openSUSE Security Update: Security update for LibreOffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1805-1 Rating: moderate References: #718113 #856729 #939998 #945443 #945445 #955832 #965294 #965296 #967014 #967015 #977784 Cross-References: CVE-2016-0794 CVE-2016-0795 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 9 fixes is now available. Description: LibreOffice was updated to version 5.1.3.2, bringing many new features and bug fixes. Two security issues have been fixed: - CVE-2016-0795: LibreOffice allowed remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document. - CVE-2016-0794: The lwp filter in LibreOffice allowed remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document. A comprehensive list of new features and improvements in this release is provided by the Document Foundation at https://wiki.documentfoundation.org/ReleaseNotes/5.1 . This update was imported from the SUSE:SLE-12:Update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-871=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cmis-client-0.5.1-3.1 cmis-client-debuginfo-0.5.1-3.1 cmis-client-debugsource-0.5.1-3.1 hunspell-1.3.2-5.1 hunspell-debuginfo-1.3.2-5.1 hunspell-debugsource-1.3.2-5.1 hunspell-devel-1.3.2-5.1 hunspell-static-1.3.2-5.1 hunspell-tools-1.3.2-5.1 hunspell-tools-debuginfo-1.3.2-5.1 hyphen-2.8.8-6.1 hyphen-debugsource-2.8.8-6.1 hyphen-devel-2.8.8-6.1 libcmis-0_5-5-0.5.1-3.1 libcmis-0_5-5-debuginfo-0.5.1-3.1 libcmis-c-0_5-5-0.5.1-3.1 libcmis-c-0_5-5-debuginfo-0.5.1-3.1 libcmis-c-devel-0.5.1-3.1 libcmis-devel-0.5.1-3.1 libetonyek-0_1-1-0.1.6-3.2 libetonyek-0_1-1-debuginfo-0.1.6-3.2 libetonyek-debugsource-0.1.6-3.2 libetonyek-devel-0.1.6-3.2 libetonyek-tools-0.1.6-3.2 libetonyek-tools-debuginfo-0.1.6-3.2 libhyphen0-2.8.8-6.1 libhyphen0-debuginfo-2.8.8-6.1 libixion-0_11-0-0.11.0-3.1 libixion-0_11-0-debuginfo-0.11.0-3.1 libixion-debugsource-0.11.0-3.1 libixion-devel-0.11.0-3.1 libixion-python3-0.11.0-3.1 libixion-python3-debuginfo-0.11.0-3.1 libixion-tools-0.11.0-3.1 libixion-tools-debuginfo-0.11.0-3.1 liborcus-0_11-0-0.11.0-4.1 liborcus-0_11-0-debuginfo-0.11.0-4.1 liborcus-debugsource-0.11.0-4.1 liborcus-devel-0.11.0-4.1 liborcus-python3-0.11.0-4.1 liborcus-python3-debuginfo-0.11.0-4.1 liborcus-tools-0.11.0-4.1 liborcus-tools-debuginfo-0.11.0-4.1 libreoffice-5.1.3.2-8.1 libreoffice-base-5.1.3.2-8.1 libreoffice-base-debuginfo-5.1.3.2-8.1 libreoffice-base-drivers-mysql-5.1.3.2-8.1 libreoffice-base-drivers-mysql-debuginfo-5.1.3.2-8.1 libreoffice-base-drivers-postgresql-5.1.3.2-8.1 libreoffice-base-drivers-postgresql-debuginfo-5.1.3.2-8.1 libreoffice-calc-5.1.3.2-8.1 libreoffice-calc-debuginfo-5.1.3.2-8.1 libreoffice-calc-extensions-5.1.3.2-8.1 libreoffice-debuginfo-5.1.3.2-8.1 libreoffice-debugsource-5.1.3.2-8.1 libreoffice-draw-5.1.3.2-8.1 libreoffice-draw-debuginfo-5.1.3.2-8.1 libreoffice-filters-optional-5.1.3.2-8.1 libreoffice-gnome-5.1.3.2-8.1 libreoffice-gnome-debuginfo-5.1.3.2-8.1 libreoffice-gtk3-5.1.3.2-8.1 libreoffice-gtk3-debuginfo-5.1.3.2-8.1 libreoffice-impress-5.1.3.2-8.1 libreoffice-impress-debuginfo-5.1.3.2-8.1 libreoffice-kde4-5.1.3.2-8.1 libreoffice-kde4-debuginfo-5.1.3.2-8.1 libreoffice-mailmerge-5.1.3.2-8.1 libreoffice-math-5.1.3.2-8.1 libreoffice-math-debuginfo-5.1.3.2-8.1 libreoffice-officebean-5.1.3.2-8.1 libreoffice-officebean-debuginfo-5.1.3.2-8.1 libreoffice-pyuno-5.1.3.2-8.1 libreoffice-pyuno-debuginfo-5.1.3.2-8.1 libreoffice-sdk-5.1.3.2-8.1 libreoffice-sdk-debuginfo-5.1.3.2-8.1 libreoffice-sdk-doc-5.1.3.2-8.1 libreoffice-writer-5.1.3.2-8.1 libreoffice-writer-debuginfo-5.1.3.2-8.1 libreoffice-writer-extensions-5.1.3.2-8.1 libreofficekit-5.1.3.2-8.1 libreofficekit-devel-5.1.3.2-8.1 libvisio-0_1-1-0.1.5-3.1 libvisio-0_1-1-debuginfo-0.1.5-3.1 libvisio-debugsource-0.1.5-3.1 libvisio-devel-0.1.5-3.1 libvisio-tools-0.1.5-3.1 libvisio-tools-debuginfo-0.1.5-3.1 libwps-0_4-4-0.4.2-3.1 libwps-0_4-4-debuginfo-0.4.2-3.1 libwps-debugsource-0.4.2-3.1 libwps-devel-0.4.2-3.1 libwps-tools-0.4.2-3.1 libwps-tools-debuginfo-0.4.2-3.1 myspell-dictionaries-20160511-4.1 myspell-lightproof-en-20160511-4.1 myspell-lightproof-hu_HU-20160511-4.1 myspell-lightproof-pt_BR-20160511-4.1 myspell-lightproof-ru_RU-20160511-4.1 - openSUSE Leap 42.1 (noarch): libetonyek-devel-doc-0.1.6-3.2 libreoffice-branding-upstream-5.1.3.2-8.1 libreoffice-gdb-pretty-printers-5.1.3.2-8.1 libreoffice-glade-5.1.3.2-8.1 libreoffice-icon-theme-breeze-5.1.3.2-8.1 libreoffice-icon-theme-galaxy-5.1.3.2-8.1 libreoffice-icon-theme-hicontrast-5.1.3.2-8.1 libreoffice-icon-theme-oxygen-5.1.3.2-8.1 libreoffice-icon-theme-sifr-5.1.3.2-8.1 libreoffice-icon-theme-tango-5.1.3.2-8.1 libreoffice-l10n-af-5.1.3.2-8.1 libreoffice-l10n-ar-5.1.3.2-8.1 libreoffice-l10n-as-5.1.3.2-8.1 libreoffice-l10n-bg-5.1.3.2-8.1 libreoffice-l10n-bn-5.1.3.2-8.1 libreoffice-l10n-br-5.1.3.2-8.1 libreoffice-l10n-ca-5.1.3.2-8.1 libreoffice-l10n-cs-5.1.3.2-8.1 libreoffice-l10n-cy-5.1.3.2-8.1 libreoffice-l10n-da-5.1.3.2-8.1 libreoffice-l10n-de-5.1.3.2-8.1 libreoffice-l10n-dz-5.1.3.2-8.1 libreoffice-l10n-el-5.1.3.2-8.1 libreoffice-l10n-en-5.1.3.2-8.1 libreoffice-l10n-es-5.1.3.2-8.1 libreoffice-l10n-et-5.1.3.2-8.1 libreoffice-l10n-eu-5.1.3.2-8.1 libreoffice-l10n-fa-5.1.3.2-8.1 libreoffice-l10n-fi-5.1.3.2-8.1 libreoffice-l10n-fr-5.1.3.2-8.1 libreoffice-l10n-ga-5.1.3.2-8.1 libreoffice-l10n-gl-5.1.3.2-8.1 libreoffice-l10n-gu-5.1.3.2-8.1 libreoffice-l10n-he-5.1.3.2-8.1 libreoffice-l10n-hi-5.1.3.2-8.1 libreoffice-l10n-hr-5.1.3.2-8.1 libreoffice-l10n-hu-5.1.3.2-8.1 libreoffice-l10n-it-5.1.3.2-8.1 libreoffice-l10n-ja-5.1.3.2-8.1 libreoffice-l10n-kk-5.1.3.2-8.1 libreoffice-l10n-kn-5.1.3.2-8.1 libreoffice-l10n-ko-5.1.3.2-8.1 libreoffice-l10n-lt-5.1.3.2-8.1 libreoffice-l10n-lv-5.1.3.2-8.1 libreoffice-l10n-mai-5.1.3.2-8.1 libreoffice-l10n-ml-5.1.3.2-8.1 libreoffice-l10n-mr-5.1.3.2-8.1 libreoffice-l10n-nb-5.1.3.2-8.1 libreoffice-l10n-nl-5.1.3.2-8.1 libreoffice-l10n-nn-5.1.3.2-8.1 libreoffice-l10n-nr-5.1.3.2-8.1 libreoffice-l10n-nso-5.1.3.2-8.1 libreoffice-l10n-or-5.1.3.2-8.1 libreoffice-l10n-pa-5.1.3.2-8.1 libreoffice-l10n-pl-5.1.3.2-8.1 libreoffice-l10n-pt-BR-5.1.3.2-8.1 libreoffice-l10n-pt-PT-5.1.3.2-8.1 libreoffice-l10n-ro-5.1.3.2-8.1 libreoffice-l10n-ru-5.1.3.2-8.1 libreoffice-l10n-si-5.1.3.2-8.1 libreoffice-l10n-sk-5.1.3.2-8.1 libreoffice-l10n-sl-5.1.3.2-8.1 libreoffice-l10n-sr-5.1.3.2-8.1 libreoffice-l10n-ss-5.1.3.2-8.1 libreoffice-l10n-st-5.1.3.2-8.1 libreoffice-l10n-sv-5.1.3.2-8.1 libreoffice-l10n-ta-5.1.3.2-8.1 libreoffice-l10n-te-5.1.3.2-8.1 libreoffice-l10n-th-5.1.3.2-8.1 libreoffice-l10n-tn-5.1.3.2-8.1 libreoffice-l10n-tr-5.1.3.2-8.1 libreoffice-l10n-ts-5.1.3.2-8.1 libreoffice-l10n-uk-5.1.3.2-8.1 libreoffice-l10n-ve-5.1.3.2-8.1 libreoffice-l10n-xh-5.1.3.2-8.1 libreoffice-l10n-zh-Hans-5.1.3.2-8.1 libreoffice-l10n-zh-Hant-5.1.3.2-8.1 libreoffice-l10n-zu-5.1.3.2-8.1 libvisio-devel-doc-0.1.5-3.1 mdds-1_0-devel-1.1.0-2.1 myspell-af_NA-20160511-4.1 myspell-af_ZA-20160511-4.1 myspell-an-20160511-4.1 myspell-an_ES-20160511-4.1 myspell-ar-20160511-4.1 myspell-ar_AE-20160511-4.1 myspell-ar_BH-20160511-4.1 myspell-ar_DZ-20160511-4.1 myspell-ar_EG-20160511-4.1 myspell-ar_IQ-20160511-4.1 myspell-ar_JO-20160511-4.1 myspell-ar_KW-20160511-4.1 myspell-ar_LB-20160511-4.1 myspell-ar_LY-20160511-4.1 myspell-ar_MA-20160511-4.1 myspell-ar_OM-20160511-4.1 myspell-ar_QA-20160511-4.1 myspell-ar_SA-20160511-4.1 myspell-ar_SD-20160511-4.1 myspell-ar_SY-20160511-4.1 myspell-ar_TN-20160511-4.1 myspell-ar_YE-20160511-4.1 myspell-be_BY-20160511-4.1 myspell-bg_BG-20160511-4.1 myspell-bn_BD-20160511-4.1 myspell-bn_IN-20160511-4.1 myspell-br_FR-20160511-4.1 myspell-bs-20160511-4.1 myspell-bs_BA-20160511-4.1 myspell-ca-20160511-4.1 myspell-ca_AD-20160511-4.1 myspell-ca_ES-20160511-4.1 myspell-ca_ES_valencia-20160511-4.1 myspell-ca_FR-20160511-4.1 myspell-ca_IT-20160511-4.1 myspell-cs_CZ-20160511-4.1 myspell-da_DK-20160511-4.1 myspell-de-20160511-4.1 myspell-de_AT-20160511-4.1 myspell-de_CH-20160511-4.1 myspell-de_DE-20160511-4.1 myspell-el_GR-20160511-4.1 myspell-en-20160511-4.1 myspell-en_AU-20160511-4.1 myspell-en_BS-20160511-4.1 myspell-en_BZ-20160511-4.1 myspell-en_CA-20160511-4.1 myspell-en_GB-20160511-4.1 myspell-en_GH-20160511-4.1 myspell-en_IE-20160511-4.1 myspell-en_IN-20160511-4.1 myspell-en_JM-20160511-4.1 myspell-en_MW-20160511-4.1 myspell-en_NA-20160511-4.1 myspell-en_NZ-20160511-4.1 myspell-en_PH-20160511-4.1 myspell-en_TT-20160511-4.1 myspell-en_US-20160511-4.1 myspell-en_ZA-20160511-4.1 myspell-en_ZW-20160511-4.1 myspell-es-20160511-4.1 myspell-es_AR-20160511-4.1 myspell-es_BO-20160511-4.1 myspell-es_CL-20160511-4.1 myspell-es_CO-20160511-4.1 myspell-es_CR-20160511-4.1 myspell-es_CU-20160511-4.1 myspell-es_DO-20160511-4.1 myspell-es_EC-20160511-4.1 myspell-es_ES-20160511-4.1 myspell-es_GT-20160511-4.1 myspell-es_HN-20160511-4.1 myspell-es_MX-20160511-4.1 myspell-es_NI-20160511-4.1 myspell-es_PA-20160511-4.1 myspell-es_PE-20160511-4.1 myspell-es_PR-20160511-4.1 myspell-es_PY-20160511-4.1 myspell-es_SV-20160511-4.1 myspell-es_UY-20160511-4.1 myspell-es_VE-20160511-4.1 myspell-et_EE-20160511-4.1 myspell-fr_BE-20160511-4.1 myspell-fr_CA-20160511-4.1 myspell-fr_CH-20160511-4.1 myspell-fr_FR-20160511-4.1 myspell-fr_LU-20160511-4.1 myspell-fr_MC-20160511-4.1 myspell-gd_GB-20160511-4.1 myspell-gl-20160511-4.1 myspell-gl_ES-20160511-4.1 myspell-gu_IN-20160511-4.1 myspell-gug-20160511-4.1 myspell-gug_PY-20160511-4.1 myspell-he_IL-20160511-4.1 myspell-hi_IN-20160511-4.1 myspell-hr_HR-20160511-4.1 myspell-hu_HU-20160511-4.1 myspell-is-20160511-4.1 myspell-is_IS-20160511-4.1 myspell-it_IT-20160511-4.1 myspell-kmr_Latn-20160511-4.1 myspell-kmr_Latn_SY-20160511-4.1 myspell-kmr_Latn_TR-20160511-4.1 myspell-lo_LA-20160511-4.1 myspell-lt_LT-20160511-4.1 myspell-lv_LV-20160511-4.1 myspell-nb_NO-20160511-4.1 myspell-ne_NP-20160511-4.1 myspell-nl_BE-20160511-4.1 myspell-nl_NL-20160511-4.1 myspell-nn_NO-20160511-4.1 myspell-no-20160511-4.1 myspell-oc_FR-20160511-4.1 myspell-pl_PL-20160511-4.1 myspell-pt_AO-20160511-4.1 myspell-pt_BR-20160511-4.1 myspell-pt_PT-20160511-4.1 myspell-ro-20160511-4.1 myspell-ro_RO-20160511-4.1 myspell-ru_RU-20160511-4.1 myspell-si_LK-20160511-4.1 myspell-sk_SK-20160511-4.1 myspell-sl_SI-20160511-4.1 myspell-sr-20160511-4.1 myspell-sr_CS-20160511-4.1 myspell-sr_Latn_CS-20160511-4.1 myspell-sr_Latn_RS-20160511-4.1 myspell-sr_RS-20160511-4.1 myspell-sv_FI-20160511-4.1 myspell-sv_SE-20160511-4.1 myspell-sw_TZ-20160511-4.1 myspell-te-20160511-4.1 myspell-te_IN-20160511-4.1 myspell-th_TH-20160511-4.1 myspell-uk_UA-20160511-4.1 myspell-vi-20160511-4.1 myspell-vi_VN-20160511-4.1 myspell-zu_ZA-20160511-4.1 - openSUSE Leap 42.1 (x86_64): hunspell-32bit-1.3.2-5.1 hunspell-debuginfo-32bit-1.3.2-5.1 hunspell-devel-32bit-1.3.2-5.1 libhyphen0-32bit-2.8.8-6.1 libhyphen0-debuginfo-32bit-2.8.8-6.1 References: https://www.suse.com/security/cve/CVE-2016-0794.html https://www.suse.com/security/cve/CVE-2016-0795.html https://bugzilla.suse.com/718113 https://bugzilla.suse.com/856729 https://bugzilla.suse.com/939998 https://bugzilla.suse.com/945443 https://bugzilla.suse.com/945445 https://bugzilla.suse.com/955832 https://bugzilla.suse.com/965294 https://bugzilla.suse.com/965296 https://bugzilla.suse.com/967014 https://bugzilla.suse.com/967015 https://bugzilla.suse.com/977784