Debian liberó una actualización para Firefox. Esta repara varias vulnerabilidades que pueden explotarse para manipular datos, burlar ciertas restricciones de seguridad, ataques de spoofing y comprometer el sistema de un usuario.
Debian Security Advisory
DSA 838-1 mozilla-firefox
Debian GNU/Linux 3.1 alias sarge | Mozilla Firefox | < | 1.0.4 |
Debian GNU/Linux unstable alias sid | Mozilla Firefox | < | 1.0.7 |
Debian liberó una actualización para Firefox. Esta repara varias vulnerabilidades que pueden explotarse por personas maliciosas para manipular datos, burlar ciertas restricciones de seguridad, ataques de spoofing y comprometer el sistema de un usuario.
Ver:
Múltiples vulnerabilidades en Firefox.
http://www.seguridad.unam.mx/vulnerabilidadesDB-vulne=4781
Security Bypass.
Spoofing.
Manipulación de datos.
Acceso al sistema.
Instalar paquetes actualizados.
Debian GNU/Linux 3.1
Archivos fuente:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5.dsc
MD5 1001 bf9cf2b7106335cccc2afb10f6386c57
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5.diff.gz
MD5 332598 d3f81e09a762be3c51aa20655ada5d32
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4.orig.tar.gz
MD5 40212297 8e4ba81ad02c7986446d4e54e978409d
Alpha:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_alpha.deb
MD5 11167102 e970a996296228bd2af2cb8006a86398
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_alpha.deb
MD5 167592 d446479007005f2d27d079ccedf51d7d
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_alpha.deb
MD5 59416 7bf500b4f181df6ab4aa6dc831a23338
AMD64:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_amd64.deb
MD5 9399402 d94263433669cae93749d3f0d378839c
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_amd64.deb
MD5 162334 4ffdc291bacf5b604deeaf8d6efd96eb
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_amd64.deb
MD5 57946 7d7472b0fb90ed789c4f84dbcdd14687
ARM architecture:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_arm.deb
MD5 8217720 3e0ce81e8d78fbca6d38d6a7e90791f3
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_arm.deb
MD5 153792 662f8f96e75cc109541bf141e79a2714
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_arm.deb
MD5 53280 b3517ce11632b3adbf5970d8f4c35b8c
Intel IA-32:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_i386.deb
MD5 8891730 795a6aa3ca33a5e328e863612ceb0ac3
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_i386.deb
MD5 157566 5e5d92e6c30a1d677edcc2fd9beb1861
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_i386.deb
MD5 54820 885991c2f4580f06f12ba1cc6ff456ac
Intel IA-64:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_ia64.deb
MD5 11618922 f02ebe51045adc2008ebba0a7355f58c
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_ia64.deb
MD5 167924 863962943669b737773e716bb45560b7
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_ia64.deb
MD5 62602 01f5675efee57e112e1734306580e43b
HP Precision:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_hppa.deb
MD5 10267086 7fb5e359ae146c7306def5b0a7ba48b4
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_hppa.deb
MD5 165300 cf86dfe338ca9bfde77a402690db15ae
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_hppa.deb
MD5 58402 f98081adb227cf6a12dc267bbf9c7689
Motorola 680x0 architecture:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_m68k.deb
MD5 8167708 d5d4eadda39add959235921126b5db4b
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_m68k.deb
MD5 156434 01a518572787d1e5505eb393c4670cd9
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_m68k.deb
MD5 54070 b50c79ee5b2b3fd61ccb3848ad201f29
Big endian MIPS:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_mips.deb
MD5 9922382 384196380da339cc6c381afd18c8d0e8
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_mips.deb
MD5 155362 38e914d95e0b2d38b2d34f09988218c9
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_mips.deb
MD5 55078 343647c905cf9792d53eb67b4e11df02
Little endian MIPS:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_mipsel.deb
MD5 9804868 cfe93fb808ecfc8e9a2bf359af772069
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_mipsel.deb
MD5 154892 9321e20f831ad309fc214c8130223103
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_mipsel.deb
MD5 54904 74a6c0efaa41729a646d5f5762ab637d
PowerPC architecture:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_powerpc.deb
MD5 8563444 7c373a381a8ba34307e59f2cd47fcc43
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_powerpc.deb
MD5 155948 a764030b0841e225c5a89e6366bb88e5
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_powerpc.deb
MD5 57186 39cb6349c6ef1bc0e9e62365e7beeebf
Sun Sparc:
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox_1.0.4-2sarge5_sparc.deb
MD5 8652776 fa0fdecf5fb5ed186ade4d987b8920cb
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-dom-inspector_1.0.4-2sarge5_sparc.deb
MD5 156204 84483f5fa63c2da5f6e8de90f462edbe
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla-firefox-gnome-support_1.0.4-2sarge5_sparc.deb
MD5 53640 d43b2dbd4fd362e7fd01b4985c0ff3d0
Para la distribución inestable (sid) estos problemas se han corregido en la versión 1.0.7
Mayor información.
http://lists.debian.org/debian-security-announce/debian-security-announce-2005/msg00231.htmlLa Coordinación de Seguridad de la Información/UNAM-CERT agradece el apoyo en la elaboración ó traducción y revisión de éste Documento a:
UNAM-CERT
Equipo de Respuesta a Incidentes UNAM
Coordinación de Seguridad de la Información
incidentes at seguridad.unam.mx
phishing at seguridad.unam.mx
http://www.cert.org.mx
http://www.seguridad.unam.mx
ftp://ftp.seguridad.unam.mx
Tel: 56 22 81 69
Fax: 56 22 80 47
Aviso legal |
Créditos |
Staff |
Administración
Copyright © Todos los derechos reservados
UNAM - CERT