Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 11.04: USN-1192-2 Critical: Mozvoikko Update for Firefox 6

ubuntu
Calendar Grey August 17, 2011
Scroller Ubuntu
The latest Mozvoikko upgrade fortifies Firefox 6 by addressing essential flaws and enhancing defenses against possible threats and weaknesses.
This update provides a compatible Mozvoikko for Firefox 6.

Summary

This update provides a compatible Mozvoikko for Firefox 6.

Software Description:

- mozvoikko: Finnish spell-checker extension for Firefox

Details:

USN-1192-1 fixed vulnerabilities in Firefox. This update provides an

updated Mozvoikko for use with Firefox 6.

Original advisory details:

Aral Yaman discovered a vulnerability in the WebGL engine. An attacker

could potentially use this to crash Firefox or execute arbitrary code with

the privileges of the user invoking Firefox. (CVE-2011-2989)

Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An

attacker could potentially use this to crash Firefox or execute arbitrary

code with the privileges of the user invoking Firefox. (CVE-2011-2991)

Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg

reader. An attacker could potentially use this to crash Firefox or execute

arbitrary code with the privileges of the user invoking Firefox.

(CVE-2011-2991)

Robert Kai...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  xul-ext-mozvoikko               1.9.0~svn20101114r3591-0ubuntu3.11.04.2

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1192-1

https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/825459

Severity
critical
Lowest
Low
Medium
High
Critical

August 17, 2011

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.