Hello community, here is the log from the commit of package libwpd checked in at Thu Mar 22 10:55:57 CET 2007. -------- --- libwpd/libwpd.changes 2007-01-14 17:12:49.000000000 +0100 +++ libwpd/libwpd.changes 2007-03-16 13:13:00.000000000 +0100 @@ -1,0 +2,14 @@ +Fri Mar 16 13:12:07 CET 2007 - stbinner@suse.de + +- update to version 0.8.9: + * Fix a bug in WP1 document type detection where we could try to + seek to a negative place in document (Fridrich) + * Fix a regression wrt. 0.8.7 preventing the conversion of tab table + in WP1 and WP3 file-format (Fridrich) + * Fixed several overflow bugs reported by iDefense. An attacker + could create a carefully crafted Word Perfect file that could + cause an application linked with libwpd, such as OpenOffice, to + crash or possibly execute arbitrary code if the file was opened + by a victim. (CVE-2007-0002) (iDefense's Sean Larsson, Fridrich) + +------------------------------------------------------------------- Old: ---- libwpd-0.8.8.tar.bz2 New: ---- libwpd-0.8.9.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libwpd.spec ++++++ --- /var/tmp/diff_new_pack.p24200/_old 2007-03-22 10:55:46.000000000 +0100 +++ /var/tmp/diff_new_pack.p24200/_new 2007-03-22 10:55:46.000000000 +0100 @@ -1,5 +1,5 @@ # -# spec file for package libwpd (Version 0.8.8) +# spec file for package libwpd (Version 0.8.9) # # Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -15,10 +15,10 @@ License: GNU Library General Public License v. 2.0 and 2.1 (LGPL) Group: System/Libraries Autoreqprov: on -Version: 0.8.8 +Version: 0.8.9 Release: 1 Summary: Library for Importing WordPerfect (tm) Documents -Source: %{name}-%{version}.tar.bz2 +Source: %{name}-%{version}.tar.gz URL: http://libwpd.sourceforge.net BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -116,7 +116,18 @@ %defattr (-, root, root) %{_bindir}/* -%changelog -n libwpd +%changelog +* Fri Mar 16 2007 - stbinner@suse.de +- update to version 0.8.9: + * Fix a bug in WP1 document type detection where we could try to + seek to a negative place in document (Fridrich) + * Fix a regression wrt. 0.8.7 preventing the conversion of tab table + in WP1 and WP3 file-format (Fridrich) + * Fixed several overflow bugs reported by iDefense. An attacker + could create a carefully crafted Word Perfect file that could + cause an application linked with libwpd, such as OpenOffice, to + crash or possibly execute arbitrary code if the file was opened + by a victim. (CVE-2007-0002) (iDefense's Sean Larsson, Fridrich) * Sun Jan 14 2007 - dmueller@suse.de - update to version 0.8.8: * Add unit tests for the stream class ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org