Message-Id: <E1HSIxC-0001HM-5h@artemis.annvix.ca>
Date: Fri, 16 Mar 2007 14:23:10 -0600
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDKSA-2007:064 ] - Updated openoffice.org
	packages to address libwpd heap overflow vulnerabilities


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDKSA-2007:064
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : openoffice.org
 Date    : March 16, 2007
 Affected: 2007.0
 _______________________________________________________________________
 
 Problem Description:
 
 iDefense reported several overflow bugs in libwpd. An attacker
 could create a carefully crafted Word Perfect file that could cause
 an application linked with libwpd, such as OpenOffice, to crash or
 possibly execute arbitrary code if the file was opened by a victim.
 
 OpenOffice.org-2.X contains an embedded copy of libpwd, and as such
 is susceptible to the same issues.
 
 Updated packages have been rebuilt using the system libwpd to address
 this issue.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0002
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 5d5eb8205f8290efeebf6df5d54dfbce  2007.0/i586/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm
 1d317012e41f3fd7f9454aaa86f50bad  2007.0/i586/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm
 637be68b0e1e7c88bdb718069e777df3  2007.0/i586/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm
 5470a8b2bc65eee8fa178697e2c347f4  2007.0/i586/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm
 a4768177c5a7dab2943aa9a42c232f92  2007.0/i586/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm
 ef38eae4f6fa6f3e987a272df5b313a1  2007.0/i586/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm
 e9411982da87c406d806380e4c931edc  2007.0/i586/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm
 838dc6d746772da1853a210bae2c7427  2007.0/i586/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm
 4695517a1ec3cbb3c644602a724c6be8  2007.0/i586/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm
 03506b1e9bc6dd6294d7fbc185c693c6  2007.0/i586/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm
 7c5b94bbf29cf5806736eee2acaf456b  2007.0/i586/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm
 020c7c43dd7c607e045569b29b2afa05  2007.0/i586/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm
 fa533d90295a38fb6f76cc3e172b3c39  2007.0/i586/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm
 d43e90e6fbbddff82139d0fab8fb05b1  2007.0/i586/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm
 1a6104101294335dfaaac63ce9b1bb2e  2007.0/i586/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm
 16dc52cef9605fa437c028c3ade65370  2007.0/i586/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm
 88f07f27199dae331fa409d55e7657b0  2007.0/i586/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm
 c374882cdc260f20ffe9da683d28eaa4  2007.0/i586/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm
 c77ec8e96f9ebac6b362f9ae7a85243b  2007.0/i586/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm
 6ffd6cb99f7820a3b3159339b4e6f091  2007.0/i586/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm
 da51c02f184b8d042cdd539b5ab1d9df  2007.0/i586/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm
 b9027afa8d5065f6268e3a2f2eafef99  2007.0/i586/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm
 af00e262f720ded23a4e8aa559950e21  2007.0/i586/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm
 21acc2f8e89e359cc93095e4867ab30a  2007.0/i586/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm
 5a9d8f4b0292102164c8d6c20f7ec6d7  2007.0/i586/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm
 8fe11ce71651936a914f65448d370022  2007.0/i586/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm
 37256f201cb2c811b0a4aa6b5d3d6dfb  2007.0/i586/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm
 9d90cd1efc4c1bef927073686099edfe  2007.0/i586/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm
 5b3b8772e360b02c80e82dce0c20665c  2007.0/i586/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm
 8e6116b00d2c40de43ae59e5d2739d03  2007.0/i586/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm
 1ac887a0fd814313acbe7d11124398b3  2007.0/i586/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm
 4dc52063d87fa45fe90c28281075ea91  2007.0/i586/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm
 63d4e9b0650b4d2915dee5e5497fb0d4  2007.0/i586/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm
 00201452bb79c6448e801ad4d6944e49  2007.0/i586/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm
 c23b70692665785f78cbdaf8104e5287  2007.0/i586/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm
 22dc3dd41bfa522a0526d05fea100a2b  2007.0/i586/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm
 ddc28c00d4a16e0a1a66519dec3d280f  2007.0/i586/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm
 799fda35029e1106991f6dca36ea132b  2007.0/i586/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm
 559f687220b5b1ecd8c68e424a9d2705  2007.0/i586/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm
 e116d69da439175f0b40420c55b15f9b  2007.0/i586/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm
 f1f5cfcd5cc7b3387019f83cb4934076  2007.0/i586/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm
 90b10a1602412c8c2483d3123fe4327e  2007.0/i586/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm
 8047d7daa7e3264df88f6bbba746313a  2007.0/i586/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm
 f699d3d8c1bbf0fbe2ff8aec904229a4  2007.0/i586/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm
 e4dee750047a48aa5a095ac2a382d627  2007.0/i586/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm
 17a628740c6d8c4f9850c9a25ebc63b1  2007.0/i586/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm
 300e6679df04dcc693e0a17cea9fc927  2007.0/i586/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm
 9f1798def41c96b7643049aa2aaf4ce4  2007.0/i586/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm 
 3f4b35994146086e0e8f2c50a511fd9b  2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 5d5eb8205f8290efeebf6df5d54dfbce  2007.0/x86_64/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm
 1d317012e41f3fd7f9454aaa86f50bad  2007.0/x86_64/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm
 637be68b0e1e7c88bdb718069e777df3  2007.0/x86_64/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm
 5470a8b2bc65eee8fa178697e2c347f4  2007.0/x86_64/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm
 a4768177c5a7dab2943aa9a42c232f92  2007.0/x86_64/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm
 ef38eae4f6fa6f3e987a272df5b313a1  2007.0/x86_64/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm
 e9411982da87c406d806380e4c931edc  2007.0/x86_64/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm
 838dc6d746772da1853a210bae2c7427  2007.0/x86_64/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm
 4695517a1ec3cbb3c644602a724c6be8  2007.0/x86_64/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm
 03506b1e9bc6dd6294d7fbc185c693c6  2007.0/x86_64/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm
 7c5b94bbf29cf5806736eee2acaf456b  2007.0/x86_64/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm
 020c7c43dd7c607e045569b29b2afa05  2007.0/x86_64/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm
 fa533d90295a38fb6f76cc3e172b3c39  2007.0/x86_64/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm
 d43e90e6fbbddff82139d0fab8fb05b1  2007.0/x86_64/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm
 1a6104101294335dfaaac63ce9b1bb2e  2007.0/x86_64/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm
 16dc52cef9605fa437c028c3ade65370  2007.0/x86_64/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm
 88f07f27199dae331fa409d55e7657b0  2007.0/x86_64/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm
 c374882cdc260f20ffe9da683d28eaa4  2007.0/x86_64/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm
 c77ec8e96f9ebac6b362f9ae7a85243b  2007.0/x86_64/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm
 6ffd6cb99f7820a3b3159339b4e6f091  2007.0/x86_64/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm
 da51c02f184b8d042cdd539b5ab1d9df  2007.0/x86_64/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm
 b9027afa8d5065f6268e3a2f2eafef99  2007.0/x86_64/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm
 af00e262f720ded23a4e8aa559950e21  2007.0/x86_64/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm
 21acc2f8e89e359cc93095e4867ab30a  2007.0/x86_64/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm
 5a9d8f4b0292102164c8d6c20f7ec6d7  2007.0/x86_64/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm
 8fe11ce71651936a914f65448d370022  2007.0/x86_64/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm
 37256f201cb2c811b0a4aa6b5d3d6dfb  2007.0/x86_64/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm
 9d90cd1efc4c1bef927073686099edfe  2007.0/x86_64/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm
 5b3b8772e360b02c80e82dce0c20665c  2007.0/x86_64/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm
 8e6116b00d2c40de43ae59e5d2739d03  2007.0/x86_64/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm
 1ac887a0fd814313acbe7d11124398b3  2007.0/x86_64/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm
 4dc52063d87fa45fe90c28281075ea91  2007.0/x86_64/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm
 63d4e9b0650b4d2915dee5e5497fb0d4  2007.0/x86_64/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm
 00201452bb79c6448e801ad4d6944e49  2007.0/x86_64/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm
 c23b70692665785f78cbdaf8104e5287  2007.0/x86_64/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm
 22dc3dd41bfa522a0526d05fea100a2b  2007.0/x86_64/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm
 ddc28c00d4a16e0a1a66519dec3d280f  2007.0/x86_64/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm
 799fda35029e1106991f6dca36ea132b  2007.0/x86_64/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm
 559f687220b5b1ecd8c68e424a9d2705  2007.0/x86_64/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm
 e116d69da439175f0b40420c55b15f9b  2007.0/x86_64/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm
 f1f5cfcd5cc7b3387019f83cb4934076  2007.0/x86_64/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm
 90b10a1602412c8c2483d3123fe4327e  2007.0/x86_64/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm
 8047d7daa7e3264df88f6bbba746313a  2007.0/x86_64/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm
 f699d3d8c1bbf0fbe2ff8aec904229a4  2007.0/x86_64/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm
 e4dee750047a48aa5a095ac2a382d627  2007.0/x86_64/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm
 17a628740c6d8c4f9850c9a25ebc63b1  2007.0/x86_64/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm
 300e6679df04dcc693e0a17cea9fc927  2007.0/x86_64/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm
 9f1798def41c96b7643049aa2aaf4ce4  2007.0/x86_64/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm 
 3f4b35994146086e0e8f2c50a511fd9b  2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFF+tItmqjQ0CJFipgRAp7uAJsFmk+UvDkB+C+pXVOH806cWg5nJACg3MBQ
kAT8mL+RQMCIfZlI9XhtKpE=
=tSsR
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists