Path to this page:
Subject: CVS commit: pkgsrc/misc/openoffice2-bin
From: Matthias Scheler
Date: 2008-04-20 15:17:55
Message id: 20080420131755.EEC96175D7@cvs.netbsd.org
Log Message:
Update "openoffice2-bin" package to version 2.4.0. This update fixes
the following security vulnerabilities:
- CVE-2007-4770/4771: Manipulated ODF text documents containing XForms can
lead to heap overflows and arbitrary code execution
- CVE-2007-5745/5747: Manipulated Quattro Pro files can lead to heap
overflows and arbitrary code execution
- CVE-2007-5746: Manipulated EMF files can lead to heap overflows and
arbitrary code execution
- CVE-2008-0320: Manipulated OLE files can lead to heap overflows and
arbitrary code execution
Files: