Critical translation mistake of "Authentication mode" list in localized gksu-properties (su ->Sudan Language) may cause incorrect choice causing system damages and security vulnerabilities

Bug #1183593 reported by Viktor Mileikovskyi
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gksu (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

In dropdown list "Authentication mode" there is a critical translation mistake.
The command name "su" is interpreted by Pootle as a Sudan language.
A novice may not correctly understand the list and can make an incorrect choice that will cause serious system damages or security vulnerabilities. Incorrectly used root privilages may be a good gate for viruses and atackers.
I see this mistake in Ukrainian but it maybe the same in different languages. So I did not write directly to Ukrainian developer (Danilo) but send to bugs.lounchpad.net with security group notification.
Please verify localizations to prevent great problems.
I included a warning to

http://askubuntu.com/questions/284306/why-is-gksu-no-longer-installed-by-default-in-13-04/284717#284717

But it can not be a 100% protection.

ProblemType: Bug
DistroRelease: Ubuntu 13.04
Package: gksu 2.0.2-6ubuntu2
ProcVersionSignature: Ubuntu 3.8.0-21.32-generic 3.8.8
Uname: Linux 3.8.0-21-generic x86_64
NonfreeKernelModules: wl nvidia
ApportVersion: 2.9.2-0ubuntu8
Architecture: amd64
Date: Fri May 24 00:55:22 2013
InstallationDate: Installed on 2013-05-19 (4 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64 (20130424)
MarkForUpload: True
ProcEnviron:
 TERM=xterm
 PATH=(custom, no username)
 XDG_RUNTIME_DIR=<set>
 LANG=uk_UA.UTF-8
 SHELL=/bin/bash
SourcePackage: gksu
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Viktor Mileikovskyi (v-mil) wrote :
information type: Private Security → Public Security
Changed in gksu (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.