Avoid security issues while making an encrypted root password for a

preseed file. Closes: #775718.

25 files changed, 37 insertions, 35 deletions

diff --git a/ca/appendix/preseed.xml b/ca/appendix/preseed.xml
index ddc274dfb..c0b65fa3f 100644
--- a/ca/appendix/preseed.xml
+++ b/ca/appendix/preseed.xml
@@ -1019,7 +1019,7 @@ el <command>sudo</command>).
 Es pot capolar una contrasenya en MD5 amb la següent ordre.
 
 <informalexample><screen>
-$ printf "r00tme" | mkpasswd -s -m md5
+mkpasswd -m sha-512
 </screen></informalexample>
 
 </para>
diff --git a/cs/appendix/preseed.xml b/cs/appendix/preseed.xml
index 3854e5ba7..441476875 100644
--- a/cs/appendix/preseed.xml
+++ b/cs/appendix/preseed.xml
@@ -1105,7 +1105,7 @@ přes SSH klíče).
 MD5 hash hesla můžete vygenerovat následujícím příkazem:
 
 <informalexample><screen>
-$ printf "r00tme" | mkpasswd -s -m md5
+mkpasswd -m sha-512
 </screen></informalexample>
 
 </para>
diff --git a/de/appendix/preseed.xml b/de/appendix/preseed.xml
index 327a1ccd8..7ce0e9b17 100644
--- a/de/appendix/preseed.xml
+++ b/de/appendix/preseed.xml
@@ -1141,7 +1141,7 @@ Der folgende Befehl kann verwendet werden, um einen MD5-Hash für ein Passwort
 zu generieren:
 
 <informalexample><screen>
-$ printf "r00tme" | mkpasswd -s -m md5
+mkpasswd -m sha-512
 </screen></informalexample>
 
 </para>
diff --git a/debian/changelog b/debian/changelog
index 11c28a501..4a7ad533d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,8 @@
 installation-guide (201501XX) UNRELEASED; urgency=medium
 
   * Document that grub-installer/bootdev can now be preseeded with "default".
+  * Avoid security issues while making an encrypted root password for a
+    preseed file. Closes: #775718.
 
  -- Samuel Thibault <sthibault@debian.org>  Sun, 04 Jan 2015 00:05:14 +0100
 
diff --git a/en/appendix/preseed.xml b/en/appendix/preseed.xml
index 58a6f6dd1..820fb8721 100644
--- a/en/appendix/preseed.xml
+++ b/en/appendix/preseed.xml
@@ -1056,7 +1056,7 @@ authentication or <command>sudo</command>).
 The following command can be used to generate an MD5 hash for a password:
 
 <informalexample><screen>
-$ printf "r00tme" | mkpasswd -s -m md5
+mkpasswd -m sha-512
 </screen></informalexample>
 
 </para>
diff --git a/it/appendix/preseed.xml b/it/appendix/preseed.xml
index 4bc82fbe8..3f8d94ba4 100644
--- a/it/appendix/preseed.xml
+++ b/it/appendix/preseed.xml
@@ -1892,7 +1892,7 @@ The following command can be used to generate an MD5 hash for a password:
 Si può usare il seguente comando per creare un hash MD5 di una password:
 
 <informalexample><screen>
-$ printf "r00tme" | mkpasswd -s -m md5
+mkpasswd -m sha-512
 </screen></informalexample>
 
 </para>
diff --git a/po/da/preseed.po b/po/da/preseed.po
index 7567a2918..83adf7b81 100644
--- a/po/da/preseed.po
+++ b/po/da/preseed.po
@@ -1504,7 +1504,7 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
 msgstr ""
 
 #. Tag: title
diff --git a/po/el/preseed.po b/po/el/preseed.po
index 35be55658..7843d97d0 100644
--- a/po/el/preseed.po
+++ b/po/el/preseed.po
@@ -2149,8 +2149,8 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/es/preseed.po b/po/es/preseed.po
index 88e21c928..2be2f0c00 100644
--- a/po/es/preseed.po
+++ b/po/es/preseed.po
@@ -2136,8 +2136,8 @@ msgstr "Puede generar un hash MD5 para una contraseña con la siguiente orden:"
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/fi/preseed.po b/po/fi/preseed.po
index b07db3708..d1f415cc9 100644
--- a/po/fi/preseed.po
+++ b/po/fi/preseed.po
@@ -2119,8 +2119,8 @@ msgstr "Seuraavalla komennolla saadaan tehtyä salasanan MD5-tiiviste:"
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/fr/preseed.po b/po/fr/preseed.po
index e615b7a4c..9831d3a7a 100644
--- a/po/fr/preseed.po
+++ b/po/fr/preseed.po
@@ -2064,8 +2064,8 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/hu/preseed.po b/po/hu/preseed.po
index dce6c4db2..1640c78fd 100644
--- a/po/hu/preseed.po
+++ b/po/hu/preseed.po
@@ -2002,7 +2002,7 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
 msgstr "$ printf \"r00tmagam\" | mkpasswd -s -m md5"
 
 #. Tag: title
diff --git a/po/ja/preseed.po b/po/ja/preseed.po
index dfba9c309..5f531d035 100644
--- a/po/ja/preseed.po
+++ b/po/ja/preseed.po
@@ -1991,8 +1991,8 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/ko/preseed.po b/po/ko/preseed.po
index 3e9d25fc2..aa11ee9c4 100644
--- a/po/ko/preseed.po
+++ b/po/ko/preseed.po
@@ -1969,8 +1969,8 @@ msgstr "암호에 대한 MD5 해시를 만드려면 다음 명령을 사용할 �
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/nl/preseed.po b/po/nl/preseed.po
index ca92790af..dd3bbbfa0 100644
--- a/po/nl/preseed.po
+++ b/po/nl/preseed.po
@@ -1493,7 +1493,7 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
 msgstr ""
 
 #. Tag: title
diff --git a/po/nn/preseed.po b/po/nn/preseed.po
index ca92790af..dd3bbbfa0 100644
--- a/po/nn/preseed.po
+++ b/po/nn/preseed.po
@@ -1493,7 +1493,7 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
 msgstr ""
 
 #. Tag: title
diff --git a/po/pt/preseed.po b/po/pt/preseed.po
index 303e80b95..beccc4d05 100644
--- a/po/pt/preseed.po
+++ b/po/pt/preseed.po
@@ -2062,8 +2062,8 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/ro/preseed.po b/po/ro/preseed.po
index ca92790af..dd3bbbfa0 100644
--- a/po/ro/preseed.po
+++ b/po/ro/preseed.po
@@ -1493,7 +1493,7 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
 msgstr ""
 
 #. Tag: title
diff --git a/po/ru/preseed.po b/po/ru/preseed.po
index caafef8ff..877ab0486 100644
--- a/po/ru/preseed.po
+++ b/po/ru/preseed.po
@@ -2066,8 +2066,8 @@ msgstr "С помощью следующей команды можно сген�
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/sv/preseed.po b/po/sv/preseed.po
index 3b9a7efa7..22a9e5964 100644
--- a/po/sv/preseed.po
+++ b/po/sv/preseed.po
@@ -2142,8 +2142,8 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/tl/preseed.po b/po/tl/preseed.po
index ca92790af..dd3bbbfa0 100644
--- a/po/tl/preseed.po
+++ b/po/tl/preseed.po
@@ -1493,7 +1493,7 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
 msgstr ""
 
 #. Tag: title
diff --git a/po/vi/preseed.po b/po/vi/preseed.po
index e952f53e1..d5faca706 100644
--- a/po/vi/preseed.po
+++ b/po/vi/preseed.po
@@ -2113,8 +2113,8 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/zh_CN/preseed.po b/po/zh_CN/preseed.po
index 753fcb3d5..6865ccdc7 100644
--- a/po/zh_CN/preseed.po
+++ b/po/zh_CN/preseed.po
@@ -1964,8 +1964,8 @@ msgstr "下面的命令可用于生成密码的 MD5 值。"
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
-msgstr "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
+msgstr "mkpasswd -m sha-512"
 
 #. Tag: title
 #: preseed.xml:901
diff --git a/po/zh_TW/preseed.po b/po/zh_TW/preseed.po
index ca92790af..dd3bbbfa0 100644
--- a/po/zh_TW/preseed.po
+++ b/po/zh_TW/preseed.po
@@ -1493,7 +1493,7 @@ msgstr ""
 #. Tag: screen
 #: preseed.xml:895
 #, no-c-format
-msgid "$ printf \"r00tme\" | mkpasswd -s -m md5"
+msgid "mkpasswd -m sha-512"
 msgstr ""
 
 #. Tag: title
diff --git a/pt_BR/appendix/preseed.xml b/pt_BR/appendix/preseed.xml
index d0d9653a4..560d038b2 100644
--- a/pt_BR/appendix/preseed.xml
+++ b/pt_BR/appendix/preseed.xml
@@ -989,7 +989,7 @@ chave SSH ou <command>sudo</command>).
 O seguinte comando pode ser usado para gerar um hash MD5 para uma senha:
 
 <informalexample><screen>
-$ printf "r00tme" | mkpasswd -s -m md5
+mkpasswd -m sha-512
 </screen></informalexample>
 
 </para>