Login


 
Newsletter
Werbung
Sicherheit: Denial of Service in Calligra
Aktuelle Meldungen Distributionen
Name: Denial of Service in Calligra
ID: USN-1525-1
Distribution: Ubuntu
Plattformen: Ubuntu 12.04 LTS
Datum: Do, 9. August 2012, 22:00
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3456

Originalnachricht


--===============5494754049794842253==
Content-Type: multipart/signed; micalg="pgp-sha512";
protocol="application/pgp-signature";
boundary="=-oGZmNJ6BXCQPPf59afkM"


--=-oGZmNJ6BXCQPPf59afkM
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1525-1
August 09, 2012

calligra vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

Calligra could be made to crash or run programs as your login if it opened
a specially crafted file.

Software Description:
- calligra: integrated work applications suite

Details:

It was discovered that Calligra incorrectly handled certain malformed
MS Word documents. If a user or automated system were tricked into opening
a crafted MS Word file, an attacker could cause a denial of service or
execute arbitrary code with privileges of the user invoking the program.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
calligra 1:2.4.0-0ubuntu2.1

After a standard system update you need to restart Calligra to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1525-1
CVE-2012-3456

Package Information:
https://launchpad.net/ubuntu/+source/calligra/1:2.4.0-0ubuntu2.1



--ØGZmNJ6BXCQPPf59afkM
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAABCgAGBQJQJAbvAAoJEGVp2FWnRL6TXSUP/3iyYQ5UOrbcSxqq25WbtbxR
BX8kb+hYA7GY0m0YIAZxswoOcTpSoGQrOB2CUMwulcK7ApTNSNV//4xx9nn5zRHC
V1lzI8aEHLhIdVZFaoCDUvyJgsum6atEFk09nByvWjj37mdFV+qq7pblG6VZTXGs
Cs3c5f9ij3/9yPSS5+XXNzkZzjdch74td+uUMcYMA13lJ/3tVr+7zMmC0cC3WyNN
k4sxLlV7dLktWS+I5ZQOK8HWEIu2JxjebZuvxbV7lAzXB1q6//Ko3BVHYB8Vu3lx
sgJcpyiD7T+Fm8kauRgKrdAtSdOJQ9EVw5/Oudi29Yab3zByz/3yMvtDIQBGNh69
uvaBnVxHxzD3n/l/+fKicV7O4jY01Mdp+nCuwBag7FtvLvly/gdRG7p/E8SMfqW+
Bwafun3v7z6+D68TOTWh2OyGmFBt1DNCfNi3FCm1qZfBCrgJDMmkLTiNgEZzh2F7
/ZuFLmwiy0AQ3L3K6GA3OZ05ka8S+KVwYJtUbxSuezq+Ni15JleW3X8SIz4sQa0G
BuuIkgp+8sAvNkfYMBy/JZWEXit3i4qSChn5cdDeK9p8SMcoqFvxhW8WT3i+y7kw
Qv+tLLBaZGiavsmU8uICDz/rWyrbvMttFIUMWL+VrCqEotSPZPp/mzOfw9oyB0Qd
Icu4QMU8PzWP2q+VK1Nm
=t51A
-----END PGP SIGNATURE-----

--=-oGZmNJ6BXCQPPf59afkM--



--===============5494754049794842253==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============5494754049794842253==--
Pro-Linux
Gewinnspiel
Neue Nachrichten
Werbung