Summary: | <app-office/openoffice-bin-4.1.7 user-assisted code execution (CVE-2019-9853) | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Sergey Torokhov <torokhov-s-a> |
Component: | Current packages | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | chithanh |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | B2 [glsa cve] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 677248 | ||
Bug Blocks: |
Description
Sergey Torokhov
2019-09-21 21:55:42 UTC
Fixed in Apache OpenOffice 4.1.7 CVE-2019-9853 [1]: Insufficient URL decoding flaw in categorizing macro location. [1] https://www.openoffice.org/security/cves/CVE-2019-9853.html The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=625ae773f5aca1a8a4ec3060712400bae0212f74 commit 625ae773f5aca1a8a4ec3060712400bae0212f74 Author: Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> AuthorDate: 2019-10-18 11:55:16 +0000 Commit: Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> CommitDate: 2019-10-18 11:55:16 +0000 app-office/openoffice-bin: bump to 4.1.7, address security vulnerability Bug: https://bugs.gentoo.org/show_bug.cgi?id=677248 Bug: https://bugs.gentoo.org/show_bug.cgi?id=695358 Signed-off-by: Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.16 app-office/openoffice-bin/Manifest | 80 +++++++++ .../openoffice-bin/openoffice-bin-4.1.7.ebuild | 193 +++++++++++++++++++++ 2 files changed, 273 insertions(+) stabilization will be handled in bug 677248. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2e2dd43b77d92aefb0df825c6b500468cf7bdcec commit 2e2dd43b77d92aefb0df825c6b500468cf7bdcec Author: Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> AuthorDate: 2019-10-24 05:53:22 +0000 Commit: Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> CommitDate: 2019-10-24 05:53:22 +0000 app-office/openoffice-bin: remove vulnerable version Bug: https://bugs.gentoo.org/show_bug.cgi?id=677248 Bug: https://bugs.gentoo.org/show_bug.cgi?id=695358 Signed-off-by: Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.16 Signed-off-by: Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> app-office/openoffice-bin/Manifest | 80 --------- .../openoffice-bin/openoffice-bin-4.1.6.ebuild | 183 --------------------- 2 files changed, 263 deletions(-) Arches and Maintainer(s), Thank you for your work. |