[ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities
To: [email protected]
Subject: [ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities
Date: Fri, 16 Mar 2007 14:23:10 -0600
From: [email protected]
Reply-To: <xsecurity@mandriva.com.>
Message-Id: <E1HSIxC-0001HH-3e@artemis.annvix.ca.>
Sender: QA Team <qateam@artemis.annvix.ca.>
X-Virus-Scanned: antivirus-gw at tyumen.ru
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2007:064
http://www.mandriva.com/security/
_______________________________________________________________________
Package : openoffice.org
Date : March 16, 2007
Affected: 2007.0
_______________________________________________________________________
Problem Description:
iDefense reported several overflow bugs in libwpd. An attacker
could create a carefully crafted Word Perfect file that could cause
an application linked with libwpd, such as OpenOffice, to crash or
possibly execute arbitrary code if the file was opened by a victim.
OpenOffice.org-2.X contains an embedded copy of libpwd, and as such
is susceptible to the same issues.
Updated packages have been rebuilt using the system libwpd to address
this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0002
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2007.0:
5d5eb8205f8290efeebf6df5d54dfbce 2007.0/i586/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm
1d317012e41f3fd7f9454aaa86f50bad 2007.0/i586/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm
637be68b0e1e7c88bdb718069e777df3 2007.0/i586/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm
5470a8b2bc65eee8fa178697e2c347f4 2007.0/i586/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm
a4768177c5a7dab2943aa9a42c232f92 2007.0/i586/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm
ef38eae4f6fa6f3e987a272df5b313a1 2007.0/i586/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm
e9411982da87c406d806380e4c931edc 2007.0/i586/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm
838dc6d746772da1853a210bae2c7427 2007.0/i586/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm
4695517a1ec3cbb3c644602a724c6be8 2007.0/i586/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm
03506b1e9bc6dd6294d7fbc185c693c6 2007.0/i586/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm
7c5b94bbf29cf5806736eee2acaf456b 2007.0/i586/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm
020c7c43dd7c607e045569b29b2afa05 2007.0/i586/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm
fa533d90295a38fb6f76cc3e172b3c39 2007.0/i586/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm
d43e90e6fbbddff82139d0fab8fb05b1 2007.0/i586/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm
1a6104101294335dfaaac63ce9b1bb2e 2007.0/i586/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm
16dc52cef9605fa437c028c3ade65370 2007.0/i586/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm
88f07f27199dae331fa409d55e7657b0 2007.0/i586/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm
c374882cdc260f20ffe9da683d28eaa4 2007.0/i586/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm
c77ec8e96f9ebac6b362f9ae7a85243b 2007.0/i586/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm
6ffd6cb99f7820a3b3159339b4e6f091 2007.0/i586/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm
da51c02f184b8d042cdd539b5ab1d9df 2007.0/i586/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm
b9027afa8d5065f6268e3a2f2eafef99 2007.0/i586/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm
af00e262f720ded23a4e8aa559950e21 2007.0/i586/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm
21acc2f8e89e359cc93095e4867ab30a 2007.0/i586/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm
5a9d8f4b0292102164c8d6c20f7ec6d7 2007.0/i586/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm
8fe11ce71651936a914f65448d370022 2007.0/i586/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm
37256f201cb2c811b0a4aa6b5d3d6dfb 2007.0/i586/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm
9d90cd1efc4c1bef927073686099edfe 2007.0/i586/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm
5b3b8772e360b02c80e82dce0c20665c 2007.0/i586/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm
8e6116b00d2c40de43ae59e5d2739d03 2007.0/i586/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm
1ac887a0fd814313acbe7d11124398b3 2007.0/i586/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm
4dc52063d87fa45fe90c28281075ea91 2007.0/i586/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm
63d4e9b0650b4d2915dee5e5497fb0d4 2007.0/i586/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm
00201452bb79c6448e801ad4d6944e49 2007.0/i586/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm
c23b70692665785f78cbdaf8104e5287 2007.0/i586/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm
22dc3dd41bfa522a0526d05fea100a2b 2007.0/i586/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm
ddc28c00d4a16e0a1a66519dec3d280f 2007.0/i586/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm
799fda35029e1106991f6dca36ea132b 2007.0/i586/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm
559f687220b5b1ecd8c68e424a9d2705 2007.0/i586/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm
e116d69da439175f0b40420c55b15f9b 2007.0/i586/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm
f1f5cfcd5cc7b3387019f83cb4934076 2007.0/i586/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm
90b10a1602412c8c2483d3123fe4327e 2007.0/i586/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm
8047d7daa7e3264df88f6bbba746313a 2007.0/i586/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm
f699d3d8c1bbf0fbe2ff8aec904229a4 2007.0/i586/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm
e4dee750047a48aa5a095ac2a382d627 2007.0/i586/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm
17a628740c6d8c4f9850c9a25ebc63b1 2007.0/i586/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm
300e6679df04dcc693e0a17cea9fc927 2007.0/i586/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm
9f1798def41c96b7643049aa2aaf4ce4 2007.0/i586/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm
3f4b35994146086e0e8f2c50a511fd9b 2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm
Mandriva Linux 2007.0/X86_64:
5d5eb8205f8290efeebf6df5d54dfbce 2007.0/x86_64/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm
1d317012e41f3fd7f9454aaa86f50bad 2007.0/x86_64/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm
637be68b0e1e7c88bdb718069e777df3 2007.0/x86_64/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm
5470a8b2bc65eee8fa178697e2c347f4 2007.0/x86_64/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm
a4768177c5a7dab2943aa9a42c232f92 2007.0/x86_64/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm
ef38eae4f6fa6f3e987a272df5b313a1 2007.0/x86_64/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm
e9411982da87c406d806380e4c931edc 2007.0/x86_64/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm
838dc6d746772da1853a210bae2c7427 2007.0/x86_64/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm
4695517a1ec3cbb3c644602a724c6be8 2007.0/x86_64/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm
03506b1e9bc6dd6294d7fbc185c693c6 2007.0/x86_64/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm
7c5b94bbf29cf5806736eee2acaf456b 2007.0/x86_64/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm
020c7c43dd7c607e045569b29b2afa05 2007.0/x86_64/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm
fa533d90295a38fb6f76cc3e172b3c39 2007.0/x86_64/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm
d43e90e6fbbddff82139d0fab8fb05b1 2007.0/x86_64/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm
1a6104101294335dfaaac63ce9b1bb2e 2007.0/x86_64/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm
16dc52cef9605fa437c028c3ade65370 2007.0/x86_64/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm
88f07f27199dae331fa409d55e7657b0 2007.0/x86_64/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm
c374882cdc260f20ffe9da683d28eaa4 2007.0/x86_64/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm
c77ec8e96f9ebac6b362f9ae7a85243b 2007.0/x86_64/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm
6ffd6cb99f7820a3b3159339b4e6f091 2007.0/x86_64/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm
da51c02f184b8d042cdd539b5ab1d9df 2007.0/x86_64/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm
b9027afa8d5065f6268e3a2f2eafef99 2007.0/x86_64/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm
af00e262f720ded23a4e8aa559950e21 2007.0/x86_64/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm
21acc2f8e89e359cc93095e4867ab30a 2007.0/x86_64/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm
5a9d8f4b0292102164c8d6c20f7ec6d7 2007.0/x86_64/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm
8fe11ce71651936a914f65448d370022 2007.0/x86_64/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm
37256f201cb2c811b0a4aa6b5d3d6dfb 2007.0/x86_64/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm
9d90cd1efc4c1bef927073686099edfe 2007.0/x86_64/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm
5b3b8772e360b02c80e82dce0c20665c 2007.0/x86_64/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm
8e6116b00d2c40de43ae59e5d2739d03 2007.0/x86_64/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm
1ac887a0fd814313acbe7d11124398b3 2007.0/x86_64/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm
4dc52063d87fa45fe90c28281075ea91 2007.0/x86_64/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm
63d4e9b0650b4d2915dee5e5497fb0d4 2007.0/x86_64/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm
00201452bb79c6448e801ad4d6944e49 2007.0/x86_64/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm
c23b70692665785f78cbdaf8104e5287 2007.0/x86_64/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm
22dc3dd41bfa522a0526d05fea100a2b 2007.0/x86_64/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm
ddc28c00d4a16e0a1a66519dec3d280f 2007.0/x86_64/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm
799fda35029e1106991f6dca36ea132b 2007.0/x86_64/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm
559f687220b5b1ecd8c68e424a9d2705 2007.0/x86_64/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm
e116d69da439175f0b40420c55b15f9b 2007.0/x86_64/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm
f1f5cfcd5cc7b3387019f83cb4934076 2007.0/x86_64/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm
90b10a1602412c8c2483d3123fe4327e 2007.0/x86_64/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm
8047d7daa7e3264df88f6bbba746313a 2007.0/x86_64/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm
f699d3d8c1bbf0fbe2ff8aec904229a4 2007.0/x86_64/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm
e4dee750047a48aa5a095ac2a382d627 2007.0/x86_64/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm
17a628740c6d8c4f9850c9a25ebc63b1 2007.0/x86_64/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm
300e6679df04dcc693e0a17cea9fc927 2007.0/x86_64/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm
9f1798def41c96b7643049aa2aaf4ce4 2007.0/x86_64/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm
3f4b35994146086e0e8f2c50a511fd9b 2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFF+tItmqjQ0CJFipgRAp7uAJsFmk+UvDkB+C+pXVOH806cWg5nJACg3MBQ
kAT8mL+RQMCIfZlI9XhtKpE=
=tSsR
-----END PGP SIGNATURE-----
