Synopsis

openoffice.org security update

Type/Severity

Security Advisory: Important

Topic

Updated openoffice.org packages are now available.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

A heap based buffer overflow bug was found in the OpenOffice.org DOC file
processor. An attacker could create a carefully crafted DOC file in such a
way that it could cause OpenOffice.org to execute arbitrary code when the
file was opened by a victim. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2005-0941 to this issue.

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported fixes for these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 154540 - CAN-2005-0941 openoffice.org heap overflow

CVEs

• CVE-2005-0941

References

• http://www.openoffice.org/issues/show_bug.cgi?id=46388

Red Hat Enterprise Linux Server 4

SRPM
openoffice.org-1.1.2-24.6.0.EL4.src.rpm	SHA-256: 34845649bbc3bc56a5cb8acee20c5031526b5911dc35b479145a8fc78f0fb194
x86_64
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e
i386
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-kde-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 7b4e91777049422e226f53c23e5197464a282dfa4f86d9ead9c3a3d56b27604d
openoffice.org-kde-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 7b4e91777049422e226f53c23e5197464a282dfa4f86d9ead9c3a3d56b27604d
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e

Red Hat Enterprise Linux Workstation 4

SRPM
openoffice.org-1.1.2-24.6.0.EL4.src.rpm	SHA-256: 34845649bbc3bc56a5cb8acee20c5031526b5911dc35b479145a8fc78f0fb194
x86_64
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e
i386
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-kde-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 7b4e91777049422e226f53c23e5197464a282dfa4f86d9ead9c3a3d56b27604d
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e

Red Hat Enterprise Linux Desktop 4

SRPM
openoffice.org-1.1.2-24.6.0.EL4.src.rpm	SHA-256: 34845649bbc3bc56a5cb8acee20c5031526b5911dc35b479145a8fc78f0fb194
x86_64
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e
i386
openoffice.org-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: eb5f804da10e8a20acfc1a4a3cf5595d587ff1614c184859792e9ff813db08a1
openoffice.org-i18n-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 53289b65195a035e7d577b7183e5b23db9b7e2227a6959dd3014d293b4f02088
openoffice.org-kde-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 7b4e91777049422e226f53c23e5197464a282dfa4f86d9ead9c3a3d56b27604d
openoffice.org-libs-1.1.2-24.6.0.EL4.i386.rpm	SHA-256: 1ce215cb7b36f109bdbc2236f3e3c828c8f3bdbf323b0514c7d321663cea322e

Red Hat Enterprise Linux for Power, big endian 4

SRPM
openoffice.org-1.1.2-24.6.0.EL4.src.rpm	SHA-256: 34845649bbc3bc56a5cb8acee20c5031526b5911dc35b479145a8fc78f0fb194
ppc
openoffice.org-1.1.2-24.6.0.EL4.ppc.rpm	SHA-256: f7c5dda88e03e5c99ca3ff8276373d080aac6b8a3bdcd95ed54452e357f4976d
openoffice.org-i18n-1.1.2-24.6.0.EL4.ppc.rpm	SHA-256: d752ee2f3aedd4988c61ca5b16a2f2f4cf476fc5d23c5d9b8cc8f10099a54687
openoffice.org-kde-1.1.2-24.6.0.EL4.ppc.rpm	SHA-256: 1ac4c5e64760b19e56f66c42d0c73a3f44454c17c5288d686f6e7e322f7bb13e
openoffice.org-libs-1.1.2-24.6.0.EL4.ppc.rpm	SHA-256: a26844c5b41f11e506efd44fc379be737809aee1f5ef41989bf692ee01fa61aa