Pardus alert 2010-67 (openoffice)

From:
    	     
 
Eren Turkay <eren@pardus.org.tr> 
To:
    	     
 
pardus-security@pardus.org.tr 
Subject:
    	     
 
[Pardus-security] [PLSA 2010-67] OpenOffice: Multiple
	Vulnerabilities 
Date:
    	     
 
Fri,  4 Jun 2010 11:06:05 +0300 (EEST)
Message-ID:
    	     
 
<20100604080605.10AA8A7AB5D@lider.pardus.org.tr>

------------------------------------------------------------------------
Pardus Linux Security Advisory 2010-67            security@pardus.org.tr
------------------------------------------------------------------------
      Date: 2010-06-04
  Severity: 3
      Type: Local
------------------------------------------------------------------------

Summary
=======

Multiple vulnerabilities have been fixed in OpenOffice. 


Description
===========

New OpenOffice update fixes following vulnerabilities. 



CVE-2006-4339: Potential vulnerability from 3rd party libxml2 libraries 

CVE-2009-0217:  Potential vulnerability  from  3rd   party   libxmlsec  
libraries 

CVE-2009-2493: OpenOffice.org 3 for Windows bundles a vulnerable version
of MSVC Runtime 

CVE-2009-2949: Potential vulnerability related to XPM file processing 

CVE-2009-2950: Potential vulnerability related to GIF file processing 

CVE-2009-3301/2: Potential vulnerability related  to  MS-Word  document 
processing 



See OpenOffice advisory in reference section for detailed information. 


Affected packages:

  Pardus 2009:
    openoffice, all before 3.2.1.3-81-15


Resolution
==========

There are update(s) for openoffice. You can  update  them  via  Package 
Manager or with a single command from console: 

    pisi up openoffice

References
==========

  * http://bugs.pardus.org.tr/show_bug.cgi?id=12298
  * http://www.openoffice.org/security/bulletin.html

------------------------------------------------------------------------

_______________________________________________
Pardus-security mailing list
Pardus-security@pardus.org.tr
http://liste.pardus.org.tr/mailman/listinfo/pardus-security