View | Details | Raw Unified | Return to bug 39939
Collapse All | Expand All

(-)debian/changelog (+6 lines)
 Lines 1-3    Link Here 
1
univention-self-service (1.0.2-29) unstable; urgency=low
2
3
  * Do not reveal unknown usernames (Bug #39939).
4
5
 -- Daniel Troeder <troeder@univention.de>  Wed, 25 Nov 2015 10:39:33 +0100
6
1
univention-self-service (1.0.2-28) unstable; urgency=low
7
univention-self-service (1.0.2-28) unstable; urgency=low
2
8
3
  * fix bad comparison, raise request limits (Bug #39720)
9
  * fix bad comparison, raise request limits (Bug #39720)
(-)umc/python/passwordreset/__init__.py (-1 / +1 lines)
 Lines 439-445    Link Here 
439
			gr_names = map(str.lower, self.dns_to_groupname(groups_dns))
439
			gr_names = map(str.lower, self.dns_to_groupname(groups_dns))
440
		except IndexError:
440
		except IndexError:
441
			# no user or no group found
441
			# no user or no group found
442
			raise UMC_Error(_("Unknown user '{}'.").format(username))
442
			raise UMC_Error(_("Username or password is incorrect.").format(username))
443
443
444
		# group blacklist
444
		# group blacklist
445
		if any([gr in bl_groups for gr in gr_names]):
445
		if any([gr in bl_groups for gr in gr_names]):
(-)umc/python/passwordreset/de.po (-4 lines)
 Lines 121-130    Link Here 
121
msgid "The Password has been used already. Please supply a new one."
121
msgid "The Password has been used already. Please supply a new one."
122
msgstr "Das Passwort wurde bereits verwendet. Bitte geben Sie ein neues ein."
122
msgstr "Das Passwort wurde bereits verwendet. Bitte geben Sie ein neues ein."
123
123
124
#: umc/python/passwordreset/__init__.py:439
125
msgid "Unknown user '{}'."
126
msgstr "Unbekannter Benutzer '{}'."
127
128
#: umc/python/passwordreset/__init__.py:493
124
#: umc/python/passwordreset/__init__.py:493
129
msgid "Program error. Please report this to the administrator."
125
msgid "Program error. Please report this to the administrator."
130
msgstr "Programm Fehler. Bitte berichten Sie dies dem Administrator."
126
msgstr "Programm Fehler. Bitte berichten Sie dies dem Administrator."

Return to bug 39939