-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDKSA-2007:064 http://www.mandriva.com/security/ _______________________________________________________________________ Package : openoffice.org Date : March 16, 2007 Affected: 2007.0 _______________________________________________________________________ Problem Description: iDefense reported several overflow bugs in libwpd. An attacker could create a carefully crafted Word Perfect file that could cause an application linked with libwpd, such as OpenOffice, to crash or possibly execute arbitrary code if the file was opened by a victim. OpenOffice.org-2.X contains an embedded copy of libpwd, and as such is susceptible to the same issues. Updated packages have been rebuilt using the system libwpd to address this issue. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0002 _______________________________________________________________________ Updated Packages: Mandriva Linux 2007.0: 5d5eb8205f8290efeebf6df5d54dfbce 2007.0/i586/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm 1d317012e41f3fd7f9454aaa86f50bad 2007.0/i586/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm 637be68b0e1e7c88bdb718069e777df3 2007.0/i586/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm 5470a8b2bc65eee8fa178697e2c347f4 2007.0/i586/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm a4768177c5a7dab2943aa9a42c232f92 2007.0/i586/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm ef38eae4f6fa6f3e987a272df5b313a1 2007.0/i586/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm e9411982da87c406d806380e4c931edc 2007.0/i586/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm 838dc6d746772da1853a210bae2c7427 2007.0/i586/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm 4695517a1ec3cbb3c644602a724c6be8 2007.0/i586/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm 03506b1e9bc6dd6294d7fbc185c693c6 2007.0/i586/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm 7c5b94bbf29cf5806736eee2acaf456b 2007.0/i586/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm 020c7c43dd7c607e045569b29b2afa05 2007.0/i586/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm fa533d90295a38fb6f76cc3e172b3c39 2007.0/i586/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm d43e90e6fbbddff82139d0fab8fb05b1 2007.0/i586/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm 1a6104101294335dfaaac63ce9b1bb2e 2007.0/i586/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm 16dc52cef9605fa437c028c3ade65370 2007.0/i586/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm 88f07f27199dae331fa409d55e7657b0 2007.0/i586/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm c374882cdc260f20ffe9da683d28eaa4 2007.0/i586/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm c77ec8e96f9ebac6b362f9ae7a85243b 2007.0/i586/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm 6ffd6cb99f7820a3b3159339b4e6f091 2007.0/i586/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm da51c02f184b8d042cdd539b5ab1d9df 2007.0/i586/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm b9027afa8d5065f6268e3a2f2eafef99 2007.0/i586/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm af00e262f720ded23a4e8aa559950e21 2007.0/i586/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm 21acc2f8e89e359cc93095e4867ab30a 2007.0/i586/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm 5a9d8f4b0292102164c8d6c20f7ec6d7 2007.0/i586/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm 8fe11ce71651936a914f65448d370022 2007.0/i586/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm 37256f201cb2c811b0a4aa6b5d3d6dfb 2007.0/i586/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm 9d90cd1efc4c1bef927073686099edfe 2007.0/i586/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm 5b3b8772e360b02c80e82dce0c20665c 2007.0/i586/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm 8e6116b00d2c40de43ae59e5d2739d03 2007.0/i586/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm 1ac887a0fd814313acbe7d11124398b3 2007.0/i586/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm 4dc52063d87fa45fe90c28281075ea91 2007.0/i586/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm 63d4e9b0650b4d2915dee5e5497fb0d4 2007.0/i586/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm 00201452bb79c6448e801ad4d6944e49 2007.0/i586/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm c23b70692665785f78cbdaf8104e5287 2007.0/i586/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm 22dc3dd41bfa522a0526d05fea100a2b 2007.0/i586/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm ddc28c00d4a16e0a1a66519dec3d280f 2007.0/i586/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm 799fda35029e1106991f6dca36ea132b 2007.0/i586/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm 559f687220b5b1ecd8c68e424a9d2705 2007.0/i586/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm e116d69da439175f0b40420c55b15f9b 2007.0/i586/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm f1f5cfcd5cc7b3387019f83cb4934076 2007.0/i586/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm 90b10a1602412c8c2483d3123fe4327e 2007.0/i586/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm 8047d7daa7e3264df88f6bbba746313a 2007.0/i586/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm f699d3d8c1bbf0fbe2ff8aec904229a4 2007.0/i586/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm e4dee750047a48aa5a095ac2a382d627 2007.0/i586/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm 17a628740c6d8c4f9850c9a25ebc63b1 2007.0/i586/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm 300e6679df04dcc693e0a17cea9fc927 2007.0/i586/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm 9f1798def41c96b7643049aa2aaf4ce4 2007.0/i586/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm 3f4b35994146086e0e8f2c50a511fd9b 2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm Mandriva Linux 2007.0/X86_64: 5d5eb8205f8290efeebf6df5d54dfbce 2007.0/x86_64/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm 1d317012e41f3fd7f9454aaa86f50bad 2007.0/x86_64/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm 637be68b0e1e7c88bdb718069e777df3 2007.0/x86_64/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm 5470a8b2bc65eee8fa178697e2c347f4 2007.0/x86_64/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm a4768177c5a7dab2943aa9a42c232f92 2007.0/x86_64/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm ef38eae4f6fa6f3e987a272df5b313a1 2007.0/x86_64/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm e9411982da87c406d806380e4c931edc 2007.0/x86_64/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm 838dc6d746772da1853a210bae2c7427 2007.0/x86_64/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm 4695517a1ec3cbb3c644602a724c6be8 2007.0/x86_64/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm 03506b1e9bc6dd6294d7fbc185c693c6 2007.0/x86_64/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm 7c5b94bbf29cf5806736eee2acaf456b 2007.0/x86_64/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm 020c7c43dd7c607e045569b29b2afa05 2007.0/x86_64/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm fa533d90295a38fb6f76cc3e172b3c39 2007.0/x86_64/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm d43e90e6fbbddff82139d0fab8fb05b1 2007.0/x86_64/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm 1a6104101294335dfaaac63ce9b1bb2e 2007.0/x86_64/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm 16dc52cef9605fa437c028c3ade65370 2007.0/x86_64/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm 88f07f27199dae331fa409d55e7657b0 2007.0/x86_64/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm c374882cdc260f20ffe9da683d28eaa4 2007.0/x86_64/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm c77ec8e96f9ebac6b362f9ae7a85243b 2007.0/x86_64/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm 6ffd6cb99f7820a3b3159339b4e6f091 2007.0/x86_64/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm da51c02f184b8d042cdd539b5ab1d9df 2007.0/x86_64/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm b9027afa8d5065f6268e3a2f2eafef99 2007.0/x86_64/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm af00e262f720ded23a4e8aa559950e21 2007.0/x86_64/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm 21acc2f8e89e359cc93095e4867ab30a 2007.0/x86_64/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm 5a9d8f4b0292102164c8d6c20f7ec6d7 2007.0/x86_64/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm 8fe11ce71651936a914f65448d370022 2007.0/x86_64/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm 37256f201cb2c811b0a4aa6b5d3d6dfb 2007.0/x86_64/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm 9d90cd1efc4c1bef927073686099edfe 2007.0/x86_64/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm 5b3b8772e360b02c80e82dce0c20665c 2007.0/x86_64/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm 8e6116b00d2c40de43ae59e5d2739d03 2007.0/x86_64/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm 1ac887a0fd814313acbe7d11124398b3 2007.0/x86_64/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm 4dc52063d87fa45fe90c28281075ea91 2007.0/x86_64/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm 63d4e9b0650b4d2915dee5e5497fb0d4 2007.0/x86_64/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm 00201452bb79c6448e801ad4d6944e49 2007.0/x86_64/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm c23b70692665785f78cbdaf8104e5287 2007.0/x86_64/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm 22dc3dd41bfa522a0526d05fea100a2b 2007.0/x86_64/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm ddc28c00d4a16e0a1a66519dec3d280f 2007.0/x86_64/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm 799fda35029e1106991f6dca36ea132b 2007.0/x86_64/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm 559f687220b5b1ecd8c68e424a9d2705 2007.0/x86_64/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm e116d69da439175f0b40420c55b15f9b 2007.0/x86_64/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm f1f5cfcd5cc7b3387019f83cb4934076 2007.0/x86_64/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm 90b10a1602412c8c2483d3123fe4327e 2007.0/x86_64/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm 8047d7daa7e3264df88f6bbba746313a 2007.0/x86_64/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm f699d3d8c1bbf0fbe2ff8aec904229a4 2007.0/x86_64/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm e4dee750047a48aa5a095ac2a382d627 2007.0/x86_64/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm 17a628740c6d8c4f9850c9a25ebc63b1 2007.0/x86_64/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm 300e6679df04dcc693e0a17cea9fc927 2007.0/x86_64/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm 9f1798def41c96b7643049aa2aaf4ce4 2007.0/x86_64/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm 3f4b35994146086e0e8f2c50a511fd9b 2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFF+tItmqjQ0CJFipgRAp7uAJsFmk+UvDkB+C+pXVOH806cWg5nJACg3MBQ kAT8mL+RQMCIfZlI9XhtKpE= =tSsR -----END PGP SIGNATURE-----
