[ubuntu/maverick-security] openoffice.org_3.2.1-7ubuntu1.1_amd64_translations.tar.gz, openoffice.org_3.2.1-7ubuntu1.1_powerpc_translations.tar.gz (delayed), openoffice.org_3.2.1-7ubuntu1.1_armel_translations.tar.gz, openoffice.org, openoffice.org_3.2.1-7ubuntu1.1_i386_translations.tar.gz 1:3.2.1-7ubuntu1.1 (Accepted)

Ubuntu Installer archive at ubuntu.com
Wed Feb 2 21:23:54 UTC 2011


openoffice.org (1:3.2.1-7ubuntu1.1) maverick-security; urgency=low

  * SECURITY UPDATE: multiple OpenOffice.org vulnerabilities.
    - debian/patches/tread-invalid-path-segments-correctly.diff: directory
      traversal fixes from upstream, patch thanks to Rene Engelhard
      (CVE-2010-3450).
    - debian/patches/cws-hb22.diff: multiple fixes from upstream, patch
      thanks to Rene Engelhard.
      - corrupt table model in RTF parser (CVE-2010-3451)
      - SwRTFParser::ReadNumSecLevel (CVE-2010-3452)
      - WW8ListManager::WW8ListManager (CVE-2010-3453)
      - WW8DopTypography::ReadFromMem (CVE-2010-3454)
      - LD_LIBRARY_PATH current directory injection (CVE-2010-3689)
    - debian/patches/security-fixes-drom-cws-os145.diff: heap overflow in
      PPT fix from upstream, patch thanks to Rene Engelhard (CVE-2010-4253).
    - debian/patches/security-fixes-from-cws-impress208.diff: heap overflow in
      TGA fix from upstream, patch thanks to Rene Engelhard (CVE-2010-4643).

Date: Tue, 25 Jan 2011 10:43:42 -0800
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/openoffice.org/1:3.2.1-7ubuntu1.1
-------------- next part --------------
Format: 1.8
Date: Tue, 25 Jan 2011 10:43:42 -0800
Source: openoffice.org
Binary: openoffice.org broffice.org openoffice.org-l10n-za openoffice.org-l10n-in openoffice.org-core openoffice.org-common openoffice.org-java-common openoffice.org-writer openoffice.org-calc openoffice.org-impress openoffice.org-draw openoffice.org-math openoffice.org-base-core openoffice.org-base openoffice.org-style-crystal openoffice.org-style-oxygen openoffice.org-style-industrial openoffice.org-style-tango openoffice.org-style-human openoffice.org-style-hicontrast openoffice.org-style-galaxy openoffice.org-style-andromeda openoffice.org-gtk openoffice.org-gnome openoffice.org-evolution openoffice.org-emailmerge python-uno openoffice.org-officebean openoffice.org-filter-binfilter openoffice.org-filter-mobiledev openoffice.org-dtd-officedocument1.0 uno-libs3 uno-libs3-dbg ure ure-dbg openoffice.org-gcj cli-uno-bridge libuno-cli-basetypes1.0-cil libuno-cli-uretypes1.0-cil libuno-cli-oootypes1.0-cil libuno-cli-cppuhelper1.0-cil libuno-cli-ure1.0-cil
 mozilla-openoffice.org openoffice.org-ogltrans openoffice.org-wiki-publisher openoffice.org-report-builder openoffice.org-report-builder-bin openoffice.org-presentation-minimizer openoffice.org-presenter-console openoffice.org-pdfimport ttf-opensymbol openoffice.org-dev openoffice.org-dev-doc openoffice.org-kde openoffice.org-kab openoffice.org-sdbc-postgresql
 openoffice.org-mysql-connector
Architecture: source
Version: 1:3.2.1-7ubuntu1.1
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 broffice.org - office productivity suite -- BrOffice.org branding
 cli-uno-bridge - OpenOffice.org bindings for Mono CLI
 libuno-cli-basetypes1.0-cil - OpenOffice.org bindings for Mono CLI -- base types
 libuno-cli-cppuhelper1.0-cil - OpenOffice.org bindings for Mono CLI -- bootstrapping library
 libuno-cli-oootypes1.0-cil - OpenOffice.org bindings for Mono CLI -- OpenOffice.org type libra
 libuno-cli-ure1.0-cil - OpenOffice.org bindings for Mono CLI -- helper classes
 libuno-cli-uretypes1.0-cil - OpenOffice.org bindings for Mono CLI -- URE type library
 mozilla-openoffice.org - office productivity suite -- Mozilla plugin
 openoffice.org - office productivity suite
 openoffice.org-base - office productivity suite -- database
 openoffice.org-base-core - office productivity suite -- shared library
 openoffice.org-calc - office productivity suite -- spreadsheet
 openoffice.org-common - office productivity suite -- arch-independent files
 openoffice.org-core - office productivity suite -- arch-dependent files
 openoffice.org-dev - office productivity suite -- SDK
 openoffice.org-dev-doc - office productivity suite -- SDK documentation
 openoffice.org-draw - office productivity suite -- drawing
 openoffice.org-dtd-officedocument1.0 - office productivity suite -- legacy 1.0 XML DTD
 openoffice.org-emailmerge - office productivity suite -- email mail merge
 openoffice.org-evolution - office productivity suite -- Evolution addressbook support
 openoffice.org-filter-binfilter - office productivity suite -- legacy filters (e.g. StarOffice 5.2)
 openoffice.org-filter-mobiledev - office productivity suite -- mobile devices filters
 openoffice.org-gcj - office productivity suite -- Java libraries for GIJ
 openoffice.org-gnome - office productivity suite -- GNOME integration
 openoffice.org-gtk - office productivity suite -- GTK+ integration
 openoffice.org-impress - office productivity suite -- presentation
 openoffice.org-java-common - office productivity suite -- arch-independent Java support files
 openoffice.org-kab - office productivity suite -- KDE adressbook support
 openoffice.org-kde - office productivity suite -- KDE integration
 openoffice.org-l10n-in - office productivity suite -- Indic language packages
 openoffice.org-l10n-za - office productivity suite -- South African language packages
 openoffice.org-math - office productivity suite -- equation editor
 openoffice.org-mysql-connector - MySQL Connector extension for OpenOffice.org
 openoffice.org-officebean - office productivity suite -- Java bean
 openoffice.org-ogltrans - OpenOffice.org Impress extension for transitions using OpenGL
 openoffice.org-pdfimport - OpenOffice.org extension for importing PDF documents
 openoffice.org-presentation-minimizer - OpenOffice.org extension for size-efficient presentations
 openoffice.org-presenter-console - OpenOffice.org Impress extension for a separate presenter's conso
 openoffice.org-report-builder - OpenOffice.org extension for building database reports
 openoffice.org-report-builder-bin - OpenOffice.org extension for building database reports -- librari
 openoffice.org-sdbc-postgresql - OpenOffice.org extension for PostgreSQL SDBC driver
 openoffice.org-style-andromeda - office productivity suite -- Andromeda (Classic) symbol style
 openoffice.org-style-crystal - office productivity suite -- Crystal symbol style
 openoffice.org-style-galaxy - office productivity suite -- Galaxy (Default) symbol style
 openoffice.org-style-hicontrast - office productivity suite -- Hicontrast symbol style
 openoffice.org-style-human - office productivity suite -- Human symbol style
 openoffice.org-style-industrial - office productivity suite -- Industrial symbol style
 openoffice.org-style-oxygen - office productivity suite -- Oxygen symbol style
 openoffice.org-style-tango - office productivity suite -- Tango symbol style
 openoffice.org-wiki-publisher - OpenOffice.org extension for working with MediaWiki articles
 openoffice.org-writer - office productivity suite -- word processor
 python-uno - Python-UNO bridge
 ttf-opensymbol - OpenSymbol TrueType font
 uno-libs3  - OpenOffice.org UNO runtime environment -- public shared libraries
 uno-libs3-dbg - OpenOffice.org UNO runtime environment -- public shared library d
 ure        - OpenOffice.org UNO runtime environment
 ure-dbg    - OpenOffice.org UNO runtime environment -- debug symbols
Changes: 
 openoffice.org (1:3.2.1-7ubuntu1.1) maverick-security; urgency=low
 .
   * SECURITY UPDATE: multiple OpenOffice.org vulnerabilities.
     - debian/patches/tread-invalid-path-segments-correctly.diff: directory
       traversal fixes from upstream, patch thanks to Rene Engelhard
       (CVE-2010-3450).
     - debian/patches/cws-hb22.diff: multiple fixes from upstream, patch
       thanks to Rene Engelhard.
       - corrupt table model in RTF parser (CVE-2010-3451)
       - SwRTFParser::ReadNumSecLevel (CVE-2010-3452)
       - WW8ListManager::WW8ListManager (CVE-2010-3453)
       - WW8DopTypography::ReadFromMem (CVE-2010-3454)
       - LD_LIBRARY_PATH current directory injection (CVE-2010-3689)
     - debian/patches/security-fixes-drom-cws-os145.diff: heap overflow in
       PPT fix from upstream, patch thanks to Rene Engelhard (CVE-2010-4253).
     - debian/patches/security-fixes-from-cws-impress208.diff: heap overflow in
       TGA fix from upstream, patch thanks to Rene Engelhard (CVE-2010-4643).
Checksums-Sha1: 
 87ba789bb9896a045d3343f52221b962ab186e32 10965 openoffice.org_3.2.1-7ubuntu1.1.dsc
 0c3ee35db05b16c320b41a7674174b51d97786ef 1895370 openoffice.org_3.2.1-7ubuntu1.1.debian.tar.gz
Checksums-Sha256: 
 c190958aa467e31ddef69af5edcf6eb67fb4a2dc0d0904641da26544c9d2d408 10965 openoffice.org_3.2.1-7ubuntu1.1.dsc
 eaa46cc33f1a37cf255892b2eb27c0c49db9f0209c793fb590aa19abff9958d6 1895370 openoffice.org_3.2.1-7ubuntu1.1.debian.tar.gz
Files: 
 495691e9251963ba4d8e30b97b9a22eb 10965 editors optional openoffice.org_3.2.1-7ubuntu1.1.dsc
 6489939be19a210e042459c372971442 1895370 editors optional openoffice.org_3.2.1-7ubuntu1.1.debian.tar.gz
Original-Maintainer: Debian OpenOffice Team <debian-openoffice at lists.debian.org>


More information about the Maverick-changes mailing list