Mageia alert MGASA-2014-0505 (libreoffice)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2014-0505: Updated libreoffice packages fix security vulnerability 
Date:
    	     
 
Wed, 3 Dec 2014 20:27:55 +0100
Message-ID:
    	     
 
<20141203192755.AFFC943DC4@valstar.mageia.org>
MGASA-2014-0505 - Updated libreoffice packages fix security vulnerability

Publication date: 03 Dec 2014
URL: http://advisories.mageia.org/MGASA-2014-0505.html

Type: security
Affected Mageia releases: 4
CVE: CVE-2014-3693

Description:
"Document as E-mail" vulnerability (bnc#900218).

It was discovered that LibreOffice incorrectly handled the Impress remote
control port. An attacker could possibly use this issue to cause Impress to
crash, resulting in a denial of service, or possibly execute arbitrary
code (CVE-2014-3693).

References:
- https://bugs.mageia.org/show_bug.cgi?id=14475

- http://www.libreoffice.org/about-us/security/advisories/c...
- http://www.ubuntu.com/usn/usn-2398-1/

- http://lists.opensuse.org/opensuse-updates/2014-11/msg000...
- https://bugzilla.suse.com/show_bug.cgi?id=900218

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3693


SRPMS:
- 4/core/libreoffice-4.1.6.2-2.mga4