Ubuntu 11.10: USN-1306-2 Moderate: Ubufox and Mozvoikko Update

ubuntu

January 6, 2012

This update provides compatible packages for Firefox 9.

Summary

This update provides compatible packages for Firefox 9.

Software Description:

- mozvoikko: Finnish spell-checker extension for Firefox (transitional package

- ubufox: Ubuntu Firefox specific configuration defaults and apt support

Details:

USN-1306-1 fixed vulnerabilities in Firefox. This update provides updated

Mozvoikko and ubufox packages for use with Firefox 9.

Original advisory details:

Alexandre Poirot, Chris Blizzard, Kyle Huey, Scoobidiver, Christian Holler,

David Baron, Gary Kwong, Jim Blandy, Bob Clary, Jesse Ruderman, Marcia

Knous, and Rober Longson discovered several memory safety issues which

could possibly be exploited to crash Firefox or execute arbitrary code as

the user that invoked Firefox. (CVE-2011-3660)

Aki Helin discovered a crash in the YARR regular expression library that

could be triggered by javascript in web content. (CVE-2011-3661)

It was discovered that a flaw in the Mozilla SVG implementation could

result in an ...

Read the Full Advisory

Topics Covered

security advisory update code execution ubuntu memory safety mozvoikko ubufox

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  xul-ext-mozvoikko               1.10.0-0ubuntu2.2
  xul-ext-ubufox                  1.0.2-0ubuntu0.11.10.1

Ubuntu 11.04:
  xul-ext-mozvoikko               1.10.0-0ubuntu0.11.04.4
  xul-ext-ubufox                  0.9.3-0ubuntu0.11.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.