Pete Batard
c3c39f7f8a
[pki] fix https://www.kb.cert.org/vuls/id/403768
...
* This commit effectively fixes https://www.kb.cert.org/vuls/id/403768 (CVE-2017-13083) as
it is described per its revision 11, which is the latest revision at the time of this commit,
by disabling Windows prompts, enacted during signature validation, that allow the user to
bypass the intended signature verification checks.
* It needs to be pointed out that the vulnerability ("allow(ing) the use of a self-signed
certificate"), which relies on the end-user actively ignoring a Windows prompt that tells
them that the update failed the signature validation whilst also advising against running it,
is being fully addressed, even as the update protocol remains HTTP.
* It also need to be pointed out that the extended delay (48 hours) between the time the
vulnerability was reported and the moment it is fixed in our codebase has to do with
the fact that the reporter chose to deviate from standard security practices by not
disclosing the details of the vulnerability with us, be it publicly or privately,
before creating the cert.org report. The only advance notification we received was a
generic note about the use of HTTP vs HTTPS, which, as have established, is not
immediately relevant to addressing the reported vulnerability.
* Closes #1009
* Note: The other vulnerability scenario described towards the end of #1009 , which
doesn't have to do with the "lack of CA checking", will be addressed separately.
2017-08-31 12:19:11 +01:00
Pete Batard
868eea5069
[loc] fix Spanish translation
2017-08-26 11:32:40 +01:00
Feras n
9de244c10e
[loc] update Arabic translation to latest
2017-08-16 16:39:20 +01:00
Na Jiyoun
3d33493c6f
[loc] update Korean translation to latest
2017-08-07 18:11:04 +01:00
Pete Batard
925837e4d3
v2.16 (build 1170)
2017-07-31 10:55:41 +01:00
Zia Azimi
9740e94876
[loc] update Persian translation to latest
2017-07-29 17:40:10 +01:00
Nikolaos Margaritis
d7d6caebe1
[loc] update Greek translation to latest
2017-07-29 15:45:55 +01:00
Martin Kubánik
e68df21a16
[loc] update Slovak translation to latest
2017-07-29 15:42:32 +01:00
Krasimir Newenow
6db159be9e
[loc] update Bulgarian translation to latest
2017-07-28 15:33:23 +01:00
Matej Horvat
0887368988
[loc] update Slovenian translation to latest
2017-07-28 13:10:51 +01:00
Arif Budiman
a96a615a66
[loc] update Indonesian translation to latest
2017-07-28 13:08:15 +01:00
Gintaras Venslovas
1baf1b7d1a
[loc] update Lithuanian translation to latest
2017-07-26 11:48:56 +01:00
Ivan Strugar
3622b441ed
[loc] update Serbian translation to latest
2017-07-25 00:19:35 +01:00
Tiago Rinaldi
32b8b5b232
[loc] update Portuguese (Brazilian) translation to latest
...
* Closes #981
2017-07-24 17:34:44 +01:00
Pete Batard
93c2d7851e
[ui] fix info box when downloading Syslinux/GRUB files
...
* Don't duplicate the PrintInfo() from DownloadFile()
* Make sure caret is disabled and displayed text will not appear selected
* Also update MSG_085 and remove unneeded MSG_240
2017-07-24 17:20:17 +01:00
Noam Sarusi
811f3cc1bc
[loc] update Hebrew translation to latest
2017-07-24 12:11:13 +01:00
Константин В
2b3f1be78c
[loc] update Ukrainian translation to latest
2017-07-24 11:57:30 +01:00
Tiryoh
4fe6ffb9d4
[loc] update Japanese translation to latest
2017-07-24 11:52:42 +01:00
Dario Komar
7a929b36b4
[loc] update Croatian translation to latest
2017-07-24 11:49:59 +01:00
Riku Brander
5e609f022f
[loc] update Finnish translation to latest
2017-07-22 19:12:11 +01:00
Elvin Məlikov
f1aeb63267
[loc] update Azerbaijani translation to latest
2017-07-20 17:49:20 +01:00
Sippapas Wangsri
5c3437f6de
[loc] update Thai translation to latest
2017-07-19 16:57:52 +01:00
Pete Batard
9f8f5517fe
[loc] update Vietnamese translation to latest
2017-07-19 13:50:35 +01:00
Chocobo1
0137de5c3a
[loc] update Chinese Traditional translation to latest
...
* Closes #985
2017-07-19 13:45:09 +01:00
Gîrlea Alexandru
476ef267d2
[loc] update Romanian translation to latest
2017-07-18 15:39:29 +01:00
Mehmetali Kuran
980dc53d37
[loc] update Turkish translation to latest
2017-07-18 13:01:09 +01:00
Pete Batard
77e40d1373
[syslinux] remove unwanted 'isolinux.tmp' on error
...
* Also use a global 'temp_dir' variable and fix a small issue with Swedish translation
2017-07-18 12:57:22 +01:00
Thilo Langbein
ae6fa7af39
[loc] update German translation to latest
2017-07-18 12:16:22 +01:00
Piotr Halama
90761165de
[loc] update Polish translation to latest
2017-07-18 12:12:45 +01:00
Aldis Tutins
09538a2456
[loc] update Latvian translation to latest
2017-07-18 12:09:56 +01:00
Jan-Erik Drangevåg
172ba1e795
[loc] update Norwegian translation to latest
2017-07-18 12:06:59 +01:00
Richard Kahl
b556c4dece
[loc] update Czech translation
2017-07-18 12:03:17 +01:00
Jiawei Wang
b4800cd206
[loc] update Chinese Simplified translation to latest
...
* Closes #982
2017-07-18 11:56:15 +01:00
Sopor
a4cf6aea8f
[loc] update Swedish translation to latest
2017-07-18 11:50:39 +01:00
Dinis Medeiros
ca9cdaf14b
[loc] update Portuguese (Standard) translation to latest
2017-07-17 22:10:29 +01:00
Roberto Boriotti
bb828fda2b
[loc] update Italian translation to latest
2017-07-17 22:07:21 +01:00
MaKK
6d8da601c7
[loc] update Spanish translation to latest
2017-07-17 17:40:17 +01:00
Pete Batard
f01043feda
[misc] fix minor MinGW warnings
...
* Also update localization to version 1.0.22
2017-07-17 17:18:18 +01:00
Pete Batard
a528bb3d83
[ui] report process(es) that are preventing access on error
...
* Also revert loc file changes that were introduced in f53b22a077
2017-07-11 17:50:38 +01:00
marcellogianola
86c530ac50
[loc] Fix typos in Italian translation
...
* Closes #975
2017-07-05 15:29:24 +01:00
Tiago Rinaldi
bfecb9e29f
[loc] Update Portuguese (Brazilian) translation
...
* Closes #974
2017-06-29 11:31:52 +01:00
Pete Batard
150be52479
[iso] notify if the file size on disk is smaller than expected ISO size
...
* Closes #963
* Also fix a potential issue with Notification()
2017-06-24 17:23:06 +01:00
Pete Batard
f53b22a077
[ui] tell users to check the log on access errors
...
* Also make sure to have big fat WARNING there if we detect conflicting processes
2017-05-05 23:32:01 +01:00
Konrad Becker
27bc4cb02b
[loc] fixed two German spelling errors
...
* One missing and one surplus character.
2017-04-26 00:07:58 +01:00
Pete Batard
e2481efcd9
[pki] application security improvements
...
* Also clean up registry variables and add IsRegistryNode() call
2017-04-12 20:40:43 +01:00
Mayuso
893a2e63d7
[loc] more Spanish translation fixes
...
* Closes #915
2017-03-17 15:03:31 +01:00
Darío Hereñú
1c5ff3dd7c
[loc] fix Spanish translation
...
* Closes #914
2017-03-16 21:20:59 +01:00
Sopor
5f679edf4d
[loc] update Swedish translation
2017-03-13 11:32:19 +01:00
Wang JiaWei
659f2fae34
[loc] update Simplified Chinese translation to latest
...
* Also fix a typo
* Closes #905
2017-02-17 11:54:15 +00:00
Na Jiyoun
c877284d2a
[loc] update Korean translation to latest
2017-02-15 12:16:02 +00:00