "contains the user name in some form"
msgstr "以某些形式包含用户名"
#: modules/pam_cracklib/pam_cracklib.c:701
-#: modules/pam_unix/pam_unix_passwd.c:494
+#: modules/pam_unix/pam_unix_passwd.c:501
msgid "No password supplied"
msgstr "密码未提供"
#: modules/pam_cracklib/pam_cracklib.c:701
-#: modules/pam_unix/pam_unix_passwd.c:494
+#: modules/pam_unix/pam_unix_passwd.c:501
msgid "Password unchanged"
msgstr "密码未更改"
@@ -373,7 +373,7 @@ msgid "Unable to create and initialize directory '%s'."
msgstr "无法创建和初始化目录 '%s'。"
#: modules/pam_pwhistory/pam_pwhistory.c:217
-#: modules/pam_unix/pam_unix_passwd.c:515
+#: modules/pam_unix/pam_unix_passwd.c:522
msgid "Password has been already used. Choose another."
msgstr "密码已使用。请选择其他密码。"
@@ -546,31 +546,31 @@ msgstr[0] "警告:您的密码将在 %d 天后过期"
msgid "Warning: your password will expire in %d days"
msgstr "警告:您的密码将在 %d 天后过期"
-#: modules/pam_unix/pam_unix_passwd.c:396
+#: modules/pam_unix/pam_unix_passwd.c:403
msgid "NIS password could not be changed."
msgstr "无法更改 NIS 密码。"
-#: modules/pam_unix/pam_unix_passwd.c:511
+#: modules/pam_unix/pam_unix_passwd.c:518
msgid "You must choose a longer password"
msgstr "必须选择更长的密码"
-#: modules/pam_unix/pam_unix_passwd.c:618
+#: modules/pam_unix/pam_unix_passwd.c:625
#, c-format
msgid "Changing password for %s."
msgstr "为 %s 更改 STRESS 密码。"
-#: modules/pam_unix/pam_unix_passwd.c:629
+#: modules/pam_unix/pam_unix_passwd.c:636
msgid "(current) UNIX password: "
msgstr "(当前)UNIX 密码:"
-#: modules/pam_unix/pam_unix_passwd.c:664
+#: modules/pam_unix/pam_unix_passwd.c:671
msgid "You must wait longer to change your password"
msgstr "您必须等待更长时间以更改密码"
-#: modules/pam_unix/pam_unix_passwd.c:724
+#: modules/pam_unix/pam_unix_passwd.c:731
msgid "Enter new UNIX password: "
msgstr "输入新的 UNIX 密码:"
-#: modules/pam_unix/pam_unix_passwd.c:725
+#: modules/pam_unix/pam_unix_passwd.c:732
msgid "Retype new UNIX password: "
msgstr "重新输入新的 UNIX 密码:"