Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug
Bug#: 201799
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo Security <security@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Robert Buchholz <rbu@gentoo.org>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:
Flags: Requestee:
 
 
  ()

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 201799 depends on: Show dependency tree
Bug 201799 blocks: 113954

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2007-12-09 20:46 0000 
+++ This bug was initially created as a clone of Bug #200771 +++

Thomas Biege:
  A security vulnerability in HSQLDB, the default database engine shipped
  with OpenOffice.org, may allow a remote unprivileged user who provides a
  StarOffice database document that is opened by a local user to execute
  arbitrary Java code on the system with the privileges of the user
  running OpenOffice.org.

This probably also affects our independent ebuild, too. See bug 111960 and java
overlay for new ebuilds.

------- Comment #1 From Vlastimil Babka (Caster) 2007-12-19 21:59:56 0000 ------- 
*** Bug 111960 has been marked as a duplicate of this bug. ***

------- Comment #2 From Vlastimil Babka (Caster) 2007-12-19 22:01:56 0000 ------- 
Arches, please stabilize the just added dev-db/hsqldb-1.8.0.9

------- Comment #3 From Markus Meier 2007-12-20 13:53:15 0000 ------- 
x86 stable

------- Comment #4 From Pierre-Yves Rofes 2007-12-20 15:25:06 0000 ------- 
Enhancing prioriy, this one should be stabled ASAP so that we can send the
OpenOffice draft. Thanks.

------- Comment #5 From Tobias Scherbaum 2007-12-21 12:51:56 0000 ------- 
ppc stable

------- Comment #6 From Peter Weller 2007-12-26 08:36:41 0000 ------- 
amd64 stable

------- Comment #7 From Tom Gall 2007-12-30 18:00:10 0000 ------- 
stable on ppc64

------- Comment #8 From Pierre-Yves Rofes 2007-12-30 18:31:27 0000 ------- 
GLSA 200712-25, thanks everyone.
Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug