1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 2487-1] openoffice.org security update

    From Florian Weimer@1:229/2 to All on Thu Jun 7 22:00:01 2012
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-2487-1 [email protected] http://www.debian.org/security/ Florian Weimer
    June 07, 2012 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : openoffice.org
    Vulnerability : buffer overflow
    Problem type : local (remote)
    Debian-specific: no
    CVE ID : CVE-2012-1149 CVE-2012-2334

    It was discovered that OpenOffice.org would not properly process
    crafted document files, possibly leading to arbitrary code execution.

    CVE-2012-1149
    Integer overflows in PNG image handling

    CVE-2012-2334
    Integer overflow in operator new[] invocation and heap-based
    buffer overflow inside the MS-ODRAW parser

    For the stable distribution (squeeze), this problem has been fixed in
    version 1:3.2.1-11+squeeze6.

    For the unstable distribution (sid), these problems have been fixed in
    version 1:3.5.2~rc2-1 of the libreoffice package.

    We recommend that you upgrade your openoffice.org packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: http://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.10 (GNU/Linux)

    iQEcBAEBAgAGBQJP0P4UAAoJEL97/wQC1SS+xVsH/RryzKONh1SBGKN4osq27UH2 774tOERttRzsDgipwpp560aPMM04rLfH2k3Os9vk3zvzgwnBd4e7GeLKYbTkK/M7 g1zIPNRjGbLxREsTbdXYbgB86+PWjtd4Ex6TPFsPWPyOheqZMKEj2clNOW32ZKfV X7vBXDt3OlxrZo4Vxy6Q33HGF0Nf9eJv9N0se4o4mZJ/Uom8LpgOrfy4Lwsyxkkg csRrzqus9GgYpvjpf9R10YCj11rpXojGybZL6Xz5MPrqTcD6c2pTTTvIWczKTy5j QlYGuu/l4sTql5aZjdbIt/TAThQpKDPSIBc10/Br/sTER1YrrYuDj0ZDY8PR5cQ=
    =3nsr
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)