Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 634
Alerts This Week
Warning Icon 1 634

Ubuntu: 5023-1 Moderate: Aspell Arbitrary Code Execution Threat

ubuntu
Calendar Grey July 26, 2021
Dist Ubuntu Esm H88
Aspell vulnerability enables potential code execution or system crashes through specially crafted input. Ensure an update is applied to mitigate this security risk.
Aspell could be made to execute arbitrary code or cause a crash if it received a specially crafted input.

Summary

Aspell could be made to execute arbitrary code or cause a crash

if it received a specially crafted input.

Software Description:

- aspell: GNU Aspell spell-checker

Details:

It was discovered that Aspell incorrectly handled certain inputs.

An attacker could possibly use this issue to execute arbitrary code or

cause a crash.

Topics%20covered

Topics Covered

security advisory moderate software update arbitrary code execution Ubuntu input handling aspell

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  aspell                          0.60.8-2ubuntu0.1
  libaspell15                     0.60.8-2ubuntu0.1

Ubuntu 20.04 LTS:
  aspell                          0.60.8-1ubuntu0.1
  libaspell15                     0.60.8-1ubuntu0.1

Ubuntu 18.04 LTS:
  aspell                          0.60.7~20110707-4ubuntu0.2
  libaspell15                     0.60.7~20110707-4ubuntu0.2

Ubuntu 16.04 ESM:
  aspell                          0.60.7~20110707-3ubuntu0.1+esm1
  libaspell15                     0.60.7~20110707-3ubuntu0.1+esm1

Ubuntu 14.04 ESM:
  aspell                          0.60.7~20110707-1ubuntu1+esm2
  libaspell15                     0.60.7~20110707-1ubuntu1+esm2

In general, a standard system update will make all the necessary changes.

References

CVE-2019-25051

Severity
important
Lowest
Low
Medium
High
Critical

July 26, 2021

Topics%20covered

Topics Covered

security advisory moderate software update arbitrary code execution Ubuntu input handling aspell

Package Information

https://launchpad.net/ubuntu/+source/aspell/0.60.8-2ubuntu0.1
https://launchpad.net/ubuntu/+source/aspell/0.60.8-1ubuntu0.1
https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-4ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.