ALT-BU-2018-3052-1
Branch c7.1 update bulletin.
Package LibreOffice4 updated to version 4.2-alt2.M70C.6 for branch c7.1 in task 198799.
Closed vulnerabilities
BDU:2017-02018
Уязвимость компонентов Calc и Writer пакета офисных программ LibreOffice, позволяющая нарушителю раскрыть защищаемую информацию
BDU:2018-00221
Уязвимость функции ImportOldFormatStyles анализатора DOC-файлов офисного пакета Apache OpenOffice, позволяющая нарушителю выполнить произвольный код
BDU:2018-00222
Уязвимость функции PPTStyleSheet анализатора PPT-файлов офисного пакета Apache OpenOffice, позволяющая нарушителю выполнить произвольный код
Modified: 2024-11-21
CVE-2017-12607
A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
- 101585
- 101585
- 1039732
- 1039732
- 1039734
- 1039734
- [debian-lts-announce] 20171220 [SECURITY] [DLA 1214-1] libreoffice security update
- [debian-lts-announce] 20171220 [SECURITY] [DLA 1214-1] libreoffice security update
- DSA-4022
- DSA-4022
- https://www.openoffice.org/security/cves/CVE-2017-12607.html
- https://www.openoffice.org/security/cves/CVE-2017-12607.html
Modified: 2024-11-21
CVE-2017-12608
A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
- 101585
- 101585
- 1039733
- 1039733
- 1039735
- 1039735
- [debian-lts-announce] 20171220 [SECURITY] [DLA 1214-1] libreoffice security update
- [debian-lts-announce] 20171220 [SECURITY] [DLA 1214-1] libreoffice security update
- DSA-4022
- DSA-4022
- https://www.openoffice.org/security/cves/CVE-2017-12608.html
- https://www.openoffice.org/security/cves/CVE-2017-12608.html
Modified: 2024-11-21
CVE-2017-3157
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.
Package mate-panel updated to version 1.6.1-alt1_4.M70C.2 for branch c7.1 in task 198697.
Closed bugs
После перезагрузки >1 панели на одном крае вызывает зависание mate-panel
Closed bugs
gost3411-2012: illegal hardware instruction