Login
Newsletter
Werbung

Sicherheit: Pufferüberläufe in LibreOffice
Aktuelle Meldungen Distributionen
Name: Pufferüberläufe in LibreOffice
ID: USN-1536-1
Distribution: Ubuntu
Plattformen: Ubuntu 11.04, Ubuntu 11.10, Ubuntu 12.04 LTS
Datum: Di, 14. August 2012, 07:21
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2665
Applikationen: LibreOffice

Originalnachricht


--===============3582576935720320425==
Content-Type: multipart/signed; micalg="pgp-sha512";
protocol="application/pgp-signature";
boundary="=-vPcFXD36OAqbkH8/t+o2"


--=-vPcFXD36OAqbkH8/t+o2
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1536-1
August 13, 2012

libreoffice vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 11.04

Summary:

LibreOffice could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- libreoffice: Office productivity suite

Details:

It was discovered that LibreOffice incorrectly handled certain encryption
tags in Open Document Text (.odt) files. If a user were tricked into
opening a specially crafted file, an attacker could cause LibreOffice to
crash or possibly execute arbitrary code with the privileges of the user
invoking the program.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
libreoffice-core 1:3.5.4-0ubuntu1.1

Ubuntu 11.10:
libreoffice-core 1:3.4.4-0ubuntu1.4

Ubuntu 11.04:
libreoffice-core 1:3.3.4-0ubuntu1.4

After a standard system update you need to restart LibreOffice to make all
the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1536-1
CVE-2012-2665

Package Information:
https://launchpad.net/ubuntu/+source/libreoffice/1:3.5.4-0ubuntu1.1
https://launchpad.net/ubuntu/+source/libreoffice/1:3.4.4-0ubuntu1.4
https://launchpad.net/ubuntu/+source/libreoffice/1:3.3.4-0ubuntu1.4



--ßPcFXD36OAqbkH8/t+o2
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=uyZl
-----END PGP SIGNATURE-----

--=-vPcFXD36OAqbkH8/t+o2--



--===============3582576935720320425==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============3582576935720320425==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung