Bug 107351 - app-office/abiword 2.2.10 released (fixes CAN-2005-2964)
Bug#: 107351 Product:  Gentoo Security Version: unspecified Platform: All
OS/Version: Linux Status: RESOLVED Severity: normal Priority: P2
Resolution: FIXED Assigned To: security@gentoo.org Reported By: mguzman@sfu.ca
Component: Vulnerabilities
URL: 
Summary: app-office/abiword 2.2.10 released (fixes CAN-2005-2964)
Keywords:  
Status Whiteboard: B2 [glsa] jaervosz
Opened: 2005-09-26 19:27 0000
Description:   Opened: 2005-09-26 19:27 0000
Abiword 2.2.10 is released, which fixes a security vulnerability:

"Fix security bug: AbiWord RTF import stack-based buffer overflow /
CESA-2005-004 - rev 1"

AbiSource advises all users to upgrade as soon as possible

------- Comment #1 From Sune Kloppenborg Jeppesen 2005-09-27 00:13:55 0000 -------
*** Bug 106896 has been marked as a duplicate of this bug. ***

------- Comment #2 From Sune Kloppenborg Jeppesen 2005-09-27 00:15:24 0000 -------
gnome please advise and bump as necessary. 

------- Comment #3 From Thierry Carrez (RETIRED) 2005-09-28 04:15:55 0000 -------
This is CAN-2005-2964

------- Comment #4 From Mike Gardiner (RETIRED) 2005-09-28 08:53:27 0000 -------
Added to ~arch.

------- Comment #5 From Thierry Carrez (RETIRED) 2005-09-28 09:01:58 0000 -------
Archs please test and mark stable :
Target KEYWORDS="alpha amd64 hppa ia64 ppc ppc64 sparc x86"

------- Comment #6 From Ferris McCormick 2005-09-28 10:02:55 0000 -------
Sparc done.  Builds and appears to run as expected.

------- Comment #7 From Ferris McCormick 2005-09-28 10:03:23 0000 -------
(Forgot to remove CC sparc)

------- Comment #8 From Ferris McCormick 2005-09-28 10:04:08 0000 -------
(In reply to comment #7)
> (Forgot to remove CC sparc)
This time for sure.  Nuts.

------- Comment #9 From Michael Hanselmann (hansmi) (RETIRED) 2005-09-28 11:08:04 0000 -------
Stable on ppc and hppa

------- Comment #10 From Luis Medinas (RETIRED) 2005-09-28 12:20:20 0000 -------
Amd64

------- Comment #11 From Luis Medinas (RETIRED) 2005-09-28 12:21:50 0000 -------
amd64 done

------- Comment #12 From Markus Rothe 2005-09-28 12:27:03 0000 -------
stable on ppc64

------- Comment #13 From Paul Varner 2005-09-28 16:23:13 0000 -------
Stable on x86

------- Comment #14 From Fernando J. Pereda (RETIRED) 2005-09-29 09:22:50 0000 -------
Stable on alpha

Cheers,
Ferdy

------- Comment #15 From Thierry Carrez (RETIRED) 2005-09-30 03:06:22 0000 -------
GLSA 200509-20
ia64 should mark stable to benefit from GLSA