[SECURITY] Fedora 11 Update: openoffice.org-3.1.1-19.13.fc11

Mon Jun 7 22:26:04 UTC 2010

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9628
2010-06-07 20:42:19
--------------------------------------------------------------------------------

Name        : openoffice.org
Product     : Fedora 11
Version     : 3.1.1
Release     : 19.13.fc11
URL         : http://www.openoffice.org/
Summary     : OpenOffice.org comprehensive office suite.
Description :
OpenOffice.org is an Open Source, community-developed, multi-platform
office productivity suite.  It includes the key desktop applications,
such as a word processor, spreadsheet, presentation manager, formula
editor and drawing program, with a user interface and feature set
similar to other office suites.  Sophisticated and flexible,
OpenOffice.org also works transparently with a variety of file
formats, including Microsoft Office.

Usage: Simply type "ooffice" to run OpenOffice.org or select the
requested component (Writer, Calc, Impress, etc.) from your
desktop menu. On first start a few files will be installed in the
user's home, if necessary.

--------------------------------------------------------------------------------
Update Information:

A security vulnerability in OpenOffice.org, related to python scripting, might
lead to unexpected code execution when using the built-in scripting IDE for
exploring python code.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun  5 2010 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.13
- Resolves: CVE-2010-0395 openoffice.org-3.2.1.pyuno.patch
- Resolves: rhbz#566099 fix modal dialog exit in qstarter
- Resolves: rhbz#580596 OOo crashes running basic macros that calls osl_systemPathRemoveSeparator
* Fri Feb 12 2010 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.12
- CVE-2009-2950 GIF file parsing heap overflow (caolanm)
- CVE-2009-2949 integer overflow in XPM processing (caolanm)
- CVE-2009-3301 .doc Table Parsing vulernability (caolanm)
- CVE-2009-3302 .doc Table Parsing vulernability (caolanm)
- Resolves: rhbz#549890 add workspace.extmgr01.patch (dtardon)
- Resolves: rhbz#551983 OpenOffice writer crashes when opening document
  with link in footnote (dtardon)
- Resolves: rhbz#550316 Openoffice.org Impress loses graphics when
  background color is changed (dtardon)
- Resolves: rhbz#553929 [abrt] crash in ColorConfigCtrl_Impl::ScrollHdl
  (dtardon)
- Resolves: rbhz#555257 openoffice cannot use JPEG images using CMYK
  colorspace (dtardon)
- Resolves: rhbz#558342 [abrt] crash in SvxNumOptionsTabPage::InitControls
  (dtardon)
* Tue Dec 15 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.11
- Resolves: rhbz#529648 add workspace.fwk132.patch
* Wed Dec  9 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.10
- Resolves: rhbz#545783 add workspace.vcl105.patch (caolanm)
* Wed Dec  9 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.9
- add openoffice.org-4.2.0.ooo107151.sc.pop-empty-cell.patch (dtardon)
- Resolves: rhbz#533538 OpenOffice keyboard shortcuts mis-map in the
  Spanish localized version of OOo (caolanm)
* Tue Nov 10 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.8
- Resolves: rhbz#533841 ooo#105710 svx loadstorenumbering (caolanm)
* Thu Nov  5 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.7
- Resolves: ooo#106523 fix pdf/A export on x86_64 (caolanm)
* Thu Nov  5 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.6
- Resolves: rhbz#533146 calc notes go missing on save
* Wed Oct 28 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.5
- Resolves: rhbz#531554 add workspace.chart41.patch
* Wed Oct 21 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.4
- Resolves: rhbz#522839 crash on exit after loading .doc
- Resolves: rhbz#529746 crash on exit after loading .ppt
* Mon Sep  7 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.3
- Resolves: rhbz#521460 - wrong UI label for A3/A5 page sizes in translations
* Wed Sep  2 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.2
- Resolves: rhbz#520772 copy/paste cockup
* Fri Aug 28 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.1-19.1
- update to 3.1.1
- Resolves: rhbz#512355 add openoffice.org-3.1.0.ooo103651.canvas.nosubpixel.patc
- add workspace.os132.patch to avoid switch html view overwrite horror
- Resolves: rhbz#517843 add openoffice.org-3.1.1.ooo104306.moverecentlyused.patch
- Resolves: rhbz#514683 add openoffice.org-3.1.1.ooo104329.dbaccess.primarykeys.patch
- Resolves: rbhz#501141 Images and Frames disappear in sequential printing
- backport workspace.vcl102.patch to fix xdg support
- add workspace.cmcfixes62.patch for 64bit odbc goodness and rebuild
  against now 64bit-safe unixODBC headers
* Thu Jul  9 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.0-11.5
- Resolves: rhbz#506984 openoffice.org-3.1.0.ooo103277.vcl.kwinworkaround.patch
- Resolves: rhbz#510394 Crash while saving xls file possibly due to
  double free or corruption error
- Resolves(maybe): rhbz#510327 openoffice.org-3.1.0.oooXXXXX.svx.64bit.patch
* Mon Jun 22 2009 Caolán McNamara <caolanm at redhat.com> - 1:3.1.0-11.4
- Related: rhbz#472853 openoffice.org-3.1.0.ooo99250.sc.autooutline-reflists.patch
- Resolves: rhbz#503003 silence warnings on updates
- Resolves: rhbz#504419 openoffice.org-3.1.0.ooo102566.sc.less.frenetic.progress.patch
- Resolves: rhbz#506039 workspace.pdfextfix02.patch upsidedown images in pdf import
- Resolves: rhbz#506545 openoffice.org-3.1.0.ooo102920.i18npool.utf16bustage.patch
- Resolves: rhbz#506184 workspace.aw073.patch
- Resolves: rhbz#504452 Serial printing: Problems with datasource
  refresh, selection of records when printing to a file
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #574119 - CVE-2010-0395 openoffice.org Execution of Python code when browsing macros
        https://bugzilla.redhat.com/show_bug.cgi?id=574119
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update openoffice.org' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------