Attaching the debdiff vs. -0ubuntu5 for SRU. ** Patch added: "debdiff 3.5.7-0ubuntu5 -> 3.5.7-0ubuntu6" https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1316243/+attachment/4106559/+files/libreoffice_3.5.7-0ubuntu6.diff
-- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libreoffice in Ubuntu. https://bugs.launchpad.net/bugs/1316243 Title: [SRU] Prevent DoS via OOXML Status in “libreoffice” package in Ubuntu: New Status in “libreoffice” source package in Precise: New Bug description: LibreOffice 3.5.x allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document file. SRU data: [Impact] * DoS/application termination upon opening crafted file [Test Case] * none [Regression Potential] * patch affects only OOXML filters for Writer * change is in all upstream LibreOffice releases since 3.6.7/4.0.4, so regression potential is low * patch has been considered fine by the security team [Other Info] * none To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1316243/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
