sdkp2-OpenOffice_org

Security update for OpenOffice_org

Security update for OpenOffice_org

This update of OpenOffice.org fixes potential buffer overflow in EMF parser code (enhwmf.cxx, emfplus.cxx). Additionally Secunia reported an integer underflow (CVE-2009-0200) and a buffer overflow (CVE-2009-0201) that could be triggered while parsing Word documents. Also provides the maintenance update to OpenOffice.org-3.1.1. Details about all upstream changes can be found at http://development.openoffice.org/releases/3.1.1.html The Novell changes are: ------------------------------------------------------------ ------- Wed Aug 26 13:21:04 CEST 2009 - pmladek@suse.cz - maintenance update for SLED10 (MaintenanceTracker-25396) - updated to the milestone ooo310-m19 - updated ooo-build to version 3.1.1.1 (3.1.1-rc1 == final): * Common bits: * prevent multiple window resize when maximised (i#104469) * save non-English file names with KDE4 dialog (deb#536664) * keep locks after saving documents via WebDAV (bnc#464568) * KDE detection (bnc#529208) * Base bits: * UPDATE db record failure (i#104088) * Calc bits: * multi-range copy-n-paste stuff fix * Impress bits: * wrong text bounds in Impress (bnc#523603) * OOXML bits: * data sequence creation in PPTX import (bnc#500175) * l10n bits: * French translation update * Finnish translation update * Hungarian translation update - updated extra localization sources: nb nn sl ------------------------------------------------------------ ------- Tue Aug 18 19:45:45 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m18 - updated ooo-build to version 3.1.0.99.3 (3.1.1-beta3): * speed up:: * cache fontconfig's pre-match substitution results (n#529532) * Common bits: * saving pictures with preview size (bnc#531221, i#104146) * menubar theme support (bnc#526004, bnc#527356, i#103999) * Base bits: * Table Wizard categories (i#102019) * Calc bits: * Unicode string in document URI in Edit Links dialog (i#104166) * several regressions in external references (i#103918) * OOXML bits: * pivot data PPTX export (bnc#505917) * l10n bits: * Hungarian translation of About dialog * ooo-build.pot update file ------------------------------------------------------------ ------- Tue Aug 4 22:12:51 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m17 - updated ooo-build to version 3.1.0.99.2 (3.1.1-beta2): * feature: * animated border for copied range * better modified status icon in statusbar (i#103862) * surface shades, custom shapes gradient color (bnc#485637) * common bits: * squeezed check boxes in sub menus (bnc#523852) * show templates installed as extension (bnc#512146) * single-point polygons in fontwork crasher (bnc#526342) * Calc fixes: * sorting when the first row was not 0 (bnc#524215) * string cell format during text file import (bnc#523414) * non-default max column/row size for range names (bnc#522833) * Draw: * autoshape geometry on model change * avoids messing with fontwork glyph polygons (bnc#485637) * VBA bits: * broken Styles.Add * toolbar XLS import * broken toolbar import * typename issue (bnc#525649) * better heuristic for deleted ctrls * support for tooltips and separators * HTMLSelect activex objects XLS import (bnc#523191) * Financial functions (bnc#525633, bnc#525635, bnc#525642, bnc#525647) * OOXML bits: * pivot table XLSX export (bnc#505917) * animations PPTX export (bnc#497570) * blip luminance PPTX export (bnc#497570) * better header/footer DOCX import (bnc#519201) * l10n bits: * Russian translation update * Hungarian translations update * translations update by openSUSE community * Spanish translation of the autofilter menu (i#103840) - updated extra translation sources: bg el mk nb nn sk sl ------------------------------------------------------------ ------- Thu Jul 23 21:13:52 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m16 - updated ooo-build to version 3.1.0.99.1 (3.1.1-beta1): * features: * new unopkg add --link option * new -bulk option to convert documents on the command line * common bug fixes: * updated Graphite font technology stuff * avoid sticky state of fullscreen window (i#103145) * Calc fixes: * XLS import crasher (bnc#520556) * scrolling with large selection (n#518426) * determine in-line array size more reliably * more on row and flags manipulations (n#516406) * hyperlink strings XLS import (bnc#521447, i#103520) * COUNTIF with external references (bnc#521624, i#102750) * absolute path generation for external doc URI (i#103317) * clink on hyperlinks behavior in Calc (i#103587, n#523005) * document is modified when switching external link (i#103598) * Impress fixes: * no impress layout pane in master page mode (i#73289) * Writer fixes: * RTF export crash (bnc#462657) * lost indentation during DOC import (bnc#518731) * VBA bits: * ComboBox binding data import in userform * create toolbar/menubar in document scope * variable as VBA constant (bnc#521820) * set Enabled/Disabled to menu item (i#103486) * automation objects, automation bridge wrapper (bnc#507501) * WorkBook.PrecisionAsDisplayed, and CommandbarControl.Enabled, support workbook auto_open event, builtin toolbar (bnc#520228) * OOXML bits: * shape map crash * action buttons PPTX export (bnc#497570) * footnote in a table DOCX import crasher (bnc#518741) * l10n bits: * ooo-build.pot update * Serbian translation update ------------------------------------------------------------ ------- Mon Jun 29 19:22:47 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m14 - updated ooo-build to version 3.1.0.98.2 (3.1.1-alpha2): * features: * Oxygen icons theme for KDE4 * OOXML export enabled by default * general bug fixes: * more on the KDE support * better KDE3/KDE4 detection * selection engine's auto repeat interval (bnc#514395) * early startup race in generic vcl plug (i#103148) * sticky fullscreen window state for xinerama (bnc#480324) * Calc fixes: * slow down scrolling interval (n#514395) * unsupported encryption XLS import crasher (i#102906) * non-scrolling formula reference selection (bnc#512060) * more optimization for increased row limit (bnc#514156) * chart update problems with Excel documents (bnc#491898) * non-initiated reference mode in selection range (bnc#512060) * selection area before setting autofilter arrows (bnc#514164) * strip time elements only when fields contains dates (i#94695) * autofill marker position when expanding selection (bnc#514151) * Impress fixes: * lots fixes of numbering (i#101269) * isotropic fit-to-size scale (i#94086) * Writer: * table shifted left margin DOC export (i#100473) * OOXML bits: * blank paragraphs DOCX import * reduce the number of dummy page styles DOCX import * collapsed paragraphs at the end of the sections DOCX import * VBA bits: * load problem for non MSO documents * maximum range selection and scrolling * Window.Zoom should affect only current sheet * fallback to the calling document as active doc * property value "BulletId" could be greater than 255 (i#103021) - added Oxygen icon theme source tarball, snapshot 2009-06-17 - updated prebuilt cli dlls for ooo310-m13 ------------------------------------------------------------ ------- Mon Jun 15 21:21:15 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m13 - updated ooo-build to version 3.1.0.98.1 (3.1.1-alpha1): * features: * support ooo310-m13 * KDE4 vcl plugin and file picker * initial support for SmartArt import * autoplay .pps/.ppsx files (bnc#485645) * custom sort in datapilot tables (bnc#443361) * DataPilot's custom names ODF import/export (bnc#479062) * option to turn off auto number recognition in HTML import * sheet options and password ODS import/export (i#60305,i#71468) * speed up: * progress bar during formula calculation (i#102566) * cell range selection & cursor placement (bnc#511006) * column-wise sorting in Calc (bnc#504827) * more on faster sheet switch (bnc#495140) * bug fixes: * USHORT vs. SCROW or SCCOL (bnc#509768) * cursor after drag-n-dropped (bnc#508872) * slow page style changing in Calc (n#503482) * multi-range copy-n-paste crasher (bnc#509209) * rows filtered via autofilter crasher (bnc#495140) * merged cell attribute flag corruption (bnc#508867) * shifted translations of OOo Calc options (bnc#507643) * replace 'Manual Break' with 'Page Break' in Calc's menu * Launch language chooser for all HTML import (bnc#506095) * show cursor in all panes in split-view mode (bnc#433834) * do not move the cursor when making a selection (bnc#502717) * custom language and number options for CSV import (bnc#510168) * surface shades, custom shapes gradient color (bnc#485637) * misplaced rotated groups in PPT import (bnc#485637) * creating tables in Impress (bnc#483951, i#100275) * fit to frame text feature crasher (bnc#508621) * MM_TEXT map mode support in WMF (bnc#417818) * relative size calculation in SVG import * crash on quit after DOC import (bnc#505704) * fix SDK to actually find the libraries (i#101883) * default button in enter password dialog (i#102230) * HTML OLE controls as OCX controls DOC import (bnc#485609) * duplicit accept/reject menu entries (bnc#249775,i#6191) * OOXML bits: * prefer odf-converter over native OOXML filters (bnc#502173) * set flavour to EXC_OUTPUT_XML_2007 in XLSX export (bnc#502090) * XML_useAutoFormatting XLSX export (bnc#497560) * styles XLSX import/export (bnc#497563) * row limit in XLSX export (bnc#504623) * autoFilter XLSX export (bnc#497559) * rotated text PPTX export(bnc#498737) * transitions PPTX import (bnc#480243) * various PPTX import issues (bnc#377727) * text hyperlinks PPTX export (bnc#499124) * shapes visibility PPTX import (bnc#480243) * paragraph line spacing PPTX export (bnc#498737) * shape fill properties PPTX import (i#101563) * placeholder text style PPTX import (bnc#479834) * subtitle placeholder PPTX import (bnc#480243) * text body properties priority in PPTX import (bnc#403402) * un-connected connector shapes PPTX export (bnc#499129) * hidden slide PPTX import and export (bnc#480229, n#499131) * header, footer, datetime, pagenumber PPTX import (bnc#480243) * page break after tables in DOCX import (bnc#478945, i#101661) * footnote character properties DOCX import (bnc#478972) * extra paragraph in DOCX import (bnc#478977) * better outline DOCX import (bnc#478583) * VBA bits: * toolbars import * more on the Word support * macro execution via VBA API * crasher caused by resize event * rework use of getCurrentDocument * vbadocumentbase::getPath (bnc#507745) * add application.quit API (bnc#510003) * initial version of new macro resolver * checkbox access via VBA API (bnc#507400) * vbadocumentbase::getFullName (bnc#507745) * active newly added worksheet (bnc#507758) * default value control setting (bnc#507748) * allow worksheet to be passed as param (bnc#507760) * add to support menubar related objects (bnc#508113) * code name incorrectly imported for sheet (bnc#507768) * userform filter and userform controls visibility (i#88878) * auto calculation of shift direction for delete (bnc#508101) This update of OpenOffice.org fixes potential buffer overflow in EMF parser code (enhwmf.cxx, emfplus.cxx). Additionally Secunia reported an integer underflow (CVE-2009-0200) and a buffer overflow (CVE-2009-0201) that could be triggered while parsing Word documents. Also provides the maintenance update to OpenOffice.org-3.1.1. Details about all upstream changes can be found at http://development.openoffice.org/releases/3.1.1.html The Novell changes are: ------------------------------------------------------------ ------- Wed Aug 26 13:21:04 CEST 2009 - pmladek@suse.cz - maintenance update for SLED10 (MaintenanceTracker-25396) - updated to the milestone ooo310-m19 - updated ooo-build to version 3.1.1.1 (3.1.1-rc1 == final): * Common bits: * prevent multiple window resize when maximised (i#104469) * save non-English file names with KDE4 dialog (deb#536664) * keep locks after saving documents via WebDAV (bnc#464568) * KDE detection (bnc#529208) * Base bits: * UPDATE db record failure (i#104088) * Calc bits: * multi-range copy-n-paste stuff fix * Impress bits: * wrong text bounds in Impress (bnc#523603) * OOXML bits: * data sequence creation in PPTX import (bnc#500175) * l10n bits: * French translation update * Finnish translation update * Hungarian translation update - updated extra localization sources: nb nn sl ------------------------------------------------------------ ------- Tue Aug 18 19:45:45 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m18 - updated ooo-build to version 3.1.0.99.3 (3.1.1-beta3): * speed up:: * cache fontconfig's pre-match substitution results (n#529532) * Common bits: * saving pictures with preview size (bnc#531221, i#104146) * menubar theme support (bnc#526004, bnc#527356, i#103999) * Base bits: * Table Wizard categories (i#102019) * Calc bits: * Unicode string in document URI in Edit Links dialog (i#104166) * several regressions in external references (i#103918) * OOXML bits: * pivot data PPTX export (bnc#505917) * l10n bits: * Hungarian translation of About dialog * ooo-build.pot update file ------------------------------------------------------------ ------- Tue Aug 4 22:12:51 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m17 - updated ooo-build to version 3.1.0.99.2 (3.1.1-beta2): * feature: * animated border for copied range * better modified status icon in statusbar (i#103862) * surface shades, custom shapes gradient color (bnc#485637) * common bits: * squeezed check boxes in sub menus (bnc#523852) * show templates installed as extension (bnc#512146) * single-point polygons in fontwork crasher (bnc#526342) * Calc fixes: * sorting when the first row was not 0 (bnc#524215) * string cell format during text file import (bnc#523414) * non-default max column/row size for range names (bnc#522833) * Draw: * autoshape geometry on model change * avoids messing with fontwork glyph polygons (bnc#485637) * VBA bits: * broken Styles.Add * toolbar XLS import * broken toolbar import * typename issue (bnc#525649) * better heuristic for deleted ctrls * support for tooltips and separators * HTMLSelect activex objects XLS import (bnc#523191) * Financial functions (bnc#525633, bnc#525635, bnc#525642, bnc#525647) * OOXML bits: * pivot table XLSX export (bnc#505917) * animations PPTX export (bnc#497570) * blip luminance PPTX export (bnc#497570) * better header/footer DOCX import (bnc#519201) * l10n bits: * Russian translation update * Hungarian translations update * translations update by openSUSE community * Spanish translation of the autofilter menu (i#103840) - updated extra translation sources: bg el mk nb nn sk sl ------------------------------------------------------------ ------- Thu Jul 23 21:13:52 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m16 - updated ooo-build to version 3.1.0.99.1 (3.1.1-beta1): * features: * new unopkg add --link option * new -bulk option to convert documents on the command line * common bug fixes: * updated Graphite font technology stuff * avoid sticky state of fullscreen window (i#103145) * Calc fixes: * XLS import crasher (bnc#520556) * scrolling with large selection (n#518426) * determine in-line array size more reliably * more on row and flags manipulations (n#516406) * hyperlink strings XLS import (bnc#521447, i#103520) * COUNTIF with external references (bnc#521624, i#102750) * absolute path generation for external doc URI (i#103317) * clink on hyperlinks behavior in Calc (i#103587, n#523005) * document is modified when switching external link (i#103598) * Impress fixes: * no impress layout pane in master page mode (i#73289) * Writer fixes: * RTF export crash (bnc#462657) * lost indentation during DOC import (bnc#518731) * VBA bits: * ComboBox binding data import in userform * create toolbar/menubar in document scope * variable as VBA constant (bnc#521820) * set Enabled/Disabled to menu item (i#103486) * automation objects, automation bridge wrapper (bnc#507501) * WorkBook.PrecisionAsDisplayed, and CommandbarControl.Enabled, support workbook auto_open event, builtin toolbar (bnc#520228) * OOXML bits: * shape map crash * action buttons PPTX export (bnc#497570) * footnote in a table DOCX import crasher (bnc#518741) * l10n bits: * ooo-build.pot update * Serbian translation update ------------------------------------------------------------ ------- Mon Jun 29 19:22:47 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m14 - updated ooo-build to version 3.1.0.98.2 (3.1.1-alpha2): * features: * Oxygen icons theme for KDE4 * OOXML export enabled by default * general bug fixes: * more on the KDE support * better KDE3/KDE4 detection * selection engine's auto repeat interval (bnc#514395) * early startup race in generic vcl plug (i#103148) * sticky fullscreen window state for xinerama (bnc#480324) * Calc fixes: * slow down scrolling interval (n#514395) * unsupported encryption XLS import crasher (i#102906) * non-scrolling formula reference selection (bnc#512060) * more optimization for increased row limit (bnc#514156) * chart update problems with Excel documents (bnc#491898) * non-initiated reference mode in selection range (bnc#512060) * selection area before setting autofilter arrows (bnc#514164) * strip time elements only when fields contains dates (i#94695) * autofill marker position when expanding selection (bnc#514151) * Impress fixes: * lots fixes of numbering (i#101269) * isotropic fit-to-size scale (i#94086) * Writer: * table shifted left margin DOC export (i#100473) * OOXML bits: * blank paragraphs DOCX import * reduce the number of dummy page styles DOCX import * collapsed paragraphs at the end of the sections DOCX import * VBA bits: * load problem for non MSO documents * maximum range selection and scrolling * Window.Zoom should affect only current sheet * fallback to the calling document as active doc * property value "BulletId" could be greater than 255 (i#103021) - added Oxygen icon theme source tarball, snapshot 2009-06-17 - updated prebuilt cli dlls for ooo310-m13 ------------------------------------------------------------ ------- Mon Jun 15 21:21:15 CEST 2009 - pmladek@suse.cz - updated to the milestone ooo310-m13 - updated ooo-build to version 3.1.0.98.1 (3.1.1-alpha1): * features: * support ooo310-m13 * KDE4 vcl plugin and file picker * initial support for SmartArt import * autoplay .pps/.ppsx files (bnc#485645) * custom sort in datapilot tables (bnc#443361) * DataPilot's custom names ODF import/export (bnc#479062) * option to turn off auto number recognition in HTML import * sheet options and password ODS import/export (i#60305,i#71468) * speed up: * progress bar during formula calculation (i#102566) * cell range selection & cursor placement (bnc#511006) * column-wise sorting in Calc (bnc#504827) * more on faster sheet switch (bnc#495140) * bug fixes: * USHORT vs. SCROW or SCCOL (bnc#509768) * cursor after drag-n-dropped (bnc#508872) * slow page style changing in Calc (n#503482) * multi-range copy-n-paste crasher (bnc#509209) * rows filtered via autofilter crasher (bnc#495140) * merged cell attribute flag corruption (bnc#508867) * shifted translations of OOo Calc options (bnc#507643) * replace 'Manual Break' with 'Page Break' in Calc's menu * Launch language chooser for all HTML import (bnc#506095) * show cursor in all panes in split-view mode (bnc#433834) * do not move the cursor when making a selection (bnc#502717) * custom language and number options for CSV import (bnc#510168) * surface shades, custom shapes gradient color (bnc#485637) * misplaced rotated groups in PPT import (bnc#485637) * creating tables in Impress (bnc#483951, i#100275) * fit to frame text feature crasher (bnc#508621) * MM_TEXT map mode support in WMF (bnc#417818) * relative size calculation in SVG import * crash on quit after DOC import (bnc#505704) * fix SDK to actually find the libraries (i#101883) * default button in enter password dialog (i#102230) * HTML OLE controls as OCX controls DOC import (bnc#485609) * duplicit accept/reject menu entries (bnc#249775,i#6191) * OOXML bits: * prefer odf-converter over native OOXML filters (bnc#502173) * set flavour to EXC_OUTPUT_XML_2007 in XLSX export (bnc#502090) * XML_useAutoFormatting XLSX export (bnc#497560) * styles XLSX import/export (bnc#497563) * row limit in XLSX export (bnc#504623) * autoFilter XLSX export (bnc#497559) * rotated text PPTX export(bnc#498737) * transitions PPTX import (bnc#480243) * various PPTX import issues (bnc#377727) * text hyperlinks PPTX export (bnc#499124) * shapes visibility PPTX import (bnc#480243) * paragraph line spacing PPTX export (bnc#498737) * shape fill properties PPTX import (i#101563) * placeholder text style PPTX import (bnc#479834) * subtitle placeholder PPTX import (bnc#480243) * text body properties priority in PPTX import (bnc#403402) * un-connected connector shapes PPTX export (bnc#499129) * hidden slide PPTX import and export (bnc#480229, n#499131) * header, footer, datetime, pagenumber PPTX import (bnc#480243) * page break after tables in DOCX import (bnc#478945, i#101661) * footnote character properties DOCX import (bnc#478972) * extra paragraph in DOCX import (bnc#478977) * better outline DOCX import (bnc#478583) * VBA bits: * toolbars import * more on the Word support * macro execution via VBA API * crasher caused by resize event * rework use of getCurrentDocument * vbadocumentbase::getPath (bnc#507745) * add application.quit API (bnc#510003) * initial version of new macro resolver * checkbox access via VBA API (bnc#507400) * vbadocumentbase::getFullName (bnc#507745) * active newly added worksheet (bnc#507758) * default value control setting (bnc#507748) * allow worksheet to be passed as param (bnc#507760) * add to support menubar related objects (bnc#508113) * code name incorrectly imported for sheet (bnc#507768) * userform filter and userform controls visibility (i#88878) * auto calculation of shift direction for delete (bnc#508101) security OpenOffice_org i586 e578df5f43ca18feddf116e543dd92792bde2415 OpenOffice_org-cs i586 2a259eae339b3759a3396646916bc760c29726ae OpenOffice_org-de i586 31d78d6b540ac1b9f7c20fb36e93fa0f0f584ddc OpenOffice_org-es i586 68bc5a855668ad593aec90bdfe2cec1a497b4e77 OpenOffice_org-fr i586 ca076db7f9d5ef230fd952194bd56538bbc91885 OpenOffice_org-galleries i586 3daabfe37a52aa1daedf10c539ed0a8a9401bf26 OpenOffice_org-gnome i586 fbb86864635ee15e454c2175c41ed2794ddb7a8b OpenOffice_org-hu i586 10ad99bac58f4c3df782e97cf84072648b8ba003 OpenOffice_org-it i586 2f6a28828d6f231fec82933503646960654afd54 OpenOffice_org-ja i586 b76bd857c2b4de083b6665208e1cacef90d5ab09 OpenOffice_org-kde i586 82e1401f997a41528b961206035266dd0ac54c5f OpenOffice_org-mono i586 0e9a95038ab7313fa7d8253acc98851eed6b4cfc OpenOffice_org-pl i586 6d170c338b724a826db11764442dcb4c04011386 OpenOffice_org-pt-BR i586 70f9ae0f10e9bd030236626e4f3a518f774a5d87 OpenOffice_org-sk i586 3a27193045edf7462fe1cef1a2d874f1ed673888 OpenOffice_org-zh-CN i586 6fd81b641b3041a05a623153657ef9d752bd7bef OpenOffice_org-zh-TW i586 65d4b99c1a25f5ae94520f36e6e6628dc4f8fd34