SCIENTIFIC-LINUX-ERRATA Archives

February 2011

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Important: openoffice.org and openoffice.org2 on SL4.x i386/x86_64
From:
Troy Dawson <[log in to unmask]>
Reply To:
Troy Dawson <[log in to unmask]>
Date:
Wed, 2 Feb 2011 16:14:48 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (175 lines) 
Synopsis:	Important: openoffice.org and openoffice.org2 security update
Issue date:	2011-01-28
CVE Names:	CVE-2010-3450 CVE-2010-3451 CVE-2010-3452
                 CVE-2010-3453 CVE-2010-3454 CVE-2010-4643

An array index error and an integer signedness error were found in the 
way OpenOffice.org parsed certain Rich Text Format (RTF) files. An 
attacker could use these flaws to create a specially-crafted RTF file 
that, when opened, would cause OpenOffice.org to crash or, possibly, 
execute arbitrary code with the privileges of the user running 
OpenOffice.org. (CVE-2010-3451, CVE-2010-3452)

A heap-based buffer overflow flaw and an array index error were found in
the way OpenOffice.org parsed certain Microsoft Office Word documents. 
An attacker could use these flaws to create a specially-crafted 
Microsoft Office Word document that, when opened, would cause 
OpenOffice.org to crash or, possibly, execute arbitrary code with the 
privileges of the user running OpenOffice.org. (CVE-2010-3453, 
CVE-2010-3454)

A heap-based buffer overflow flaw was found in the way OpenOffice.org
parsed certain TARGA (Truevision TGA) files. An attacker could use this
flaw to create a specially-crafted TARGA file. If a document containing
this specially-crafted TARGA file was opened, or if a user tried to 
insert the file into an existing document, it would cause OpenOffice.org 
to crash or, possibly, execute arbitrary code with the privileges of the 
user running OpenOffice.org. (CVE-2010-4643)

A directory traversal flaw was found in the way OpenOffice.org handled
the installation of XSLT filter descriptions packaged in Java Archive 
(JAR) files, as well as the installation of OpenOffice.org Extension 
(.oxt) files. An attacker could use these flaws to create a 
specially-crafted XSLT filter description or extension file that, when 
opened, would cause the OpenOffice.org Extension Manager to modify files 
accessible to the user installing the JAR or extension file. (CVE-2010-3450)

All running instances of OpenOffice.org applications must be restarted 
for this update to take effect.

SL 4.x

     SRPMS:
openoffice.org-1.1.5-10.7.el4_8.10.src.rpm
openoffice.org2-2.0.4-5.7.0.6.1.el4_8.8.src.rpm
     i386:
openoffice.org-1.1.5-10.7.10.i386.rpm
openoffice.org2-base-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-calc-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-core-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-draw-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-emailmerge-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-graphicfilter-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-impress-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-javafilter-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-af_ZA-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ar-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-bg_BG-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-bn-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ca_ES-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-cs_CZ-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-cy_GB-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-da_DK-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-de-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-el_GR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-es-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-et_EE-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-eu_ES-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-fi_FI-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-fr-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ga_IE-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-gl_ES-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-gu_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-he_IL-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-hi_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-hr_HR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-hu_HU-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-it-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ja_JP-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ko_KR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-lt_LT-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ms_MY-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-nb_NO-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-nl-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-nn_NO-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pa_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pl_PL-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pt_BR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pt_PT-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ru-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sk_SK-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sl_SI-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sr_CS-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sv-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ta_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-th_TH-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-tr_TR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-zh_CN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-zh_TW-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-zu_ZA-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-math-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-pyuno-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-testtools-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-writer-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-xsltfilter-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org-i18n-1.1.5-10.7.10.i386.rpm
openoffice.org-kde-1.1.5-10.7.10.i386.rpm
openoffice.org-libs-1.1.5-10.7.10.i386.rpm

     x86_64:
openoffice.org-1.1.5-10.7.10.i386.rpm
openoffice.org2-base-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-calc-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-core-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-draw-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-emailmerge-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-graphicfilter-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-impress-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-javafilter-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-af_ZA-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ar-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-bg_BG-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-bn-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ca_ES-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-cs_CZ-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-cy_GB-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-da_DK-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-de-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-el_GR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-es-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-et_EE-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-eu_ES-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-fi_FI-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-fr-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ga_IE-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-gl_ES-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-gu_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-he_IL-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-hi_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-hr_HR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-hu_HU-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-it-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ja_JP-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ko_KR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-lt_LT-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ms_MY-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-nb_NO-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-nl-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-nn_NO-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pa_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pl_PL-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pt_BR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-pt_PT-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ru-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sk_SK-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sl_SI-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sr_CS-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-sv-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-ta_IN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-th_TH-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-tr_TR-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-zh_CN-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-zh_TW-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-langpack-zu_ZA-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-math-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-pyuno-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-testtools-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-writer-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org2-xsltfilter-2.0.4-5.7.0.6.1.8.i386.rpm
openoffice.org-i18n-1.1.5-10.7.10.i386.rpm
openoffice.org-kde-1.1.5-10.7.10.i386.rpm
openoffice.org-libs-1.1.5-10.7.10.i386.rpm

-Connie Sieh
-Troy Dawson

ATOM RSS1 RSS2