Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 11.04: USN-1192-3 Moderate: Libvoikko Firefox Crash

ubuntu
Calendar Grey October 19, 2011
Scroller Ubuntu
Ubuntu Security Notice USN-1192-4 resolves libvoikko issue leading to Firefox malfunctions during Finnish spellcheck operations.
A regression caused Firefox to crash while spell checking in Finnish.

Summary

A regression caused Firefox to crash while spell checking in Finnish.

Software Description:

- libvoikko: Library of Finnish language tools

Details:

USN-1192-1 provided Firefox 6 as a security upgrade. Unfortunately, this

caused a regression in libvoikko which caused Firefox to crash while spell

checking words with hyphens. This update corrects the issue. We apologize

for the inconvenience.

Original advisory details:

Aral Yaman discovered a vulnerability in the WebGL engine. An attacker

could potentially use this to crash Firefox or execute arbitrary code with

the privileges of the user invoking Firefox. (CVE-2011-2989)

Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An

attacker could potentially use this to crash Firefox or execute arbitrary

code with the privileges of the user invoking Firefox. (CVE-2011-2991)

Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg

reader. An attacker could potentially ...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  libvoikko1                      3.1-1ubuntu0.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1192-1

https://bugs.launchpad.net/ubuntu/+source/mozvoikko/+bug/832582

October 19, 2011

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.