Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

MDKSA-2004:078 - Updated OpenOffice.org packages fix libneon vulnerability
From: Mandrake Linux Security Team <security () linux-mandrake com>
Date: 30 Jul 2004 05:35:59 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

                 Mandrakelinux Security Update Advisory
 _______________________________________________________________________

 Package name:           OpenOffice.org
 Advisory ID:            MDKSA-2004:078
 Date:                   July 29th, 2004

 Affected versions:      10.0
 ______________________________________________________________________

 Problem Description:

 The OpenOffice.org office suite contains an internal libneon library
 which allows it to connect to WebDAV servers.  This internal library
 is subject to the same vulnerabilities that were fixed in libneon
 recently.  These updated packages contain fixes to libneon to
 correct the several format string vulnerabilities in it, as well as
 a heap-based buffer overflow vulnerability.
 _______________________________________________________________________

 References:

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0179
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0398
 ______________________________________________________________________

 Updated Packages:
  
 Mandrakelinux 10.0:
 bdd8d8a8b6af463df910a7cde025b734  10.0/RPMS/OpenOffice.org-1.1.2-3.1.100mdk.i586.rpm
 51c8887de72b7ac39c85062b35d260e6  10.0/RPMS/OpenOffice.org-help-cs-1.1.2-3.1.100mdk.i586.rpm
 1be3655a3870f3a62608df7e864afe9e  10.0/RPMS/OpenOffice.org-help-de-1.1.2-3.1.100mdk.i586.rpm
 0e01d4df1bd94eb1937b4875af700056  10.0/RPMS/OpenOffice.org-help-en-1.1.2-3.1.100mdk.i586.rpm
 5f00be2536c9e8b3a836275b96ab753b  10.0/RPMS/OpenOffice.org-help-es-1.1.2-3.1.100mdk.i586.rpm
 e90125b24f99f099704d60018e339b8d  10.0/RPMS/OpenOffice.org-help-eu-1.1.2-3.1.100mdk.i586.rpm
 836aec6915d5ceecc20c3e034e19e336  10.0/RPMS/OpenOffice.org-help-fi-1.1.2-3.1.100mdk.i586.rpm
 20b5190e2b683783aab65d883468074e  10.0/RPMS/OpenOffice.org-help-fr-1.1.2-3.1.100mdk.i586.rpm
 4f7ef1c9b8251e96ce140463eaf28310  10.0/RPMS/OpenOffice.org-help-it-1.1.2-3.1.100mdk.i586.rpm
 7b5f6d5701e9f290d34ab7a4ada25fc1  10.0/RPMS/OpenOffice.org-help-ja-1.1.2-3.1.100mdk.i586.rpm
 d70298c769ce7dd2596d640a0c644cc9  10.0/RPMS/OpenOffice.org-help-ko-1.1.2-3.1.100mdk.i586.rpm
 ed06265ba967349b8a28420e5ff56ae8  10.0/RPMS/OpenOffice.org-help-nl-1.1.2-3.1.100mdk.i586.rpm
 b6c34d066a2addb975837dba16ffe9c7  10.0/RPMS/OpenOffice.org-help-ru-1.1.2-3.1.100mdk.i586.rpm
 c2dfd07ac968d38a0c6c59828f984850  10.0/RPMS/OpenOffice.org-help-sk-1.1.2-3.1.100mdk.i586.rpm
 6dbf67fa908bb9a90dfcc0aa7fe43c93  10.0/RPMS/OpenOffice.org-help-sv-1.1.2-3.1.100mdk.i586.rpm
 82de991deefe0ed144890b5e107c7c49  10.0/RPMS/OpenOffice.org-help-zh_CN-1.1.2-3.1.100mdk.i586.rpm
 bd471a407725562c67f7d6b993fe968c  10.0/RPMS/OpenOffice.org-help-zh_TW-1.1.2-3.1.100mdk.i586.rpm
 30cbafc38454793497dcace816814589  10.0/RPMS/OpenOffice.org-l10n-ar-1.1.2-3.1.100mdk.i586.rpm
 6c1f99a64b23c335d64effc58ace1a66  10.0/RPMS/OpenOffice.org-l10n-ca-1.1.2-3.1.100mdk.i586.rpm
 f7217fbce4f4fec19c66007bf7f1c8fa  10.0/RPMS/OpenOffice.org-l10n-cs-1.1.2-3.1.100mdk.i586.rpm
 da66f567a0c95d2551385706b6322511  10.0/RPMS/OpenOffice.org-l10n-da-1.1.2-3.1.100mdk.i586.rpm
 b25c4a8a5a04dba649dbe07cb74e437c  10.0/RPMS/OpenOffice.org-l10n-de-1.1.2-3.1.100mdk.i586.rpm
 c9de8265acf394e867f9d37dab8b8e4f  10.0/RPMS/OpenOffice.org-l10n-el-1.1.2-3.1.100mdk.i586.rpm
 26d3aec1657864a5af79e6cf42ec575c  10.0/RPMS/OpenOffice.org-l10n-en-1.1.2-3.1.100mdk.i586.rpm
 306840e68f1c5554b56fcb5a78d05662  10.0/RPMS/OpenOffice.org-l10n-es-1.1.2-3.1.100mdk.i586.rpm
 d497f588850259bb25ca2a8bfb46437b  10.0/RPMS/OpenOffice.org-l10n-et-1.1.2-3.1.100mdk.i586.rpm
 d093a78f33eb0e8e9ff6e10ae6f83b4f  10.0/RPMS/OpenOffice.org-l10n-eu-1.1.2-3.1.100mdk.i586.rpm
 092efa049db70abadaa2eb2780d29d13  10.0/RPMS/OpenOffice.org-l10n-fi-1.1.2-3.1.100mdk.i586.rpm
 e57acc32c3fe720cd5643bb9e1bee835  10.0/RPMS/OpenOffice.org-l10n-fr-1.1.2-3.1.100mdk.i586.rpm
 061f19572d6f588b2da57b32954f4960  10.0/RPMS/OpenOffice.org-l10n-it-1.1.2-3.1.100mdk.i586.rpm
 7db9ae970b0cd452cb052743172a9985  10.0/RPMS/OpenOffice.org-l10n-ja-1.1.2-3.1.100mdk.i586.rpm
 2c39709ba4dbbbdf592d3331c4f9b236  10.0/RPMS/OpenOffice.org-l10n-ko-1.1.2-3.1.100mdk.i586.rpm
 cecb56a830fa676b1e9e27ece5c39271  10.0/RPMS/OpenOffice.org-l10n-nl-1.1.2-3.1.100mdk.i586.rpm
 ead058a94cc6f3e86d58aac7235f6782  10.0/RPMS/OpenOffice.org-l10n-pl-1.1.2-3.1.100mdk.i586.rpm
 e290451530d4bf28cca0977cb0388d18  10.0/RPMS/OpenOffice.org-l10n-pt-1.1.2-3.1.100mdk.i586.rpm
 c2d58b04563e54556780f387953edc6e  10.0/RPMS/OpenOffice.org-l10n-pt_BR-1.1.2-3.1.100mdk.i586.rpm
 1dc89fbb3e79f4f3a41da6665ae9e19b  10.0/RPMS/OpenOffice.org-l10n-ru-1.1.2-3.1.100mdk.i586.rpm
 308e28b58b5ee72f84d8fc3c24f4c2dd  10.0/RPMS/OpenOffice.org-l10n-sk-1.1.2-3.1.100mdk.i586.rpm
 fe1419e7a3b301d28046e6d64d30f724  10.0/RPMS/OpenOffice.org-l10n-sv-1.1.2-3.1.100mdk.i586.rpm
 144a6daad887f537fbe1954d8f3de6b2  10.0/RPMS/OpenOffice.org-l10n-tr-1.1.2-3.1.100mdk.i586.rpm
 ba8e3f3119d89fa4f727f3e8d002cdec  10.0/RPMS/OpenOffice.org-l10n-zh_CN-1.1.2-3.1.100mdk.i586.rpm
 f43ae55a73eff7fadce5d5fc5ec6523b  10.0/RPMS/OpenOffice.org-l10n-zh_TW-1.1.2-3.1.100mdk.i586.rpm
 e495846523f861eefe787ae47dd79943  10.0/RPMS/OpenOffice.org-libs-1.1.2-3.1.100mdk.i586.rpm
 97ad227fa4a2b76e8cca7c73127c5b7a  10.0/SRPMS/OpenOffice.org-1.1.2-3.1.100mdk.src.rpm

 Mandrakelinux 10.0/AMD64:
 bdd8d8a8b6af463df910a7cde025b734  amd64/10.0/RPMS/OpenOffice.org-1.1.2-3.1.100mdk.i586.rpm
 51c8887de72b7ac39c85062b35d260e6  amd64/10.0/RPMS/OpenOffice.org-help-cs-1.1.2-3.1.100mdk.i586.rpm
 1be3655a3870f3a62608df7e864afe9e  amd64/10.0/RPMS/OpenOffice.org-help-de-1.1.2-3.1.100mdk.i586.rpm
 0e01d4df1bd94eb1937b4875af700056  amd64/10.0/RPMS/OpenOffice.org-help-en-1.1.2-3.1.100mdk.i586.rpm
 5f00be2536c9e8b3a836275b96ab753b  amd64/10.0/RPMS/OpenOffice.org-help-es-1.1.2-3.1.100mdk.i586.rpm
 e90125b24f99f099704d60018e339b8d  amd64/10.0/RPMS/OpenOffice.org-help-eu-1.1.2-3.1.100mdk.i586.rpm
 836aec6915d5ceecc20c3e034e19e336  amd64/10.0/RPMS/OpenOffice.org-help-fi-1.1.2-3.1.100mdk.i586.rpm
 20b5190e2b683783aab65d883468074e  amd64/10.0/RPMS/OpenOffice.org-help-fr-1.1.2-3.1.100mdk.i586.rpm
 4f7ef1c9b8251e96ce140463eaf28310  amd64/10.0/RPMS/OpenOffice.org-help-it-1.1.2-3.1.100mdk.i586.rpm
 7b5f6d5701e9f290d34ab7a4ada25fc1  amd64/10.0/RPMS/OpenOffice.org-help-ja-1.1.2-3.1.100mdk.i586.rpm
 d70298c769ce7dd2596d640a0c644cc9  amd64/10.0/RPMS/OpenOffice.org-help-ko-1.1.2-3.1.100mdk.i586.rpm
 ed06265ba967349b8a28420e5ff56ae8  amd64/10.0/RPMS/OpenOffice.org-help-nl-1.1.2-3.1.100mdk.i586.rpm
 b6c34d066a2addb975837dba16ffe9c7  amd64/10.0/RPMS/OpenOffice.org-help-ru-1.1.2-3.1.100mdk.i586.rpm
 c2dfd07ac968d38a0c6c59828f984850  amd64/10.0/RPMS/OpenOffice.org-help-sk-1.1.2-3.1.100mdk.i586.rpm
 6dbf67fa908bb9a90dfcc0aa7fe43c93  amd64/10.0/RPMS/OpenOffice.org-help-sv-1.1.2-3.1.100mdk.i586.rpm
 82de991deefe0ed144890b5e107c7c49  amd64/10.0/RPMS/OpenOffice.org-help-zh_CN-1.1.2-3.1.100mdk.i586.rpm
 bd471a407725562c67f7d6b993fe968c  amd64/10.0/RPMS/OpenOffice.org-help-zh_TW-1.1.2-3.1.100mdk.i586.rpm
 30cbafc38454793497dcace816814589  amd64/10.0/RPMS/OpenOffice.org-l10n-ar-1.1.2-3.1.100mdk.i586.rpm
 6c1f99a64b23c335d64effc58ace1a66  amd64/10.0/RPMS/OpenOffice.org-l10n-ca-1.1.2-3.1.100mdk.i586.rpm
 f7217fbce4f4fec19c66007bf7f1c8fa  amd64/10.0/RPMS/OpenOffice.org-l10n-cs-1.1.2-3.1.100mdk.i586.rpm
 da66f567a0c95d2551385706b6322511  amd64/10.0/RPMS/OpenOffice.org-l10n-da-1.1.2-3.1.100mdk.i586.rpm
 b25c4a8a5a04dba649dbe07cb74e437c  amd64/10.0/RPMS/OpenOffice.org-l10n-de-1.1.2-3.1.100mdk.i586.rpm
 c9de8265acf394e867f9d37dab8b8e4f  amd64/10.0/RPMS/OpenOffice.org-l10n-el-1.1.2-3.1.100mdk.i586.rpm
 26d3aec1657864a5af79e6cf42ec575c  amd64/10.0/RPMS/OpenOffice.org-l10n-en-1.1.2-3.1.100mdk.i586.rpm
 306840e68f1c5554b56fcb5a78d05662  amd64/10.0/RPMS/OpenOffice.org-l10n-es-1.1.2-3.1.100mdk.i586.rpm
 d497f588850259bb25ca2a8bfb46437b  amd64/10.0/RPMS/OpenOffice.org-l10n-et-1.1.2-3.1.100mdk.i586.rpm
 d093a78f33eb0e8e9ff6e10ae6f83b4f  amd64/10.0/RPMS/OpenOffice.org-l10n-eu-1.1.2-3.1.100mdk.i586.rpm
 092efa049db70abadaa2eb2780d29d13  amd64/10.0/RPMS/OpenOffice.org-l10n-fi-1.1.2-3.1.100mdk.i586.rpm
 e57acc32c3fe720cd5643bb9e1bee835  amd64/10.0/RPMS/OpenOffice.org-l10n-fr-1.1.2-3.1.100mdk.i586.rpm
 061f19572d6f588b2da57b32954f4960  amd64/10.0/RPMS/OpenOffice.org-l10n-it-1.1.2-3.1.100mdk.i586.rpm
 7db9ae970b0cd452cb052743172a9985  amd64/10.0/RPMS/OpenOffice.org-l10n-ja-1.1.2-3.1.100mdk.i586.rpm
 2c39709ba4dbbbdf592d3331c4f9b236  amd64/10.0/RPMS/OpenOffice.org-l10n-ko-1.1.2-3.1.100mdk.i586.rpm
 cecb56a830fa676b1e9e27ece5c39271  amd64/10.0/RPMS/OpenOffice.org-l10n-nl-1.1.2-3.1.100mdk.i586.rpm
 ead058a94cc6f3e86d58aac7235f6782  amd64/10.0/RPMS/OpenOffice.org-l10n-pl-1.1.2-3.1.100mdk.i586.rpm
 e290451530d4bf28cca0977cb0388d18  amd64/10.0/RPMS/OpenOffice.org-l10n-pt-1.1.2-3.1.100mdk.i586.rpm
 c2d58b04563e54556780f387953edc6e  amd64/10.0/RPMS/OpenOffice.org-l10n-pt_BR-1.1.2-3.1.100mdk.i586.rpm
 1dc89fbb3e79f4f3a41da6665ae9e19b  amd64/10.0/RPMS/OpenOffice.org-l10n-ru-1.1.2-3.1.100mdk.i586.rpm
 308e28b58b5ee72f84d8fc3c24f4c2dd  amd64/10.0/RPMS/OpenOffice.org-l10n-sk-1.1.2-3.1.100mdk.i586.rpm
 fe1419e7a3b301d28046e6d64d30f724  amd64/10.0/RPMS/OpenOffice.org-l10n-sv-1.1.2-3.1.100mdk.i586.rpm
 144a6daad887f537fbe1954d8f3de6b2  amd64/10.0/RPMS/OpenOffice.org-l10n-tr-1.1.2-3.1.100mdk.i586.rpm
 ba8e3f3119d89fa4f727f3e8d002cdec  amd64/10.0/RPMS/OpenOffice.org-l10n-zh_CN-1.1.2-3.1.100mdk.i586.rpm
 f43ae55a73eff7fadce5d5fc5ec6523b  amd64/10.0/RPMS/OpenOffice.org-l10n-zh_TW-1.1.2-3.1.100mdk.i586.rpm
 e495846523f861eefe787ae47dd79943  amd64/10.0/RPMS/OpenOffice.org-libs-1.1.2-3.1.100mdk.i586.rpm
 97ad227fa4a2b76e8cca7c73127c5b7a  amd64/10.0/SRPMS/OpenOffice.org-1.1.2-3.1.100mdk.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrakeUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandrakesoft for security.  You can obtain
 the GPG public key of the Mandrakelinux Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandrakelinux at:

  http://www.mandrakesoft.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_linux-mandrake.com

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Linux Mandrake Security Team
  <security linux-mandrake.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQFBCd4/mqjQ0CJFipgRApq6AJ0XrRU2e5s+pbpQ89g6MUpz5xxgOwCgppkV
BOFa4EeuYkLdIja3Dd81kPs=
=4dco
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
  • MDKSA-2004:078 - Updated OpenOffice.org packages fix libneon vulnerability Mandrake Linux Security Team (Jul 30)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault