[Security Announce] [ MDVSA-2008:095 ] - Updated OpenOffice.org packages fix vulnerabilities

[news 28]

This is a multi-part message in MIME format...

 

------------=_1209751659-11275-3689

 

 

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

 

_______________________________________________________________________

 

Mandriva Linux Security Advisory MDVSA-2008:095

http://www.mandriva.com/security/

_______________________________________________________________________

 

Package : openoffice.org

Date : May 2, 2008

Affected: 2008.0

_______________________________________________________________________

 

Problem Description:

 

A vulnerability in HSQLDB before 1.8.0.9 in OpenOffice.org could

allow user-assisted remote attackers to execute arbitrary Java code

via crafted database documents (CVE-2007-4575).

 

A heap overflow was discovered in OpenOffice.org's EMF parser.

An attacker could create a carefully crafted EMF file that could

cause OpenOffice.org to crash or potentially execute arbitrary code

if the malicious EMF image was added to a document or if a document

containing such an EMF file was opened (CVE-2007-5746).

 

Multiple heap overflows and an integer underflow were discovered in the

Quattro Pro® import filter. An attacker could create a carefully

crafted Quattro Pro file that could cause OpenOffice.org ro crash or

potentially execute arbitraty code (CVE-2007-5745, CVE-2007-5747).

 

A heap overflow was discovered in the OLE Structured Storage file

parser, a format used by Microsoft Office documents. An attacker could

create a carefully crafted OLE file that could cause OpenOffice.org

to crash or potentially execute arbitrary code (CVE-2008-0320).

 

The updated packages have been patched to correct these issues.

_______________________________________________________________________

 

References:

 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5745

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5746

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5747

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0320

_______________________________________________________________________

 

Updated Packages:

 

Mandriva Linux 2008.0:

72798954ff44449ad9203fdce7130a62 2008.0/i586/openoffice.org-2.2.1-4.4mdv2008.0.i586.rpm

6a537faa29607ffef0a6544f5501a393 2008.0/i586/openoffice.org-devel-2.2.1-4.4mdv2008.0.i586.rpm

882be28f508c5b922378aafa6be1113b 2008.0/i586/openoffice.org-devel-doc-2.2.1-4.4mdv2008.0.i586.rpm

d2cb90d3441f95836643e75012bf95d1 2008.0/i586/openoffice.org-galleries-2.2.1-4.4mdv2008.0.i586.rpm

d0742126a62fcc7251458eebaeabd4fb 2008.0/i586/openoffice.org-gnome-2.2.1-4.4mdv2008.0.i586.rpm

0e6c20146f75d8922c679db7b06bd4be 2008.0/i586/openoffice.org-kde-2.2.1-4.4mdv2008.0.i586.rpm

e1161013ec13e2e3138d578539cb5f37 2008.0/i586/openoffice.org-l10n-af-2.2.1-4.4mdv2008.0.i586.rpm

b3663ed4b3c533d0e9188540acb9d6ea 2008.0/i586/openoffice.org-l10n-ar-2.2.1-4.4mdv2008.0.i586.rpm

00d753cc4308935b4a704d08385dfe21 2008.0/i586/openoffice.org-l10n-bg-2.2.1-4.4mdv2008.0.i586.rpm

ce6c8bc0b6b63574d6e50d2a63b5c670 2008.0/i586/openoffice.org-l10n-br-2.2.1-4.4mdv2008.0.i586.rpm

572f6fde12b683e7ec47a2d3e49493fc 2008.0/i586/openoffice.org-l10n-bs-2.2.1-4.4mdv2008.0.i586.rpm

055e27ae44d8dc7a4322d835da7da993 2008.0/i586/openoffice.org-l10n-ca-2.2.1-4.4mdv2008.0.i586.rpm

97b37e8e03bec178607d71d0d58b14d6 2008.0/i586/openoffice.org-l10n-cs-2.2.1-4.4mdv2008.0.i586.rpm

8975fed89790697fc1d791ee040c1193 2008.0/i586/openoffice.org-l10n-cy-2.2.1-4.4mdv2008.0.i586.rpm

22b0b401e8c1dd731a455f9fbc7c7dbe 2008.0/i586/openoffice.org-l10n-da-2.2.1-4.4mdv2008.0.i586.rpm

ed1a1f10985d483cb32f17e5c1d9e2d5 2008.0/i586/openoffice.org-l10n-de-2.2.1-4.4mdv2008.0.i586.rpm

95888fffe3dfd1d4e81863016c98fdd4 2008.0/i586/openoffice.org-l10n-el-2.2.1-4.4mdv2008.0.i586.rpm

ddff2b506a75655ba1a864cc308bdb74 2008.0/i586/openoffice.org-l10n-en_GB-2.2.1-4.4mdv2008.0.i586.rpm

647ff67a9e986c56b858784ac409f628 2008.0/i586/openoffice.org-l10n-es-2.2.1-4.4mdv2008.0.i586.rpm

2e9730e46b79e6b5cc00ec6241d72a40 2008.0/i586/openoffice.org-l10n-et-2.2.1-4.4mdv2008.0.i586.rpm

5ebf6059a75498d3c254b3a5c26102f7 2008.0/i586/openoffice.org-l10n-eu-2.2.1-4.4mdv2008.0.i586.rpm

51770048207446d31c2560439f1f1c96 2008.0/i586/openoffice.org-l10n-fi-2.2.1-4.4mdv2008.0.i586.rpm

497785ba862bcc7ccf58e86d9339839c 2008.0/i586/openoffice.org-l10n-fr-2.2.1-4.4mdv2008.0.i586.rpm

a9cd13bc39e594e2e0b328a494a05e59 2008.0/i586/openoffice.org-l10n-he-2.2.1-4.4mdv2008.0.i586.rpm

acaab185b3eeedd24ade68134e0bae3a 2008.0/i586/openoffice.org-l10n-hi-2.2.1-4.4mdv2008.0.i586.rpm

416d29a882ee24fb51e37ca233650f92 2008.0/i586/openoffice.org-l10n-hu-2.2.1-4.4mdv2008.0.i586.rpm

51ee97ed40d9e3bd425e66e4643c213b 2008.0/i586/openoffice.org-l10n-it-2.2.1-4.4mdv2008.0.i586.rpm

2eec359c15bb910226c01d0c75b303cf 2008.0/i586/openoffice.org-l10n-ja-2.2.1-4.4mdv2008.0.i586.rpm

96661d4b321482c4059fd1ec0a7a3406 2008.0/i586/openoffice.org-l10n-ko-2.2.1-4.4mdv2008.0.i586.rpm

b5c56e228e7f6d50f607ed2133eafdfc 2008.0/i586/openoffice.org-l10n-mk-2.2.1-4.4mdv2008.0.i586.rpm

4148b2d03b06f9e3424d7e72e6ba64a7 2008.0/i586/openoffice.org-l10n-nb-2.2.1-4.4mdv2008.0.i586.rpm

b748239254d900e79161a0b8351deb75 2008.0/i586/openoffice.org-l10n-nl-2.2.1-4.4mdv2008.0.i586.rpm

b9242bbea24034e0d8883fdd4ac417fe 2008.0/i586/openoffice.org-l10n-nn-2.2.1-4.4mdv2008.0.i586.rpm

a9a83327869b06b85263aac4f2ce8944 2008.0/i586/openoffice.org-l10n-pl-2.2.1-4.4mdv2008.0.i586.rpm

d754b3ae052cac6a9f6bd4f9f8a61cf5 2008.0/i586/openoffice.org-l10n-pt-2.2.1-4.4mdv2008.0.i586.rpm

51e3242d755dbdecb783b8c1a608d380 2008.0/i586/openoffice.org-l10n-pt_BR-2.2.1-4.4mdv2008.0.i586.rpm

2a766fb4ad705cc9815431c8f46228a3 2008.0/i586/openoffice.org-l10n-ru-2.2.1-4.4mdv2008.0.i586.rpm

4a5981bc0231b5a20bd56674c31386a8 2008.0/i586/openoffice.org-l10n-sk-2.2.1-4.4mdv2008.0.i586.rpm

06483e894447c9d6e4ca0c56bb98e4e8 2008.0/i586/openoffice.org-l10n-sl-2.2.1-4.4mdv2008.0.i586.rpm

a7f4e2bcf881d7a295b8a6f6a601b598 2008.0/i586/openoffice.org-l10n-sv-2.2.1-4.4mdv2008.0.i586.rpm

0aee1180d9b1e91f36b47696765bfdcf 2008.0/i586/openoffice.org-l10n-ta-2.2.1-4.4mdv2008.0.i586.rpm

98d8d02bc3d6da0a780e6d6a09de3586 2008.0/i586/openoffice.org-l10n-tr-2.2.1-4.4mdv2008.0.i586.rpm

ec82d080ba11a9bb0a4c92fd718c3ff4 2008.0/i586/openoffice.org-l10n-zh_CN-2.2.1-4.4mdv2008.0.i586.rpm

b1294ebbc030c8b473d3f4cac1f0f9ad 2008.0/i586/openoffice.org-l10n-zh_TW-2.2.1-4.4mdv2008.0.i586.rpm

04420991685ad352ba76381058719d3b 2008.0/i586/openoffice.org-l10n-zu-2.2.1-4.4mdv2008.0.i586.rpm

9d7ccd1b59dd4396d4036be8145679d0 2008.0/i586/openoffice.org-mono-2.2.1-4.4mdv2008.0.i586.rpm

80590a32554d257c48b9ce42a76ea108 2008.0/i586/openoffice.org-ooqstart-2.2.1-4.4mdv2008.0.i586.rpm

1f77c6c9cfb6a0aed77a33e12cf8f1f6 2008.0/SRPMS/openoffice.org-2.2.1-4.4mdv2008.0.src.rpm

84c73385fdcb1d0a1bc2c077f744a20f 2008.0/SRPMS/openoffice.org64-2.2.1-4.4mdv2008.0.src.rpm

 

Mandriva Linux 2008.0/X86_64:

456a8013fca659dea3938f469561ef0b 2008.0/x86_64/openoffice.org64-2.2.1-4.4mdv2008.0.x86_64.rpm

c4374226d24bfc714acb6c3015d585f2 2008.0/x86_64/openoffice.org64-devel-2.2.1-4.4mdv2008.0.x86_64.rpm

a963feb3099659d2e16298fa6ab93ba0 2008.0/x86_64/openoffice.org64-devel-doc-2.2.1-4.4mdv2008.0.x86_64.rpm

fa6bd2c7af34ff151e2bdc5f1723a3af 2008.0/x86_64/openoffice.org64-galleries-2.2.1-4.4mdv2008.0.x86_64.rpm

44a3a7ee839a336e9b06d80d67785589 2008.0/x86_64/openoffice.org64-gnome-2.2.1-4.4mdv2008.0.x86_64.rpm

8df343f9cbccecbabcb12c8901fb1b82 2008.0/x86_64/openoffice.org64-kde-2.2.1-4.4mdv2008.0.x86_64.rpm

0b821aa43e0e78a2f99629b75211f8d9 2008.0/x86_64/openoffice.org64-l10n-af-2.2.1-4.4mdv2008.0.x86_64.rpm

8d5a1da2f98ed8eb54a77732c01cb1c1 2008.0/x86_64/openoffice.org64-l10n-ar-2.2.1-4.4mdv2008.0.x86_64.rpm

2f93835ea0677728552b6aaf8752fd98 2008.0/x86_64/openoffice.org64-l10n-bg-2.2.1-4.4mdv2008.0.x86_64.rpm

68cecc3d640bd1605b51e125e83b0842 2008.0/x86_64/openoffice.org64-l10n-br-2.2.1-4.4mdv2008.0.x86_64.rpm

e89b07e667940059458c45822269297f 2008.0/x86_64/openoffice.org64-l10n-bs-2.2.1-4.4mdv2008.0.x86_64.rpm

d40fc83e01482ac9eca8802ee21533f2 2008.0/x86_64/openoffice.org64-l10n-ca-2.2.1-4.4mdv2008.0.x86_64.rpm

17022bd83ffc77f40c23402b97a7bb10 2008.0/x86_64/openoffice.org64-l10n-cs-2.2.1-4.4mdv2008.0.x86_64.rpm

1de183c4eb4887d6d94acce507c46a1a 2008.0/x86_64/openoffice.org64-l10n-cy-2.2.1-4.4mdv2008.0.x86_64.rpm

10eaeace55b3e0b4e046534ae970f4f8 2008.0/x86_64/openoffice.org64-l10n-da-2.2.1-4.4mdv2008.0.x86_64.rpm

b8db206a858975564012b07dccf6b04d 2008.0/x86_64/openoffice.org64-l10n-de-2.2.1-4.4mdv2008.0.x86_64.rpm

1a378d25c97f50eae98eaee30806862f 2008.0/x86_64/openoffice.org64-l10n-el-2.2.1-4.4mdv2008.0.x86_64.rpm

4fb1c541bdbc652a14d2594d122f9ee0 2008.0/x86_64/openoffice.org64-l10n-en_GB-2.2.1-4.4mdv2008.0.x86_64.rpm

b3ae3401e85038f66121966ff2e7ea00 2008.0/x86_64/openoffice.org64-l10n-es-2.2.1-4.4mdv2008.0.x86_64.rpm

889faa8d4ab290954184641245f5b438 2008.0/x86_64/openoffice.org64-l10n-et-2.2.1-4.4mdv2008.0.x86_64.rpm

c37864e8b058984d70e761ee3d8f856a 2008.0/x86_64/openoffice.org64-l10n-eu-2.2.1-4.4mdv2008.0.x86_64.rpm

260ed7c026eb35106190b752eaaecff7 2008.0/x86_64/openoffice.org64-l10n-fi-2.2.1-4.4mdv2008.0.x86_64.rpm

7547ae71398a8d4de6fb2762c787f08e 2008.0/x86_64/openoffice.org64-l10n-fr-2.2.1-4.4mdv2008.0.x86_64.rpm

67448bcb4f018659d9d9670c4e5962b2 2008.0/x86_64/openoffice.org64-l10n-he-2.2.1-4.4mdv2008.0.x86_64.rpm

143a4383654d1b7a875876ec98e04933 2008.0/x86_64/openoffice.org64-l10n-hi-2.2.1-4.4mdv2008.0.x86_64.rpm

8fadf6144424230f66d3145440bb0496 2008.0/x86_64/openoffice.org64-l10n-hu-2.2.1-4.4mdv2008.0.x86_64.rpm

58bb3458e51dc5671f64fc3dfe4d90d1 2008.0/x86_64/openoffice.org64-l10n-it-2.2.1-4.4mdv2008.0.x86_64.rpm

9a4e6ec140a976c29792c8b33b3999e3 2008.0/x86_64/openoffice.org64-l10n-ja-2.2.1-4.4mdv2008.0.x86_64.rpm

20c2a64e76f07090708f2baaf44005c0 2008.0/x86_64/openoffice.org64-l10n-ko-2.2.1-4.4mdv2008.0.x86_64.rpm

d4e56319f91841c3bf55a0fc35edae14 2008.0/x86_64/openoffice.org64-l10n-mk-2.2.1-4.4mdv2008.0.x86_64.rpm

e53c696eb99a43f04443b23646a14759 2008.0/x86_64/openoffice.org64-l10n-nb-2.2.1-4.4mdv2008.0.x86_64.rpm

53f3f10ebc2bea28bbbc2cfbdb9ad709 2008.0/x86_64/openoffice.org64-l10n-nl-2.2.1-4.4mdv2008.0.x86_64.rpm

f92283b6cebdaec9b69750a84b2788f0 2008.0/x86_64/openoffice.org64-l10n-nn-2.2.1-4.4mdv2008.0.x86_64.rpm

7b8351a79f6d7a2697a0951ccf367e23 2008.0/x86_64/openoffice.org64-l10n-pl-2.2.1-4.4mdv2008.0.x86_64.rpm

63a53749499281ab09f6bbd7f10afc53 2008.0/x86_64/openoffice.org64-l10n-pt-2.2.1-4.4mdv2008.0.x86_64.rpm

4b86a348590d07619d53a00ad2ba76d6 2008.0/x86_64/openoffice.org64-l10n-pt_BR-2.2.1-4.4mdv2008.0.x86_64.rpm

fd9688c0f0e0667086c8ff2866b0bec0 2008.0/x86_64/openoffice.org64-l10n-ru-2.2.1-4.4mdv2008.0.x86_64.rpm

e11d3f9d3cfdc0d0ee2f552dab06c2b8 2008.0/x86_64/openoffice.org64-l10n-sk-2.2.1-4.4mdv2008.0.x86_64.rpm

f1e88e0f1c3893b280a1fa27d1ac3dd5 2008.0/x86_64/openoffice.org64-l10n-sl-2.2.1-4.4mdv2008.0.x86_64.rpm

530ebf4cb28e2447ae2b6ed8a270a3d2 2008.0/x86_64/openoffice.org64-l10n-sv-2.2.1-4.4mdv2008.0.x86_64.rpm

114ec61047b4fd849389f1b375a37678 2008.0/x86_64/openoffice.org64-l10n-ta-2.2.1-4.4mdv2008.0.x86_64.rpm

81a7be4777a6a2533cfd1c4d13bd8ffe 2008.0/x86_64/openoffice.org64-l10n-tr-2.2.1-4.4mdv2008.0.x86_64.rpm

a79b6c988ddacbb65576965911f187ae 2008.0/x86_64/openoffice.org64-l10n-zh_CN-2.2.1-4.4mdv2008.0.x86_64.rpm

5ff29c0bcf13f362513db31b43afece2 2008.0/x86_64/openoffice.org64-l10n-zh_TW-2.2.1-4.4mdv2008.0.x86_64.rpm

8574f6c677faca78c6e26f050e5a880e 2008.0/x86_64/openoffice.org64-l10n-zu-2.2.1-4.4mdv2008.0.x86_64.rpm

8856df860bf381f5d92f962fceaa49c7 2008.0/x86_64/openoffice.org64-mono-2.2.1-4.4mdv2008.0.x86_64.rpm

3bfcc8d0f2008cf53b23eb1287fdb0b5 2008.0/x86_64/openoffice.org64-ooqstart-2.2.1-4.4mdv2008.0.x86_64.rpm

1f77c6c9cfb6a0aed77a33e12cf8f1f6 2008.0/SRPMS/openoffice.org-2.2.1-4.4mdv2008.0.src.rpm

84c73385fdcb1d0a1bc2c077f744a20f 2008.0/SRPMS/openoffice.org64-2.2.1-4.4mdv2008.0.src.rpm

_______________________________________________________________________

 

To upgrade automatically use MandrivaUpdate or urpmi. The verification

of md5 checksums and GPG signatures is performed automatically for you.

 

All packages are signed by Mandriva for security. You can obtain the

GPG public key of the Mandriva Security Team by executing:

 

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 

You can view other update advisories for Mandriva Linux at:

 

http://www.mandriva.com/security/advisories

 

If you want to report vulnerabilities, please contact

 

security_(at)_mandriva.com

_______________________________________________________________________

 

Type Bits/KeyID Date User ID

pub 1024D/22458A98 2000-07-10 Mandriva Security Team

 

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.9 (GNU/Linux)

 

iD8DBQFIGyximqjQ0CJFipgRAjhzAJ92SagdMcfpQ+8+yUkIDfQwWHHXtQCdFatU

AP1ht4X2KMYbLfHKsiEBKoY=

=4vxy

-----END PGP SIGNATURE-----

 

 

------------=_1209751659-11275-3689

Content-Type: text/plain; name="message-footer.txt"

Content-Disposition: inline; filename="message-footer.txt"

Content-Transfer-Encoding: 8bit

 

To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org

with this subject : unsubscribe security-announce

_______________________________________________________

Want to buy your Pack or Services from Mandriva?

Go to http://www.mandrivastore.com

Join the Club : http://www.mandrivaclub.com

_______________________________________________________

 

------------=_1209751659-11275-3689--