Bug 48762 – libreoffice: Multiple issues (4.2)

Bug 48762 - libreoffice: Multiple issues (4.2)


Summary:	libreoffice: Multiple issues (4.2)

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Security updates
Version:	UCS 4.2
Hardware:	All Linux

Importance:	P3 normal (vote)
Target Milestone:	UCS 4.2-5-errata
Assigned To:	Quality Assurance
QA Contact:	Philipp Hahn

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-02-26 11:34 CET by Quality Assurance
Modified:	2019-02-27 14:06 CET (History)
CC List:	0 users

See Also:
What kind of report is it?:	Security Issue
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:	7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Quality Assurance

2019-02-26 11:34:10 CET

New Debian libreoffice 1:4.3.3-2+deb8u12 fixes:
This update addresses the following issue:

* 1:4.3.3-2+deb8u12 (Thu, 07 Feb 2019 14:24:28 -0500) [ Antoine Beaupré ] *  non-maintainer upload for the LTS security team [ Rene Engelhard ] *  debian/patches/keep-pyuno-script-processing-below-base-uri.diff: as name  says (CVE-2018-16858)

* 1:4.3.3-2+deb8u12 (Thu, 07 Feb 2019 14:24:28 -0500) [ Antoine Beaupré ] *  non-maintainer upload for the LTS security team [ Rene Engelhard ] *  debian/patches/keep-pyuno-script-processing-below-base-uri.diff: as name  says (CVE-2018-16858)

* 1:4.3.3-2+deb8u12 (Thu, 07 Feb 2019 14:24:28 -0500) [ Antoine Beaupré ] *  non-maintainer upload for the LTS security team [ Rene Engelhard ] *  debian/patches/keep-pyuno-script-processing-below-base-uri.diff: as name  says (CVE-2018-16858)

Comment 1 Quality Assurance

2019-02-26 12:02:07 CET

--- mirror/ftp/4.2/unmaintained/4.2-4/source/libreoffice_4.3.3-2+deb8u11.dsc
+++ apt/ucs_4.2-0-errata4.2-5/source/libreoffice_4.3.3-2+deb8u12.dsc
@@ -1,3 +1,12 @@
+1:4.3.3-2+deb8u12 [Thu, 07 Feb 2019 14:24:28 -0500] Antoine Beaupré <anarcat@debian.org>:
+
+  [ Antoine Beaupré ]
+  * non-maintainer upload for the LTS security team
+
+  [ Rene Engelhard ]
+  * debian/patches/keep-pyuno-script-processing-below-base-uri.diff: as name
+    says (CVE-2018-16858)
+
 1:4.3.3-2+deb8u11 [Wed, 18 Apr 2018 16:50:25 +0200] Rene Engelhard <rene@debian.org>:
 
   * debian/patches/CVE-2018-10119.diff,

<http://10.200.17.11/4.2-5/#2339929097804827887>

Comment 2 Philipp Hahn

2019-02-26 18:28:52 CET

OK: yaml
OK: announce_errata
OK: patch
~OK: piuparts
 purge error in sister package

[4.2-5] 3473b83c0a Bug #48762: libreoffice 1:4.3.3-2+deb8u12
 doc/errata/staging/libreoffice.yaml | 17 ++---------------
 1 file changed, 2 insertions(+), 15 deletions(-)

[4.2-5] 095c0a3f9f Bug #48762: libreoffice 1:4.3.3-2+deb8u12
 doc/errata/staging/libreoffice.yaml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

Comment 3 Arvid Requate

2019-02-27 14:06:41 CET

<http://errata.software-univention.de/ucs/4.2/603.html>