openSUSE Security Update: update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0433-1 Rating: moderate References: #101776 #116448 #117010 #31966 #32861 #35513 #35965 #37129 #37195 #38286 #38391 #38441 #39485 #39510 #39657 #39694 #40298 #40320 #40461 #40701 #41022 #41245 #41681 #417818 #41995 #42073 #42543 #44816 #45560 #46165 #46337 #621739 #653688 #655408 #657909 #667082 #677811 #685123 #693238 #693388 #695479 #699334 #703032 #704274 #705949 #705956 #705977 #705985 #705991 #706138 #706792 #707157 #714787 #715094 #715104 #715115 #715543 #717290 #718227 #718694 #718971 #719656 #719887 #719989 #720443 #720948 #722045 #722644 #722918 #723074 #724087 #726152 #726174 #727504 #728559 #728603 #733864 #734734 #734781 #735533 #736495 #737190 #737921 #738113 #740032 #740117 #740453 #741043 #741182 #742178 #746996 #747471 #748198 #748548 #794679 Cross-References: CVE-2012-0037 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has 94 fixes is now available. Description: - updated to libreoffice-3.4.5.4 (SUSE 3.4.5-rc2) * calc * pie charts colors messed in XLS import (fdo#40320) * correctly import data point formats in data series (fdo#40320) * components * crash when parsing XML signatures (fdo#39657) * broken getDataArray (fdo#46165, fdo#38441, i#117010) * don't paint a frame around the list of edit boxes (fdo#42543) * inconsistent compression method for encrypted documents (bnc#653688) * filters * more on bentConnectors (bnc#736495) * wrong text color in smartArt (bnc#746996) * reading of w:textbox contents (bnc#693388) * textbox position and size DOCX import (fdo#45560) * RTF/DOCX import of transparent frames (bnc#695479) * consecutive frames in RTF/DOCX import (bnc#703032) * handling of frame properties in RTF import (bnc#417818) * force imported XLSX active tab to be shown (bnc#748198) * create TableManager for inside shapes (bnc#747471, bnc#693238) * textboxes import with OLE objects inside (bnc#747471, bnc#693238) * impress * do not create an empty slide when printing handouts (fdo#31966) * libs-core * default shortcut for .uno:SearchDialog should be Ctrl+H * crash using instances dialog of dataform navigator (fdo#44816) * libs-extern * disable problematic reading of external entities in raptor * libs-gui * correctly calculate leap year * use proper Indian Rupee currency symbol U+20B9 (rh#794679) * writer * field refreshing (fdo#39694) * more layout crashers (i#101776, fdo#39510) * textbox borders style and width in DOCX import (fdo#45560) * expand all text fields when setting properties (fdo#42073) - updated to libreoffice-3.4.5.3 (SUSE 3.4.5-rc1) * version 3.4.5.3, tag suse-3.4.5.3 (SUSE LO 3.4.5-rc1) * SmartArt import * custom shapes import * Oracle Java 1.7.0 detection * reading AES-encrypted ODF 1.2 documents as generated by LO 3.5 * base * iterator misuse (fdo #44040, bnc#742178) * calc * allow pasting to multiple ranges (bnc#715094) * correctly convert chart data ranges (bnc#727504) * definedName corruption for XLSX export (bnc#741182) * adjust/shrink the ranges while copying (bnc#677811) * extra graph data is displayed for label (bnc#717290) * getCellRangeByName failure for named range (bnc#738113) * graph in XLS file has dates displayed wrong (bnc#720443) * improve performance of large Excel documents (bnc#715104) * display page background color/image properly (bnc#722045) * pivot table output becoming empty on re-save (bnc#715543) * encode virtual paths to local volume correctly (bnc#719887) * avoid adjusting cell-anchored objects on other sheets (bnc#726152) * make sure to adjust the sheet index of drawing objects (bnc#733864) * make the data validation popup more reliable (fdo #36851, bnc#737190) * filters * table style (bnc#705991) * text rotation fixes (bnc#734734) * crash in PPTX import (bnc#706792) * read w:sdt* contents (bnc#705949) * connector shape fixes (bnc#719989) * legacy fragment import (bnc#699334) * non-working Excel macros (bnc#705977) * free drawn curves import (bnc#657909) * group shape transformations (bnc#621739) * extLst of drawings in diagrams import (bnc#655408) * flip properties of custom shapes import (bnc#705985) * line spacing is used from previous values (bnc#734734) * missing ooxml customshape->mso shape name entries (bnc#737921) * word doesn't break the numberings and prefers hiding them (bnc#707157) * impress * undo corruption (bnc#685123) * do not set duplicate master slide names (bnc#735533) * libs-core * handle copy and paste from ConsoleOne (bnc#704274) * VBA control events not working, broken eventattacher (bnc#718227) * "General Error" when double-click graphic in presentation (bnc#720948) * libs-extern-sys * upgrade graphite to 1.0.3 fix surrogate support * libs-gui * crash at exit (bnc#728603) * radial gradient offset (bnc#714787) * horizontal scrollbars with KDE oxygen style (bnc#722918) * rendering of metafiles embedded in EMF+ (updated) (bnc#705956) * postprocess * make the 3D transitions work again (bnc#728559) * ure * make Duden Korrektor 5 and 6 work * writer * frame selection (bnc#740117) * crash when editing index (bnc#726174) * order database properties (bnc#740032) * numbering levels in DOC import (bnc#715115) * image size issue in DOC import (bnc#718971) * pointless forward moving of a table (bnc#706138) * tabs set after the end margin in DOCX import (bnc#693238) * add hyperlinks by default in Table of Contents (bnc#705956) - updated to libreoffice-3.4.4.3 (SUSE 3.4.4-rc1 == final): * base * crash when inserting a constant in a query (fdo#38286) * calc * crash when modifying a named range * speed up range name lookup by index (bnc#715104) * recalculate matrix formula dimension correctly (fdo#39485) * mark all formula cells dirty when appending a new sheet (fdo#35965) * components * handling of SAFEARRAY(s) in olebridge (fdo#38441) * filters * auto fit text VIEWING too small in PPT import (fdo#41245) * impress * hang in slideshow (fdo#32861) * crash while dropping texture (fdo#38391) * libs-core * recognize .svg in ODF container (fdo#41995) * dictionaries lost after LibO upgrade (fdo#37195) * crash when "Find Record" button is clicked in Base (fdo#40701) * fix the drawing of dotted and dashed borders in Calc (fdo#37129) * VBA control events not working; broken eventattacher (bnc#718227) * libs-extern-sys * upgrade graphite to 1.0.3 to fix surrogate support * libs-gui * crash when changing screen resolution * let Qt call XInitThreads() (fdo#40298) * activation order crashes address database (fdo#41022) * drawing of dotted and dashed borders in Calc (fdo#37129) * translations * update translations * writer * leak in PDF export (i#116448) * crash when editing index (bnc#726174) * crash while processing incorrect range of pages (fdo#35513) * crash on closing document with footnotes (fdo#39510, lp#854626) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-187 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libreoffice-3.4.5.5-97.1 libreoffice-base-3.4.5.5-97.1 libreoffice-base-debuginfo-3.4.5.5-97.1 libreoffice-base-drivers-mysql-3.4.5.5-97.1 libreoffice-base-drivers-mysql-debuginfo-3.4.5.5-97.1 libreoffice-base-drivers-postgresql-3.4.5.5-97.1 libreoffice-base-drivers-postgresql-debuginfo-3.4.5.5-97.1 libreoffice-base-extensions-3.4.5.5-97.1 libreoffice-calc-3.4.5.5-97.1 libreoffice-calc-debuginfo-3.4.5.5-97.1 libreoffice-calc-extensions-3.4.5.5-97.1 libreoffice-debuginfo-3.4.5.5-97.1 libreoffice-debugsource-3.4.5.5-97.1 libreoffice-draw-3.4.5.5-97.1 libreoffice-draw-extensions-3.4.5.5-97.1 libreoffice-draw-extensions-debuginfo-3.4.5.5-97.1 libreoffice-filters-optional-3.4.5.5-97.1 libreoffice-filters-optional-debuginfo-3.4.5.5-97.1 libreoffice-gnome-3.4.5.5-97.1 libreoffice-gnome-debuginfo-3.4.5.5-97.1 libreoffice-icon-themes-prebuilt-3.4.5.5-97.1 libreoffice-impress-3.4.5.5-97.1 libreoffice-impress-debuginfo-3.4.5.5-97.1 libreoffice-impress-extensions-3.4.5.5-97.1 libreoffice-impress-extensions-debuginfo-3.4.5.5-97.1 libreoffice-kde-3.4.5.5-97.1 libreoffice-kde-debuginfo-3.4.5.5-97.1 libreoffice-kde4-3.4.5.5-97.1 libreoffice-kde4-debuginfo-3.4.5.5-97.1 libreoffice-l10n-prebuilt-3.4.5.5-97.1 libreoffice-mailmerge-3.4.5.5-97.1 libreoffice-math-3.4.5.5-97.1 libreoffice-math-debuginfo-3.4.5.5-97.1 libreoffice-officebean-3.4.5.5-97.1 libreoffice-officebean-debuginfo-3.4.5.5-97.1 libreoffice-pyuno-3.4.5.5-97.1 libreoffice-pyuno-debuginfo-3.4.5.5-97.1 libreoffice-sdk-3.4.5.5-97.1 libreoffice-sdk-debuginfo-3.4.5.5-97.1 libreoffice-sdk-doc-3.4.5.5-97.1 libreoffice-testtool-3.4.5.5-97.1 libreoffice-testtool-debuginfo-3.4.5.5-97.1 libreoffice-writer-3.4.5.5-97.1 libreoffice-writer-debuginfo-3.4.5.5-97.1 libreoffice-writer-extensions-3.4.5.5-97.1 - openSUSE 11.4 (noarch): libreoffice-branding-upstream-3.4.5.5-97.1 libreoffice-help-cs-3.4.5.5-97.1 libreoffice-help-da-3.4.5.5-97.1 libreoffice-help-de-3.4.5.5-97.1 libreoffice-help-en-GB-3.4.5.5-97.1 libreoffice-help-en-US-3.4.5.5-97.1 libreoffice-help-en-ZA-3.4.5.5-97.1 libreoffice-help-es-3.4.5.5-97.1 libreoffice-help-et-3.4.5.5-97.1 libreoffice-help-fr-3.4.5.5-97.1 libreoffice-help-gl-3.4.5.5-97.1 libreoffice-help-gu-IN-3.4.5.5-97.1 libreoffice-help-hi-IN-3.4.5.5-97.1 libreoffice-help-hu-3.4.5.5-97.1 libreoffice-help-it-3.4.5.5-97.1 libreoffice-help-ja-3.4.5.5-97.1 libreoffice-help-km-3.4.5.5-97.1 libreoffice-help-ko-3.4.5.5-97.1 libreoffice-help-nl-3.4.5.5-97.1 libreoffice-help-pl-3.4.5.5-97.1 libreoffice-help-pt-3.4.5.5-97.1 libreoffice-help-pt-BR-3.4.5.5-97.1 libreoffice-help-ru-3.4.5.5-97.1 libreoffice-help-sl-3.4.5.5-97.1 libreoffice-help-sv-3.4.5.5-97.1 libreoffice-help-zh-CN-3.4.5.5-97.1 libreoffice-help-zh-TW-3.4.5.5-97.1 libreoffice-icon-theme-crystal-3.4.5.5-14.1 libreoffice-icon-theme-galaxy-3.4.5.5-14.1 libreoffice-icon-theme-hicontrast-3.4.5.5-14.1 libreoffice-icon-theme-oxygen-3.4.5.5-14.1 libreoffice-icon-theme-tango-3.4.5.5-14.1 libreoffice-l10n-af-3.4.5.5-122.1 libreoffice-l10n-ar-3.4.5.5-122.1 libreoffice-l10n-be-BY-3.4.5.5-122.1 libreoffice-l10n-bg-3.4.5.5-122.1 libreoffice-l10n-br-3.4.5.5-122.1 libreoffice-l10n-ca-3.4.5.5-122.1 libreoffice-l10n-cs-3.4.5.5-122.1 libreoffice-l10n-cy-3.4.5.5-122.1 libreoffice-l10n-da-3.4.5.5-122.1 libreoffice-l10n-de-3.4.5.5-122.1 libreoffice-l10n-el-3.4.5.5-122.1 libreoffice-l10n-en-GB-3.4.5.5-122.1 libreoffice-l10n-en-ZA-3.4.5.5-122.1 libreoffice-l10n-es-3.4.5.5-122.1 libreoffice-l10n-et-3.4.5.5-122.1 libreoffice-l10n-fi-3.4.5.5-122.1 libreoffice-l10n-fr-3.4.5.5-122.1 libreoffice-l10n-ga-3.4.5.5-122.1 libreoffice-l10n-gl-3.4.5.5-122.1 libreoffice-l10n-gu-IN-3.4.5.5-122.1 libreoffice-l10n-he-3.4.5.5-122.1 libreoffice-l10n-hi-IN-3.4.5.5-122.1 libreoffice-l10n-hr-3.4.5.5-122.1 libreoffice-l10n-hu-3.4.5.5-122.1 libreoffice-l10n-it-3.4.5.5-122.1 libreoffice-l10n-ja-3.4.5.5-122.1 libreoffice-l10n-ka-3.4.5.5-122.1 libreoffice-l10n-km-3.4.5.5-122.1 libreoffice-l10n-ko-3.4.5.5-122.1 libreoffice-l10n-lt-3.4.5.5-122.1 libreoffice-l10n-mk-3.4.5.5-122.1 libreoffice-l10n-nb-3.4.5.5-122.1 libreoffice-l10n-nl-3.4.5.5-122.1 libreoffice-l10n-nn-3.4.5.5-122.1 libreoffice-l10n-nr-3.4.5.5-122.1 libreoffice-l10n-pa-IN-3.4.5.5-122.1 libreoffice-l10n-pl-3.4.5.5-122.1 libreoffice-l10n-pt-3.4.5.5-122.1 libreoffice-l10n-pt-BR-3.4.5.5-122.1 libreoffice-l10n-ru-3.4.5.5-122.1 libreoffice-l10n-rw-3.4.5.5-122.1 libreoffice-l10n-sh-3.4.5.5-122.1 libreoffice-l10n-sk-3.4.5.5-122.1 libreoffice-l10n-sl-3.4.5.5-122.1 libreoffice-l10n-sr-3.4.5.5-122.1 libreoffice-l10n-ss-3.4.5.5-122.1 libreoffice-l10n-st-3.4.5.5-122.1 libreoffice-l10n-sv-3.4.5.5-122.1 libreoffice-l10n-tg-3.4.5.5-122.1 libreoffice-l10n-th-3.4.5.5-122.1 libreoffice-l10n-tr-3.4.5.5-122.1 libreoffice-l10n-ts-3.4.5.5-122.1 libreoffice-l10n-uk-3.4.5.5-122.1 libreoffice-l10n-ve-3.4.5.5-122.1 libreoffice-l10n-vi-3.4.5.5-122.1 libreoffice-l10n-xh-3.4.5.5-122.1 libreoffice-l10n-zh-CN-3.4.5.5-122.1 libreoffice-l10n-zh-TW-3.4.5.5-122.1 libreoffice-l10n-zu-3.4.5.5-122.1 References: http://support.novell.com/security/cve/CVE-2012-0037.html https://bugzilla.novell.com/101776 https://bugzilla.novell.com/116448 https://bugzilla.novell.com/117010 https://bugzilla.novell.com/31966 https://bugzilla.novell.com/32861 https://bugzilla.novell.com/35513 https://bugzilla.novell.com/35965 https://bugzilla.novell.com/37129 https://bugzilla.novell.com/37195 https://bugzilla.novell.com/38286 https://bugzilla.novell.com/38391 https://bugzilla.novell.com/38441 https://bugzilla.novell.com/39485 https://bugzilla.novell.com/39510 https://bugzilla.novell.com/39657 https://bugzilla.novell.com/39694 https://bugzilla.novell.com/40298 https://bugzilla.novell.com/40320 https://bugzilla.novell.com/40461 https://bugzilla.novell.com/40701 https://bugzilla.novell.com/41022 https://bugzilla.novell.com/41245 https://bugzilla.novell.com/41681 https://bugzilla.novell.com/417818 https://bugzilla.novell.com/41995 https://bugzilla.novell.com/42073 https://bugzilla.novell.com/42543 https://bugzilla.novell.com/44816 https://bugzilla.novell.com/45560 https://bugzilla.novell.com/46165 https://bugzilla.novell.com/46337 https://bugzilla.novell.com/621739 https://bugzilla.novell.com/653688 https://bugzilla.novell.com/655408 https://bugzilla.novell.com/657909 https://bugzilla.novell.com/667082 https://bugzilla.novell.com/677811 https://bugzilla.novell.com/685123 https://bugzilla.novell.com/693238 https://bugzilla.novell.com/693388 https://bugzilla.novell.com/695479 https://bugzilla.novell.com/699334 https://bugzilla.novell.com/703032 https://bugzilla.novell.com/704274 https://bugzilla.novell.com/705949 https://bugzilla.novell.com/705956 https://bugzilla.novell.com/705977 https://bugzilla.novell.com/705985 https://bugzilla.novell.com/705991 https://bugzilla.novell.com/706138 https://bugzilla.novell.com/706792 https://bugzilla.novell.com/707157 https://bugzilla.novell.com/714787 https://bugzilla.novell.com/715094 https://bugzilla.novell.com/715104 https://bugzilla.novell.com/715115 https://bugzilla.novell.com/715543 https://bugzilla.novell.com/717290 https://bugzilla.novell.com/718227 https://bugzilla.novell.com/718694 https://bugzilla.novell.com/718971 https://bugzilla.novell.com/719656 https://bugzilla.novell.com/719887 https://bugzilla.novell.com/719989 https://bugzilla.novell.com/720443 https://bugzilla.novell.com/720948 https://bugzilla.novell.com/722045 https://bugzilla.novell.com/722644 https://bugzilla.novell.com/722918 https://bugzilla.novell.com/723074 https://bugzilla.novell.com/724087 https://bugzilla.novell.com/726152 https://bugzilla.novell.com/726174 https://bugzilla.novell.com/727504 https://bugzilla.novell.com/728559 https://bugzilla.novell.com/728603 https://bugzilla.novell.com/733864 https://bugzilla.novell.com/734734 https://bugzilla.novell.com/734781 https://bugzilla.novell.com/735533 https://bugzilla.novell.com/736495 https://bugzilla.novell.com/737190 https://bugzilla.novell.com/737921 https://bugzilla.novell.com/738113 https://bugzilla.novell.com/740032 https://bugzilla.novell.com/740117 https://bugzilla.novell.com/740453 https://bugzilla.novell.com/741043 https://bugzilla.novell.com/741182 https://bugzilla.novell.com/742178 https://bugzilla.novell.com/746996 https://bugzilla.novell.com/747471 https://bugzilla.novell.com/748198 https://bugzilla.novell.com/748548 https://bugzilla.novell.com/794679