[SECURITY] Fedora 9 Update: openoffice.org-2.4.1-17.6.fc9

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7680
2008-09-05 11:00:40
--------------------------------------------------------------------------------

Name        : openoffice.org
Product     : Fedora 9
Version     : 2.4.1
Release     : 17.6.fc9
URL         : http://www.openoffice.org/
Summary     : OpenOffice.org comprehensive office suite.
Description :
OpenOffice.org is an Open Source, community-developed, multi-platform
office productivity suite.  It includes the key desktop applications,
such as a word processor, spreadsheet, presentation manager, formula
editor and drawing program, with a user interface and feature set
similar to other office suites.  Sophisticated and flexible,
OpenOffice.org also works transparently with a variety of file
formats, including Microsoft Office.

Usage: Simply type "ooffice" to run OpenOffice.org or select the
requested component (Writer, Calc, Impress, etc.) from your
desktop menu. On first start a few files will be installed in the
user's home, if necessary.

--------------------------------------------------------------------------------
Update Information:

Resolves: CVE-2008-3282 numeric truncation error in 64bit OOo memory allocator
An update to OpenOffice.org primarily to provide Serbian translations and
support. Additional outstanding fixes for some crashes are provided as well.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Aug 26 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.1-17.6
- Resolves: CVE-2008-3282 numeric truncation error in OOo memory allocator
- add openoffice.org-2.4.0.ooo93119.shell.echos.patch
* Wed Jul 23 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.1-17.5
- Resolves: rhbz#452376 backport workspace.locdat30.patch for Serbian
- Resolves: rhbz#452376 update Serbian translations
- Resolves: rhbz#452379 extend Serbian translations
- Resolves: rhbz#452374 add openoffice.org-3.0.0.ooo86142.serbiannumbering.patch
- Resolves: rhbz#452385 add postgress-jdbc to default classpath
- Resolves: rhbz#456292 openoffice.org-3.0.0.ooo92026.sd.disposed_during_disposing.patch
- Resolves: rhbz#457193 openoffice.org-3.0.0.ooo92253.dbaccess.a11y.crash
- Resolves: rhbz#457303 notes related right click in empty space crash
- rhbz#455711 add openoffice.org-3.0.0.ooo92343.svtools.strangethrow.patch
* Fri Jun 13 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.1-17.4
- Resolves: rhbz#451485 fix vertical glyphs
- Resolves: rhbz#450661 openoffice.org-3.0.0.ooo90306.sw.wrongprotection.patch
- Resolves: rhbz#448464 openoffice.org-3.0.0.ooo48400.svx.fixspelling.patch
- Resolves: rhbz#450930 openoffice.org-3.0.0.ooo90697.sd.a11ycrash.patch
* Fri Jun  6 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.1-17.3
- remove pointless "register" dialog request
- Resolves: rhbz#450212 openoffice.org-3.0.0.ooo82545.np_sdk.x86_64.patch
* Tue Jun  3 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.1-17.2
- filter out -fasynchronous-unwind-tables because it doesn't work with -Os
  on i386
- Resolves: rhbz#448553 openoffice.org-3.0.0.ooo90037.vcl.cairotransforms.patch
* Sun Jun  1 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.1-17.1
- Resolves: rhbz#445588 add openoffice.org-3.0.0.ooo87970.vcl.samenamesubs.patch
- drop integrated openoffice.org-2.3.1.ooo81307.sw.word2.patch
- drop integrated workspace.os114.patch
* Thu May 22 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.0-12.10
- rebuild
- Resolves: rhbz#447199 add workspace.impress138.patch
- Resolves: rhbz#447212 nostrict-aliasing is broken gcc#36187
* Mon May 12 2008 Caolan McNamara <caolanm at redhat.com> - 1:2.4.0-12.9
- Resolves: rhbz#444571 add openoffice.org-3.0.0.ooo88090.chart2.negativecount.patch
- Resolves: rhbz#445318 fix notes related crash
- Resolves: rhbz#445953 backport 2.4.1 ww8 bidi digit fixes
- Resolves: rhbz#446005 there's something very wrong here, but every
  attempt to isolate it makes it go away
- add openoffice.org-3.0.0.ooo89002.vcl.symbolfonts.patch
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #458056 - CVE-2008-3282 openoffice.org: numeric truncation error in memory allocator (64bit)
        https://bugzilla.redhat.com/show_bug.cgi?id=458056
  [ 2 ] Bug #460636 - openoffice.org-core: Insecure auxiliary /tmp file usage (symlink attack possible)
        https://bugzilla.redhat.com/show_bug.cgi?id=460636
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update openoffice.org' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------