Attachment #7317 for bug #39939

View | Details | Raw Unified | Return to bug 39939
Collapse All | Expand All

Lines 1-3 Link Here

(-)debian/changelog (+6 lines)
		1	univention-self-service (1.0.2-29) unstable; urgency=low
		2
		3	* Do not reveal unknown usernames (Bug #39939).
		4
		5	-- Daniel Troeder <troeder@univention.de> Wed, 25 Nov 2015 10:39:33 +0100
		6
1	univention-self-service (1.0.2-28) unstable; urgency=low	7	univention-self-service (1.0.2-28) unstable; urgency=low
2		8
3	* fix bad comparison, raise request limits (Bug #39720)	9	* fix bad comparison, raise request limits (Bug #39720)

Lines 439-445 Link Here

(-)umc/python/passwordreset/__init__.py (-1 / +1 lines)
439	gr_names = map(str.lower, self.dns_to_groupname(groups_dns))	439	gr_names = map(str.lower, self.dns_to_groupname(groups_dns))
440	except IndexError:	440	except IndexError:
441	# no user or no group found	441	# no user or no group found
442	raise UMC_Error(_("Unknown user '{}'.").format(username))	442	raise UMC_Error(_("Username or password is incorrect.").format(username))
443		443
444	# group blacklist	444	# group blacklist
445	if any([gr in bl_groups for gr in gr_names]):	445	if any([gr in bl_groups for gr in gr_names]):

Lines 121-130 Link Here

(-)umc/python/passwordreset/de.po (-4 lines)
121	msgid "The Password has been used already. Please supply a new one."	121	msgid "The Password has been used already. Please supply a new one."
122	msgstr "Das Passwort wurde bereits verwendet. Bitte geben Sie ein neues ein."	122	msgstr "Das Passwort wurde bereits verwendet. Bitte geben Sie ein neues ein."
123		123
124	#: umc/python/passwordreset/__init__.py:439
125	msgid "Unknown user '{}'."
126	msgstr "Unbekannter Benutzer '{}'."
127
128	#: umc/python/passwordreset/__init__.py:493	124	#: umc/python/passwordreset/__init__.py:493
129	msgid "Program error. Please report this to the administrator."	125	msgid "Program error. Please report this to the administrator."
130	msgstr "Programm Fehler. Bitte berichten Sie dies dem Administrator."	126	msgstr "Programm Fehler. Bitte berichten Sie dies dem Administrator."

Return to bug 39939