Zwei Probleme in LibreOffice
ID: | USN-2578-1 |
Distribution: | Ubuntu |
Plattformen: | Ubuntu 12.04 LTS, Ubuntu 14.04 LTS, Ubuntu 14.10 |
Datum: | Mo, 27. April 2015, 16:32 |
Referenzen: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9093
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1774 |
Applikationen: | LibreOffice |
Originalnachricht |
|
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============6086499304382588865== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx Content-Type: text/plain; charset=utf- Content-Transfer-Encoding: quoted-printable ========================================================================== Ubuntu Security Notice USN-2578-1 April 27, 2015 libreoffice vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: LibreOffice could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - libreoffice: Office productivity suite Details: Alexander Cherepanov discovered that LibreOffice incorrectly handled certain RTF files. If a user were tricked into opening a specially crafted RTF document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. (CVE-2014-9093) It was discovered that LibreOffice incorrectly handled certain HWP files. If a user were tricked into opening a specially crafted HWP document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. (CVE-2015-1774) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.10: libreoffice-core 1:4.3.7~rc2-0ubuntu1 Ubuntu 14.04 LTS: libreoffice-core 1:4.2.8-0ubuntu2 Ubuntu 12.04 LTS: libreoffice-core 1:3.5.7-0ubuntu8 After a standard system update you need to restart LibreOffice to make all the necessary changes. References: http://www.ubuntu.com/usn/usn-2578-1 CVE-2014-9093, CVE-2015-1774 Package Information: https://launchpad.net/ubuntu/+source/libreoffice/1:4.3.7~rc2-0ubuntu1 https://launchpad.net/ubuntu/+source/libreoffice/1:4.2.8-0ubuntu2 https://launchpad.net/ubuntu/+source/libreoffice/1:3.5.7-0ubuntu8 --nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVPiqwAAoJEGVp2FWnRL6TpQEP+wVifH5Gk0gqiC4Ny3wJpytA E5m/7nHqPPlNrlpLPlhhHeyokkUXyVvUOcwqqYLDoIMJkeP6Gg4IVYcyrzGvQ+eF 8G0YnoRTRp8rtOJY1JSxYShc4sXhJ4zDXBtKFs0oLhkoftQsjg/8afmW8dNPm5KO iSP8xzbHP5j5h0i+5yBHWe1thiFl8zIrRh3azmnLPA6KnziLV+Dj5xrECwTUPV7M G91juSuD9sIx8VxXFYxuYeLo4VAqgjCkhkXReX4pFZH2zEQ1gM9B35djL4cuwdxl bXeVL9/lRBF6eYWLwV2v8DqLkEPS5d9khSdAJAbtB4aL5zPClDMnzT35nYoq/M5P hBYk4o6es49nlNIDKrqY+g/U6uIIMZVEzTH+sKIWpa9/nbXuIFvhxABkLiWlOyRH W6S1GmDL7velWED12kz4g/Vl9wSzuD0EQYPKOBVNEI4+M9CC0LRmaeEaW9MYrQoT fCPbTstzDbAQz/Fn+h5GN35TvhsMgDREaAF/CJ1CgaEOxs7QBZ3qgY2TB/Qhgcu9 mNIDyMQY4yOum1JSVb5xmnsfWNLZJVnRk12w2HHd5VWpUJrDsBTXfR9EFs0HQpw/ f7jukPHn49e5a6iyigu5jAdz2sxn3zXiBZFqpdYpjEmWyDfhC0WM6c0AYK8j/R4K E9ASnQmZURBwgaKQFTrc =+cdw -----END PGP SIGNATURE----- --nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx-- --===============6086499304382588865== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce --===============6086499304382588865==-- |