Ubuntu
libreoffice package

Change logs for libreoffice source package in Focal

Focal (20.04)
Change log

libreoffice (1:7.4.7-0ubuntu0.22.10.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from kinetic (LP: #2018714)
  * Use internal abseil, gpgmepp, libmwaw, libwps, mdds, orcus,
    graphite and harfbuzz to meat upstream requirements
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement

 -- Rico Tzschichholz <email address hidden>  Wed, 03 May 2023 19:17:57 +0200

libreoffice (1:7.4.6-0ubuntu0.22.10.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from kinetic (LP: #2009944)
  * Use internal abseil, gpgmepp, libmwaw, libwps, mdds, orcus,
    graphite and harfbuzz to meat upstream requirements
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement

 -- Rico Tzschichholz <email address hidden>  Thu, 09 Mar 2023 14:07:05 +0100

libreoffice (1:7.3.7-0ubuntu0.22.04.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from jammy (LP: #1996076)
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement
  * Use internal abseil, gpgmepp, libmwaw, libwps, mdds, orcus
    to meat upstream requirements

 -- Rico Tzschichholz <email address hidden>  Tue, 08 Nov 2022 12:22:22 +0100

libreoffice (1:7.3.6-0ubuntu0.22.04.2~bpo20.04.1) focal-backports; urgency=medium

  * Backport from jammy

libreoffice (1:7.3.6-0ubuntu0.22.04.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from jammy (LP: #1989418)
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement
  * Use internal abseil, gpgmepp, libmwaw, libwps, mdds, orcus
    to meat upstream requirements

libreoffice (1:7.3.6-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: arbitrary script execution via Office URI Schemes
    - debian/patches/CVE-2022-3140-4.patch: check impress/calc IFrame
      FrameURL target in xmloff/source/draw/ximpshap.cxx.
    - CVE-2022-3140

 -- Rico Tzschichholz <email address hidden>  Fri, 21 Oct 2022 13:35:33 +0200

libreoffice (1:7.3.6-0ubuntu0.22.04.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from jammy (LP: #1989418)
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement
  * Use internal abseil, gpgmepp, libmwaw, libwps, mdds, orcus
    to meat upstream requirements

 -- Rico Tzschichholz <email address hidden>  Tue, 13 Sep 2022 09:49:44 +0200

libreoffice (1:7.3.5-0ubuntu0.22.04.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from jammy (LP: #1987045)
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement
  * Use internal abseil, cuckoo, gpgmepp, libmwaw, libwps, mdds, orcus
    to meat upstream requirements

 -- Rico Tzschichholz <email address hidden>  Fri, 19 Aug 2022 12:25:17 +0200

libreoffice (1:7.2.7-0ubuntu0.21.10.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from impish (LP: #1973594)
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement
  * Use internal orcus, libmwaw, libwps to meat upstream requirements
  * Use internal neon27 while 0.31.1 is required

 -- Rico Tzschichholz <email address hidden>  Mon, 16 May 2022 12:09:50 +0200

libreoffice (1:7.2.6-0ubuntu0.21.10.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from impish (LP: #1969808)
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement
  * Use internal orcus, libmwaw, libwps to meat upstream requirements
  * Use internal neon27 while 0.31.1 is required

 -- Rico Tzschichholz <email address hidden>  Thu, 21 Apr 2022 16:10:29 +0200

libreoffice (1:7.1.7-0ubuntu0.21.04.1~bpo20.04.1) focal-backports; urgency=medium

  * Backport from hirsute (LP: #1950467)
  * Lower dpkg-dev requirement
    - buildopts.mk is not available in dpkg-dev < 1.20.1
  * Lower libclucene-dev requirement
  * Use internal orcus, libmwaw, libwps to meat upstream requirements
  * Use internal neon27 while 0.31.1 is required

 -- Rico Tzschichholz <email address hidden>  Thu, 04 Nov 2021 16:22:24 +0100

libreoffice (1:6.4.7-0ubuntu0.20.04.9) focal-security; urgency=medium

  * SECURITY UPDATE: Improper input validation enabling arbitrary Gstreamer
     pipeline injection
    - debian/patches/CVE-2023-6185.patch: escape url passed to gstreamer
    - CVE-2023-6185
  * SECURITY UPDATE: Link targets allow arbitrary script execution
    - debian/patches/CVE-2023-6186-*.patch: multiple commits to fix
      security issues.
    - CVE-2023-6186
  * patches/CppunitTest_desktop_lib-adjust-asserts-so-this-works.patch:
    - Usage of expired certificates in CppunitTest_desktop_lib:
      adjust asserts so this works again

 -- Rico Tzschichholz <email address hidden>  Mon, 11 Dec 2023 15:41:29 +0100

libreoffice (1:6.4.7-0ubuntu0.20.04.8) focal-security; urgency=high

  * SECURITY UPDATE: Remote documents loaded without prompt via IFrame
    - debian/patches/CVE-2023-2255-*.patch: multiple commits to fix
      security issues.
    - CVE-2023-2255
  * SECURITY UPDATE: Array Index UnderFlow in Calc Formula Parsing
    - debian/patches/CVE-2023-0950.patch: Obtain actual 0-parameter count
      for OR(), AND() and 1-parameter functions
    - CVE-2023-0950

 -- Rico Tzschichholz <email address hidden>  Thu, 25 May 2023 22:52:23 +0200

libreoffice (1:6.4.7-0ubuntu0.20.04.7) focal-security; urgency=medium

  [ Rico Tzschichholz ]
  * SECURITY UPDATE: Empty entry in Java class path risks arbitrary
    code execution
    - debian/patches/CVE-2022-38745.patch: Avoid unnecessary empty
      -Djava.class.path=.
    - CVE-2022-38745

  [ Rene Engelhard ]
  * debian/patches/hrk-euro.diff: add EUR to .hr i18n;
    add HRK<->EUR conversion rate to Calc and the Euro Wizard
  * debian/patches/hrk-euro-default.diff: default to EUR for .hr

 -- Rico Tzschichholz <email address hidden>  Sun, 26 Mar 2023 20:00:54 +0200

libreoffice (1:6.4.7-0ubuntu0.20.04.6) focal-security; urgency=medium

  * SECURITY UPDATE: arbitrary script execution via Office URI Schemes
    - debian/patches/CVE-2022-3140-1.patch: commands are always URLs in
      wizards/source/access2base/DoCmd.xba.
    - debian/patches/CVE-2022-3140-2.patch: filter out unwanted command
      URIs in desktop/source/app/cmdlineargs.cxx.
    - debian/patches/CVE-2022-3140-3.patch: check IFrame FrameURL target in
      sfx2/source/appl/macroloader.cxx, sfx2/source/doc/iframe.cxx,
      sfx2/source/inc/macroloader.hxx, sw/source/filter/html/htmlplug.cxx,
      sw/source/filter/xml/xmltexti.cxx.
    - debian/patches/CVE-2022-3140-4.patch: check impress/calc IFrame
      FrameURL target in xmloff/source/draw/ximpshap.cxx.
    - CVE-2022-3140

 -- Marc Deslauriers <email address hidden>  Fri, 14 Oct 2022 08:58:04 -0400

libreoffice (1:6.4.7-0ubuntu0.20.04.5) focal-security; urgency=medium

  * SECURITY UPDATE: Improper Certificate Validation vulnerability
    - debian/patches/CVE-2022-26305.patch: compare authors using Thumbprint
      in xmlsecurity/source/component/documentdigitalsignatures.cxx.
    - CVE-2022-26305
  * SECURITY UPDATE: stored passwords IV always the same
    - debian/patches/CVE-2022-26306.patch: add Initialization Vectors to
      password storage in
      officecfg/registry/schema/org/openoffice/Office/Common.xcs,
      svl/source/passwordcontainer/passwordcontainer.cxx,
      svl/source/passwordcontainer/passwordcontainer.hxx.
    - CVE-2022-26306
  * SECURITY UPDATE: password storage master key weak entropy
    - debian/patches/CVE-2022-26307-1.patch: make hash encoding match
      decoding in
      officecfg/registry/schema/org/openoffice/Office/Common.xcs,
      svl/source/passwordcontainer/passwordcontainer.cxx,
      svl/source/passwordcontainer/passwordcontainer.hxx,
      uui/source/iahndl-authentication.cxx.
    - debian/patches/CVE-2022-26307-2.patch: add infobar to prompt to
      refresh to replace old format in include/sfx2/strings.hrc,
      include/sfx2/viewfrm.hxx, sfx2/source/view/viewfrm.cxx.
    - CVE-2022-26307

 -- Marc Deslauriers <email address hidden>  Thu, 29 Sep 2022 08:40:35 -0400

libreoffice (1:6.4.7-0ubuntu0.20.04.4) focal-security; urgency=medium

  * SECURITY UPDATE: Improper certificate validation
    - debian/patches/CVE-2021-25636.patch: only use X509Data in
      xmlsecurity/inc/xmlsec-wrapper.h,
      xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx,
      xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx.
    - CVE-2021-25636
  * debian/rules: limit NUM_CPUS to 3 on amd64 to fix FTBFS.

 -- Marc Deslauriers <email address hidden>  Mon, 14 Mar 2022 11:28:35 -0400

libreoffice (1:6.4.7-0ubuntu0.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: Improper certificate validation
    - debian/patches/CVE-2021-2563x-*.patch: multiple commits to fix
      security issues.
    - CVE-2021-25633
    - CVE-2021-25634

 -- Marc Deslauriers <email address hidden>  Tue, 16 Nov 2021 12:42:50 -0500

libreoffice (1:6.4.7-0ubuntu0.20.04.1) focal; urgency=medium

  * New upstream release (LP: #1906684)
  * Move libreoffice-sdbc-hsqldb to Recommends (LP: #1916786)
  * Fix Calc crash in ScSelectionTransferObj (LP: #1897784)

 -- Rico Tzschichholz <email address hidden>  Mon, 15 Mar 2021 19:12:01 +0100

libreoffice (1:6.4.6-0ubuntu0.20.04.1) focal; urgency=medium

  * New upstream release (LP: #1892783)

 -- Heather Ellsworth <email address hidden>  Mon, 24 Aug 2020 16:58:01 -0600

libreoffice (1:6.4.5-0ubuntu0.20.04.1) focal; urgency=medium

  * New upstream release (LP: #1886692)

 -- Rico Tzschichholz <email address hidden>  Mon, 06 Jul 2020 09:00:10 +0200

libreoffice (1:6.4.4-0ubuntu0.20.04.1) focal; urgency=medium

  * New upstream release (LP: #1881007)
  * Don't use main.xcd configured with --disable-gui (LP: #1869561)

 -- Rico Tzschichholz <email address hidden>  Thu, 14 May 2020 14:10:31 +0200

libreoffice (1:6.4.3-0ubuntu0.20.04.1) focal; urgency=medium

  [ Heather Ellsworth ]
  * New upstream release (LP: #1874285)

  [ Rico Tzschichholz ]
  * libreoffice-common: Add Replaces libreoffice-base (<< 1:6.4.0~beta1-2~)

 -- Heather Ellsworth <email address hidden>  Wed, 22 Apr 2020 10:05:23 -0600

libreoffice (1:6.4.2-0ubuntu3) focal; urgency=medium

  * Prevent -nogui and non -nogui mix up (LP: #1869652)

 -- Rico Tzschichholz <email address hidden>  Mon, 30 Mar 2020 10:16:03 +0200

libreoffice (1:6.4.2-0ubuntu2) focal; urgency=medium

  * Merge with debian
  * libreoffice-math: Add Breaks/Replaces libreoffice-common (<< 1:6.4.2~rc1~)
    (LP: #1869357)
  * debian/patches/poppler-0.86.diff: Fix build with poppler 0.86.0

libreoffice (1:6.4.2-3) UNRELEASED; urgency=medium

  [ Rene Engelhard ]
  * debian/patches/Fix-build-with-boost-lesser-than-1.68.diff: add from
    gerrit, thanks Rico Tschichholz

  * debian/rules:
    - use default boost (and thus system-mdds) again and revert
      BOOST_MINVER= (>= 1.68) change
    - fix redland dependencies for libreoffice-core-nogui

  [ Jochen Sprickerhof ]
  * debian/control.in:
    - Prefer libreoffice-core-nogui for -nogui variants
      Closes: #954319
    - Drop -core-nogui in non -nogui packages (if -nogui exists)
    - Fix report_builder and firebird nogui depends

libreoffice (1:6.4.2-2) unstable; urgency=medium

  * debian/control.in:
    - make libreoffice-common Breaks: libreoffice-core (<< 1:6.4.2~rc1)
      (closes: #954323)
    - also add Breaks/Replaces libreoffice-common (<< 1:6.4.2~rc1~) to
      -nogui (for now)
    - allow libreoffice-draw-nogui in -impress-noguis Depends:
      (closes: #954318)

 -- Rico Tzschichholz <email address hidden>  Fri, 27 Mar 2020 08:31:30 +0100

libreoffice (1:6.4.2-0ubuntu1) focal; urgency=medium

  * New upstream release
  * Keep boost and mdds in ubuntu

 -- Heather Ellsworth <email address hidden>  Mon, 16 Mar 2020 13:39:41 -0600

libreoffice (1:6.4.1-0ubuntu1) focal; urgency=medium

  * New upstream release

 -- Heather Ellsworth <heather.ellsworth@canonical>  Thu, 27 Feb 2020 12:45:12 -0700

libreoffice (1:6.4.0-0ubuntu8) focal; urgency=medium

  * No-change rebuild for icu soname change.

 -- Matthias Klose <email address hidden>  Thu, 05 Mar 2020 08:53:17 +0100

libreoffice (1:6.4.0-0ubuntu7) focal; urgency=medium

  * No-change rebuild against libpoppler95

 -- Steve Langasek <email address hidden>  Sun, 01 Mar 2020 04:03:44 +0000

libreoffice (1:6.4.0-0ubuntu6) focal; urgency=medium

  * No-change rebuild for icu update.

 -- Marcus Tomlinson <email address hidden>  Thu, 13 Feb 2020 15:43:58 +0000

libreoffice (1:6.4.0-0ubuntu5) focal; urgency=medium

  [ Rico Tzschichholz ]
  * Add transitional packages for -gtk2 and -kde4 for upgrades from bionic

 -- Marcus Tomlinson <email address hidden>  Wed, 12 Feb 2020 09:00:12 +0000

libreoffice (1:6.4.0-0ubuntu4) focal; urgency=medium

  * Temporarily disable extension tests on armhf

 -- Marcus Tomlinson <email address hidden>  Mon, 10 Feb 2020 15:01:20 +0000

libreoffice (1:6.4.0-0ubuntu3) focal; urgency=medium

  * Add armhf to OOO_NOGUI_ARCHS (fixes armhf autopkgtests)

 -- Marcus Tomlinson <email address hidden>  Fri, 07 Feb 2020 09:02:03 +0000

libreoffice (1:6.4.0-0ubuntu2) focal; urgency=medium

  * Remove dependency on universe package: libqrcodegencpp1

 -- Marcus Tomlinson <email address hidden>  Mon, 03 Feb 2020 16:51:21 +0000

libreoffice (1:6.4.0-0ubuntu1) focal; urgency=medium

  * New upstream release

  [ Marcus Tomlinson ]
  * debian/patches/mysql-80-compatibility.patch: removed as upstream now accounts
    for this.

  [ Rico Tzschichholz ]
  * Drop obsolete .gitignore
  * Remove objects before install to reduce disk usage

 -- Marcus Tomlinson <email address hidden>  Fri, 31 Jan 2020 22:23:21 +0000

libreoffice (1:6.3.4-0ubuntu2) focal; urgency=medium

  * No-change rebuild to build with python3.8.

 -- Matthias Klose <email address hidden>  Sat, 25 Jan 2020 06:04:51 +0000

libreoffice (1:6.3.4-0ubuntu1) focal; urgency=medium

  * New upstream release

 -- Marcus Tomlinson <email address hidden>  Thu, 12 Dec 2019 18:21:58 +0000

libreoffice (1:6.3.3-0ubuntu2) focal; urgency=medium

  [ Rene Engelhard ]
  * debian/patches/Switch-mdds-to-1.5.0-and-liborcus-to-0.15.0.diff:
    as name says
  * debian/rules, debian/shlibs.override.orcus: adapt for above

  [ Marcus Tomlinson ]
  * Recommend fonts-noto-extra (fixes various Impress templates)

 -- Marcus Tomlinson <email address hidden>  Tue, 26 Nov 2019 08:57:59 +0000

libreoffice (1:6.3.3-0ubuntu1) focal; urgency=medium

  * New upstream release

 -- Marcus Tomlinson <email address hidden>  Fri, 01 Nov 2019 10:31:30 +0000

libreoffice (1:6.3.2-0ubuntu2) eoan; urgency=medium

  * libreoffice-style-sifr should not conflict with the libreoffice-style-hicontrast
    transitional package (LP: #1846555)

 -- Marcus Tomlinson <email address hidden>  Thu, 03 Oct 2019 21:31:21 +0100

Ubuntulibreoffice package

Change logs for libreoffice source package in Focal

Ubuntu
libreoffice package