drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in LibreOffice
Name: |
Zwei Probleme in LibreOffice |
|
ID: |
USN-2578-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 12.04 LTS, Ubuntu 14.04 LTS, Ubuntu 14.10 |
|
Datum: |
Mo, 27. April 2015, 16:32 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9093
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1774 |
|
Applikationen: |
LibreOffice |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============6086499304382588865== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx Content-Type: text/plain; charset=utf- Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-2578-1 April 27, 2015
libreoffice vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS
Summary:
LibreOffice could be made to crash or run programs as your login if it opened a specially crafted file.
Software Description: - libreoffice: Office productivity suite
Details:
Alexander Cherepanov discovered that LibreOffice incorrectly handled certain RTF files. If a user were tricked into opening a specially crafted RTF document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. (CVE-2014-9093)
It was discovered that LibreOffice incorrectly handled certain HWP files. If a user were tricked into opening a specially crafted HWP document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. (CVE-2015-1774)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.10: libreoffice-core 1:4.3.7~rc2-0ubuntu1
Ubuntu 14.04 LTS: libreoffice-core 1:4.2.8-0ubuntu2
Ubuntu 12.04 LTS: libreoffice-core 1:3.5.7-0ubuntu8
After a standard system update you need to restart LibreOffice to make all the necessary changes.
References: http://www.ubuntu.com/usn/usn-2578-1 CVE-2014-9093, CVE-2015-1774
Package Information: https://launchpad.net/ubuntu/+source/libreoffice/1:4.3.7~rc2-0ubuntu1 https://launchpad.net/ubuntu/+source/libreoffice/1:4.2.8-0ubuntu2 https://launchpad.net/ubuntu/+source/libreoffice/1:3.5.7-0ubuntu8
--nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJVPiqwAAoJEGVp2FWnRL6TpQEP+wVifH5Gk0gqiC4Ny3wJpytA E5m/7nHqPPlNrlpLPlhhHeyokkUXyVvUOcwqqYLDoIMJkeP6Gg4IVYcyrzGvQ+eF 8G0YnoRTRp8rtOJY1JSxYShc4sXhJ4zDXBtKFs0oLhkoftQsjg/8afmW8dNPm5KO iSP8xzbHP5j5h0i+5yBHWe1thiFl8zIrRh3azmnLPA6KnziLV+Dj5xrECwTUPV7M G91juSuD9sIx8VxXFYxuYeLo4VAqgjCkhkXReX4pFZH2zEQ1gM9B35djL4cuwdxl bXeVL9/lRBF6eYWLwV2v8DqLkEPS5d9khSdAJAbtB4aL5zPClDMnzT35nYoq/M5P hBYk4o6es49nlNIDKrqY+g/U6uIIMZVEzTH+sKIWpa9/nbXuIFvhxABkLiWlOyRH W6S1GmDL7velWED12kz4g/Vl9wSzuD0EQYPKOBVNEI4+M9CC0LRmaeEaW9MYrQoT fCPbTstzDbAQz/Fn+h5GN35TvhsMgDREaAF/CJ1CgaEOxs7QBZ3qgY2TB/Qhgcu9 mNIDyMQY4yOum1JSVb5xmnsfWNLZJVnRk12w2HHd5VWpUJrDsBTXfR9EFs0HQpw/ f7jukPHn49e5a6iyigu5jAdz2sxn3zXiBZFqpdYpjEmWyDfhC0WM6c0AYK8j/R4K E9ASnQmZURBwgaKQFTrc =+cdw -----END PGP SIGNATURE-----
--nhpOhAq8U03wa6CmklWqaJ5HoB5C6BFdx--
--===============6086499304382588865== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============6086499304382588865==--
|
|
|
|