Change logs for openoffice.org2 source package in Breezy

  • openoffice.org2 (1.9.129-0.1ubuntu4.3) breezy-security; urgency=low
    
      * Security updates:
      * ooo-build:
        - starcalc-file-format-parser-2.2.diff: fix StarCalc format
          file parser stack overflow (CVE-2007-0238).
        - cws-obr04-*.diff: fix escaping of hyperlinks (CVE-2007-0239).
        - libwpd-CVE-2007-0002.diff: patch OOos internal libwpd
          copy for CVE-2007-0002.
        - sensible-browser.diff: Update to apply after cws-obr04-*.diff.
    
     -- Matthias Klose <email address hidden>   Mon, 19 Mar 2007 19:23:56 +0000
  • openoffice.org2 (1.9.129-0.1ubuntu4.2) breezy-security; urgency=low
    
      * Fix OpenOffice.org WMF heap overflow (CVE-2006-5870).
    
     -- Matthias Klose <email address hidden>   Tue,  9 Jan 2007 09:31:17 +0000
  • openoffice.org2 (1.9.129-0.1ubuntu4.1) breezy-security; urgency=low
    
      * Add patch to fix a potential buffer overflow in the xml to utf-8
        converter. CVE-2006-3117.
      * Add patch from upstream to fix macro handling security bug; it was
        possible to embed macros in documents without OOo seeing them and
        executing them without any user interaction. CVE-2006-2198.
      * Add patch from upstream to disable Java applets feature because it's
        possible to write Java applets breaking out of the sandbox.
        CVE-2006-2199.
    
     -- Matthias Klose <email address hidden>   Thu,  6 Jul 2006 10:24:11 +0000
  • openoffice.org2 (1.9.129-0.1ubuntu4) breezy; urgency=low
    
    
      * Do build with included sablot-0.52 sources, the system libsablot-1.0.2
        doesn't work when resolving embedded references in the help files.
      * debian/rules:
        - Do not configure --with-system-sablot.
        - Fix some typos in conditionals for building the help packages.
        - Work around broken upstream installation destdir for non en-US
          help files.
      * debian/control: Regenerate.
      * Fix build using gcc-4.0 on sparc (David Miller).
    
     -- Matthias Klose <email address hidden>  Fri,  7 Oct 2005 00:12:55 +0200