From e89d4c97385ff8180e6e81e84c5aa745daf28a79 Mon Sep 17 00:00:00 2001 From: Thorsten Kukuk Date: Mon, 22 Jun 2015 14:53:01 +0200 Subject: Release version 1.2.1 Security fix: CVE-2015-3238 If the process executing pam_sm_authenticate or pam_sm_chauthtok method of pam_unix is not privileged enough to check the password, e.g. if selinux is enabled, the _unix_run_helper_binary function is called. When a long enough password is supplied (16 pages or more, i.e. 65536+ bytes on a system with 4K pages), this helper function hangs indefinitely, blocked in the write(2) call while writing to a blocking pipe that has a limited capacity. With this fix, the verifiable password length will be limited to PAM_MAX_RESP_SIZE bytes (i.e. 512 bytes) for pam_exec and pam_unix. * NEWS: Update * configure.ac: Bump version * modules/pam_exec/pam_exec.8.xml: document limitation of password length * modules/pam_exec/pam_exec.c: limit password length to PAM_MAX_RESP_SIZE * modules/pam_unix/pam_unix.8.xml: document limitation of password length * modules/pam_unix/pam_unix_passwd.c: limit password length * modules/pam_unix/passverify.c: Likewise * modules/pam_unix/passverify.h: Likewise * modules/pam_unix/support.c: Likewise --- po/hi.po | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) (limited to 'po/hi.po') diff --git a/po/hi.po b/po/hi.po index 46d2413e..bd316514 100644 --- a/po/hi.po +++ b/po/hi.po @@ -10,7 +10,7 @@ msgid "" msgstr "" "Project-Id-Version: Linux-PAM\n" "Report-Msgid-Bugs-To: http://sourceforge.net/projects/pam\n" -"POT-Creation-Date: 2015-03-25 16:52+0100\n" +"POT-Creation-Date: 2015-06-22 14:16+0200\n" "PO-Revision-Date: 2013-01-21 12:02+0000\n" "Last-Translator: kumarvimal \n" "Language-Team: Hindi \n" @@ -244,12 +244,12 @@ msgid "contains the user name in some form" msgstr "कुछ रूप में उपयोक्ता नाम समाहित करता है" #: modules/pam_cracklib/pam_cracklib.c:701 -#: modules/pam_unix/pam_unix_passwd.c:494 +#: modules/pam_unix/pam_unix_passwd.c:501 msgid "No password supplied" msgstr "कोई कूटशब्द नहीं दिया गया है" #: modules/pam_cracklib/pam_cracklib.c:701 -#: modules/pam_unix/pam_unix_passwd.c:494 +#: modules/pam_unix/pam_unix_passwd.c:501 msgid "Password unchanged" msgstr "शब्दकूट परिवर्तित" @@ -373,7 +373,7 @@ msgid "Unable to create and initialize directory '%s'." msgstr "निर्देशिका '%s' बनाने और आरंभ करने में असमर्थ." #: modules/pam_pwhistory/pam_pwhistory.c:217 -#: modules/pam_unix/pam_unix_passwd.c:515 +#: modules/pam_unix/pam_unix_passwd.c:522 msgid "Password has been already used. Choose another." msgstr "शब्दकूट को पहले ही बदला जा चुका है. दूसरा चुनें." @@ -548,31 +548,31 @@ msgstr[1] "चेतावनी: आपका शब्दकूट %d दि msgid "Warning: your password will expire in %d days" msgstr "चेतावनी: आपका शब्दकूट %d दिनों में समाप्त हो जायेगा" -#: modules/pam_unix/pam_unix_passwd.c:396 +#: modules/pam_unix/pam_unix_passwd.c:403 msgid "NIS password could not be changed." msgstr "NIS शब्दकूट बदला नहीं जा सका." -#: modules/pam_unix/pam_unix_passwd.c:511 +#: modules/pam_unix/pam_unix_passwd.c:518 msgid "You must choose a longer password" msgstr "आपको जरूर एक लंबा शब्दकूट चुनना चाहिए" -#: modules/pam_unix/pam_unix_passwd.c:618 +#: modules/pam_unix/pam_unix_passwd.c:625 #, c-format msgid "Changing password for %s." msgstr "%s के लिए कूटशब्द बदल रहा है" -#: modules/pam_unix/pam_unix_passwd.c:629 +#: modules/pam_unix/pam_unix_passwd.c:636 msgid "(current) UNIX password: " msgstr "(मौजूदा) UNIX शब्दकूट: " -#: modules/pam_unix/pam_unix_passwd.c:664 +#: modules/pam_unix/pam_unix_passwd.c:671 msgid "You must wait longer to change your password" msgstr "आपको अपना शब्दकूट बदलने के लिए लंबी प्रतीक्षा करनी होगी" -#: modules/pam_unix/pam_unix_passwd.c:724 +#: modules/pam_unix/pam_unix_passwd.c:731 msgid "Enter new UNIX password: " msgstr "नया UNIX शब्दकूट दें: " -#: modules/pam_unix/pam_unix_passwd.c:725 +#: modules/pam_unix/pam_unix_passwd.c:732 msgid "Retype new UNIX password: " msgstr "नया UNIX शब्दकूट फिर टाइप करें: " -- cgit v1.2.3