[ubuntu/lucid-security] openoffice.org 1:3.2.0-7ubuntu4.3 (Accepted)

[Jamie Strandboge]

openoffice.org (1:3.2.0-7ubuntu4.3) lucid-security; urgency=low

  * SECURITY UPDATE: fix out of bounds access in Lotus Word Pro files
    - debian/patches/CVE-2011-2685.patch: avoid possibility of accessing out
      of range ObjTimes in lotuswordpro/source/filter/lwpidxmgr.hxx
    - CVE-2011-2685
  * SECURITY UPDATE: fix out-of-bounds property read in binary .doc filter
    - debian/patches/CVE-2011-2713.patch: sw/source/filter/ww8/ww8par2.cxx,
      ww8par3.cxx, ww8scan.cxx and ww8scan.hxx adjusted to better perform
      bounds checking
    - CVE-2011-2713
  * SECURITY UPDATE: fix integer overflows in graphic loading code
    - debian/patches/CVE-2012-1149.patch: adjust vcl/source/gdi/pngread.cxx to
      fail earlier on oversized images and properly verify chunks. Also adjust
      basebmp/source/bitmapdevice.cxx to to properly verify height and width.
      Properly verify width and height in
      svtools/source/filter.vcl/jpeg/jpeg.cxx
    - CVE-2012-1149
  * SECURITY UPDATE: fix integer overflow when processing Escher graphics
    records in PowerPoint documents
    - debian/patches/CVE-2012-2334.patch: properly verify record lengths in
      filter/source/msfilter/msdffimp.cxx and msdffimp.hxx
    - CVE-2012-2334

Date: 2012-06-22 18:15:53.579720+00:00
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/openoffice.org/1:3.2.0-7ubuntu4.3
-------------- next part --------------
Sorry, changesfile not available.