Raptor provides parsers for Resource Description Framework (RDF) files.

An XML External Entity expansion flaw was found in the way Raptor processed RDF files. If an application linked against Raptor were to open a specially crafted RDF file, it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running the application had access to. A bug in the way Raptor handled external entities could cause that application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2012-0037)

All Raptor users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications linked against Raptor must be restarted for this update to take effect.

Timothy D. Morgan discovered that Raptor would unconditionally load XML external entities. If a user were tricked into opening a specially crafted document in an application linked against Raptor, an attacker could possibly obtain access to arbitrary files on the user's system or potentially execute arbitrary code with the privileges of the user invoking the program.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- updated to libreoffice-3.4.5.5 (SUSE 3.4.5-rc3) :

  - extras

  - add SUSE color palette (fate#312645)

  - filters

  - crash when loading embedded elements (bnc#693238)

  - crash when importing an empty paragraph (rh#667082)

  - writer

  - do not use an invalidated iterator (fdo#46337)

  - updated to libreoffice-3.4.5.4 (SUSE 3.4.5-rc2)

  - calc

  - pie charts colors messed in XLS import (fdo#40320)

  - correctly import data point formats in data series     (fdo#40320)

  - components

  - crash when parsing XML signatures (fdo#39657)

  - broken getDataArray (fdo#46165, fdo#38441, i#117010)

  - don't paint a frame around the list of edit boxes     (fdo#42543)

  - inconsistent compression method for encrypted documents     (bnc#653688)

  - filters

  - more on bentConnectors (bnc#736495)

  - wrong text color in smartArt (bnc#746996)

  - reading of w:textbox contents (bnc#693388)

  - textbox position and size DOCX import (fdo#45560)

  - RTF/DOCX import of transparent frames (bnc#695479)

  - consecutive frames in RTF/DOCX import (bnc#703032)

  - handling of frame properties in RTF import (bnc#417818)

  - force imported XLSX active tab to be shown (bnc#748198)

  - create TableManager for inside shapes (bnc#747471,     bnc#693238)

  - textboxes import with OLE objects inside (bnc#747471,     bnc#693238)

  - impress

  - do not create an empty slide when printing handouts     (fdo#31966)

  - libs-core

  - default shortcut for .uno:SearchDialog should be Ctrl+H

  - crash using instances dialog of dataform navigator     (fdo#44816)

  - libs-extern

  - disable problematic reading of external entities in     raptor

  - libs-gui

  - correctly calculate leap year

  - use proper Indian Rupee currency symbol U+20B9     (rh#794679)

  - writer

  - field refreshing (fdo#39694)

  - more layout crashers (i#101776, fdo#39510)

  - textbox borders style and width in DOCX import     (fdo#45560)

  - expand all text fields when setting properties     (fdo#42073)

  - updated to libreoffice-3.4.5.3 (SUSE 3.4.5-rc1)

  - version 3.4.5.3, tag suse-3.4.5.3 (SUSE LO 3.4.5-rc1)

  - SmartArt import

  - custom shapes import

  - Oracle Java 1.7.0 detection

  - reading AES-encrypted ODF 1.2 documents as generated by     LO 3.5

  - base

  - iterator misuse (fdo #44040, bnc#742178)

  - calc

  - allow pasting to multiple ranges (bnc#715094)

  - correctly convert chart data ranges (bnc#727504)

  - definedName corruption for XLSX export (bnc#741182)

  - adjust/shrink the ranges while copying (bnc#677811)

  - extra graph data is displayed for label (bnc#717290)

  - getCellRangeByName failure for named range (bnc#738113)

  - graph in XLS file has dates displayed wrong (bnc#720443)

  - improve performance of large Excel documents     (bnc#715104)

  - display page background color/image properly     (bnc#722045)

  - pivot table output becoming empty on re-save     (bnc#715543)

  - encode virtual paths to local volume correctly     (bnc#719887)

  - avoid adjusting cell-anchored objects on other sheets     (bnc#726152)

  - make sure to adjust the sheet index of drawing objects     (bnc#733864)

  - make the data validation popup more reliable (fdo     #36851, bnc#737190)

  - filters

  - table style (bnc#705991)

  - text rotation fixes (bnc#734734)

  - crash in PPTX import (bnc#706792)

  - read w:sdt* contents (bnc#705949)

  - connector shape fixes (bnc#719989)

  - legacy fragment import (bnc#699334)

  - non-working Excel macros (bnc#705977)

  - free drawn curves import (bnc#657909)

  - group shape transformations (bnc#621739)

  - extLst of drawings in diagrams import (bnc#655408)

  - flip properties of custom shapes import (bnc#705985)

  - line spacing is used from previous values (bnc#734734)

  - missing ooxml customshape->mso shape name entries     (bnc#737921)

  - word doesn't break the numberings and prefers hiding     them (bnc#707157)

  - impress

  - undo corruption (bnc#685123)

  - do not set duplicate master slide names (bnc#735533)

  - libs-core

  - handle copy and paste from ConsoleOne (bnc#704274)

  - VBA control events not working, broken eventattacher     (bnc#718227)

  - 'General Error' when double-click graphic in     presentation (bnc#720948)

  - libs-extern-sys

  - upgrade graphite to 1.0.3 fix surrogate support

  - libs-gui

  - crash at exit (bnc#728603)

  - radial gradient offset (bnc#714787)

  - horizontal scrollbars with KDE oxygen style (bnc#722918)

  - rendering of metafiles embedded in EMF+ (updated)     (bnc#705956)

  - postprocess

  - make the 3D transitions work again (bnc#728559)

  - ure

  - make Duden Korrektor 5 and 6 work

  - writer

  - frame selection (bnc#740117)

  - crash when editing index (bnc#726174)

  - order database properties (bnc#740032)

  - numbering levels in DOC import (bnc#715115)

  - image size issue in DOC import (bnc#718971)

  - pointless forward moving of a table (bnc#706138)

  - tabs set after the end margin in DOCX import     (bnc#693238)

  - add hyperlinks by default in Table of Contents     (bnc#705956)

  - updated to libreoffice-3.4.4.3 (SUSE 3.4.4-rc1 == final) :

  - base

  - crash when inserting a constant in a query (fdo#38286)

  - calc

  - crash when modifying a named range

  - speed up range name lookup by index (bnc#715104)

  - recalculate matrix formula dimension correctly     (fdo#39485)

  - mark all formula cells dirty when appending a new sheet     (fdo#35965)

  - components

  - handling of SAFEARRAY(s) in olebridge (fdo#38441)

  - filters

  - auto fit text VIEWING too small in PPT import     (fdo#41245)

  - impress

  - hang in slideshow (fdo#32861)

  - crash while dropping texture (fdo#38391)

  - libs-core

  - recognize .svg in ODF container (fdo#41995)

  - dictionaries lost after LibO upgrade (fdo#37195)

  - crash when 'Find Record' button is clicked in Base     (fdo#40701)

  - fix the drawing of dotted and dashed borders in Calc     (fdo#37129)

  - VBA control events not working; broken eventattacher     (bnc#718227)

  - libs-extern-sys

  - upgrade graphite to 1.0.3 to fix surrogate support

  - libs-gui

  - crash when changing screen resolution

  - let Qt call XInitThreads() (fdo#40298)

  - activation order crashes address database (fdo#41022)

  - drawing of dotted and dashed borders in Calc (fdo#37129)

  - translations

  - update translations

  - writer

  - leak in PDF export (i#116448)

  - crash when editing index (bnc#726174)

  - crash while processing incorrect range of pages     (fdo#35513)

  - crash on closing document with footnotes (fdo#39510,     lp#854626)

It was discovered that Raptor, a RDF parser and serializer library, allows file inclusion through XML entities, resulting in information disclosure.

An XML External Entity expansion flaw was found in the way Raptor processed RDF files. If an application linked against Raptor were to open a specially crafted RDF file, it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running the application had access to. A bug in the way Raptor handled external entities could cause that application to crash or, possibly, execute arbitrary code with the privileges of the user running the application (CVE-2012-0037).

The updated packages have been patched to correct this issue.

raptor2 for Mandriva Linux 2011 has been upgraded to the 2.0.7 version which is not vulnerable to this issue.

This is new version of package that fixes CVE-2012-0037.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet application, presentation manager, formula editor, and a drawing program.
OpenOffice.org embeds a copy of Raptor, which provides parsers for Resource Description Framework (RDF) files.

An XML External Entity expansion flaw was found in the way Raptor processed RDF files. If OpenOffice.org were to open a specially crafted file (such as an OpenDocument Format or OpenDocument Presentation file), it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running OpenOffice.org had access to. A bug in the way Raptor handled external entities could cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org.
(CVE-2012-0037)

All OpenOffice.org users are advised to upgrade to these updated packages, which contain backported patches to correct this issue. All running instances of OpenOffice.org applications must be restarted for this update to take effect.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0411 advisory.

    OpenOffice.org is an office productivity suite that includes desktop     applications, such as a word processor, spreadsheet application,     presentation manager, formula editor, and a drawing program. OpenOffice.org     embeds a copy of Raptor, which provides parsers for Resource Description     Framework (RDF) files.

    An XML External Entity expansion flaw was found in the way Raptor processed     RDF files. If OpenOffice.org were to open a specially-crafted file (such     as an OpenDocument Format or OpenDocument Presentation file), it could     possibly allow a remote attacker to obtain a copy of an arbitrary local     file that the user running OpenOffice.org had access to. A bug in the way     Raptor handled external entities could cause OpenOffice.org to crash or,     possibly, execute arbitrary code with the privileges of the user running     OpenOffice.org. (CVE-2012-0037)

    Red Hat would like to thank Timothy D. Morgan of VSR for reporting this     issue.

    All OpenOffice.org users are advised to upgrade to these updated packages,     which contain backported patches to correct this issue. All running     instances of OpenOffice.org applications must be restarted for this update     to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated raptor packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Raptor provides parsers for Resource Description Framework (RDF) files.

An XML External Entity expansion flaw was found in the way Raptor processed RDF files. If an application linked against Raptor were to open a specially crafted RDF file, it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running the application had access to. A bug in the way Raptor handled external entities could cause that application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2012-0037)

Red Hat would like to thank Timothy D. Morgan of VSR for reporting this issue.

All Raptor users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications linked against Raptor must be restarted for this update to take effect.

Updated openoffice.org packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet application, presentation manager, formula editor, and a drawing program.
OpenOffice.org embeds a copy of Raptor, which provides parsers for Resource Description Framework (RDF) files.

An XML External Entity expansion flaw was found in the way Raptor processed RDF files. If OpenOffice.org were to open a specially crafted file (such as an OpenDocument Format or OpenDocument Presentation file), it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running OpenOffice.org had access to. A bug in the way Raptor handled external entities could cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org.
(CVE-2012-0037)

Red Hat would like to thank Timothy D. Morgan of VSR for reporting this issue.

All OpenOffice.org users are advised to upgrade to these updated packages, which contain backported patches to correct this issue. All running instances of OpenOffice.org applications must be restarted for this update to take effect.

new raptor2-2.0.7 release highlights :

  - CVE-2012-0037 fixed

    - Removed Expat support

    - Removed internal Unicode NFC code for better and       optional ICU

    - Added options for denying file requests and XML entity       loading

    - Added options for SSL certificate verifying

    - Fixed reported issues: 0000448 and 0000469

See also http://librdf.org/raptor/RELEASE.html#rel2_0_7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of OpenOffice.org that has flaws in the way certain XML components are processed for external entities in ODF documents. These flaws can be utilized to access and inject the content of local files into an ODF document without a user's knowledge or permission, or inject arbitrary code that would be executed when opened by the user.

- updated to libreoffice-3.4.5.4 (SUSE 3.4.5-rc2)

  - calc

  - pie charts colors messed in XLS import (fdo#40320)

  - correctly import data point formats in data series     (fdo#40320)

  - components

  - crash when parsing XML signatures (fdo#39657)

  - broken getDataArray (fdo#46165, fdo#38441, i#117010)

  - don't paint a frame around the list of edit boxes     (fdo#42543)

  - inconsistent compression method for encrypted documents     (bnc#653688)

  - filters

  - more on bentConnectors (bnc#736495)

  - wrong text color in smartArt (bnc#746996)

  - reading of w:textbox contents (bnc#693388)

  - textbox position and size DOCX import (fdo#45560)

  - RTF/DOCX import of transparent frames (bnc#695479)

  - consecutive frames in RTF/DOCX import (bnc#703032)

  - handling of frame properties in RTF import (bnc#417818)

  - force imported XLSX active tab to be shown (bnc#748198)

  - create TableManager for inside shapes (bnc#747471,     bnc#693238)

  - textboxes import with OLE objects inside (bnc#747471,     bnc#693238)

  - impress

  - do not create an empty slide when printing handouts     (fdo#31966)

  - libs-core

  - default shortcut for .uno:SearchDialog should be Ctrl+H

  - crash using instances dialog of dataform navigator     (fdo#44816)

  - libs-extern

  - disable problematic reading of external entities in     raptor

  - libs-gui

  - correctly calculate leap year

  - use proper Indian Rupee currency symbol U+20B9     (rh#794679)

  - writer

  - field refreshing (fdo#39694)

  - more layout crashers (i#101776, fdo#39510)

  - textbox borders style and width in DOCX import     (fdo#45560)

  - expand all text fields when setting properties     (fdo#42073)

  - updated to libreoffice-3.4.5.3 (SUSE 3.4.5-rc1)

  - version 3.4.5.3, tag suse-3.4.5.3 (SUSE LO 3.4.5-rc1)

  - SmartArt import

  - custom shapes import

  - Oracle Java 1.7.0 detection

  - reading AES-encrypted ODF 1.2 documents as generated by     LO 3.5

  - base

  - iterator misuse (fdo #44040, bnc#742178)

  - calc

  - allow pasting to multiple ranges (bnc#715094)

  - correctly convert chart data ranges (bnc#727504)

  - definedName corruption for XLSX export (bnc#741182)

  - adjust/shrink the ranges while copying (bnc#677811)

  - extra graph data is displayed for label (bnc#717290)

  - getCellRangeByName failure for named range (bnc#738113)

  - graph in XLS file has dates displayed wrong (bnc#720443)

  - improve performance of large Excel documents     (bnc#715104)

  - display page background color/image properly     (bnc#722045)

  - pivot table output becoming empty on re-save     (bnc#715543)

  - encode virtual paths to local volume correctly     (bnc#719887)

  - avoid adjusting cell-anchored objects on other sheets     (bnc#726152)

  - make sure to adjust the sheet index of drawing objects     (bnc#733864)

  - make the data validation popup more reliable (fdo     #36851, bnc#737190)

  - filters

  - table style (bnc#705991)

  - text rotation fixes (bnc#734734)

  - crash in PPTX import (bnc#706792)

  - read w:sdt* contents (bnc#705949)

  - connector shape fixes (bnc#719989)

  - legacy fragment import (bnc#699334)

  - non-working Excel macros (bnc#705977)

  - free drawn curves import (bnc#657909)

  - group shape transformations (bnc#621739)

  - extLst of drawings in diagrams import (bnc#655408)

  - flip properties of custom shapes import (bnc#705985)

  - line spacing is used from previous values (bnc#734734)

  - missing ooxml customshape->mso shape name entries     (bnc#737921)

  - word doesn't break the numberings and prefers hiding     them (bnc#707157)

  - impress

  - undo corruption (bnc#685123)

  - do not set duplicate master slide names (bnc#735533)

  - libs-core

  - handle copy and paste from ConsoleOne (bnc#704274)

  - VBA control events not working, broken eventattacher     (bnc#718227)

  - 'General Error' when double-click graphic in     presentation (bnc#720948)

  - libs-extern-sys

  - upgrade graphite to 1.0.3 fix surrogate support

  - libs-gui

  - crash at exit (bnc#728603)

  - radial gradient offset (bnc#714787)

  - horizontal scrollbars with KDE oxygen style (bnc#722918)

  - rendering of metafiles embedded in EMF+ (updated)     (bnc#705956)

  - postprocess

  - make the 3D transitions work again (bnc#728559)

  - ure

  - make Duden Korrektor 5 and 6 work

  - writer

  - frame selection (bnc#740117)

  - crash when editing index (bnc#726174)

  - order database properties (bnc#740032)

  - numbering levels in DOC import (bnc#715115)

  - image size issue in DOC import (bnc#718971)

  - pointless forward moving of a table (bnc#706138)

  - tabs set after the end margin in DOCX import     (bnc#693238)

  - add hyperlinks by default in Table of Contents     (bnc#705956)

  - updated to libreoffice-3.4.4.3 (SUSE 3.4.4-rc1 == final) :

  - base

  - crash when inserting a constant in a query (fdo#38286)

  - calc

  - crash when modifying a named range

  - speed up range name lookup by index (bnc#715104)

  - recalculate matrix formula dimension correctly     (fdo#39485)

  - mark all formula cells dirty when appending a new sheet     (fdo#35965)

  - components

  - handling of SAFEARRAY(s) in olebridge (fdo#38441)

  - filters

  - auto fit text VIEWING too small in PPT import     (fdo#41245)

  - impress

  - hang in slideshow (fdo#32861)

  - crash while dropping texture (fdo#38391)

  - libs-core

  - recognize .svg in ODF container (fdo#41995)

  - dictionaries lost after LibO upgrade (fdo#37195)

  - crash when 'Find Record' button is clicked in Base     (fdo#40701)

  - fix the drawing of dotted and dashed borders in Calc     (fdo#37129)

  - VBA control events not working; broken eventattacher     (bnc#718227)

  - libs-extern-sys

  - upgrade graphite to 1.0.3 to fix surrogate support

  - libs-gui

  - crash when changing screen resolution

  - let Qt call XInitThreads() (fdo#40298)

  - activation order crashes address database (fdo#41022)

  - drawing of dotted and dashed borders in Calc (fdo#37129)

  - translations

  - update translations

  - writer

  - leak in PDF export (i#116448)

  - crash when editing index (bnc#726174)

  - crash while processing incorrect range of pages     (fdo#35513)

  - crash on closing document with footnotes (fdo#39510,     lp#854626)

LibreOffice 3.4.5 includes many fixes over the previous LibreOffice 3.4.2.6 update.

The update fixes the following security issues :

  - 740453: Vulnerability in RDF handling. (CVE-2012-0037)

  - 752595: overflow in jpeg handling. (CVE-2012-1149)

  - 736146: buffer overflow in the build in icu copy     (736146) This update also fixes the following     non-security issues :

Extras :

  - add SUSE color palette (fate#312645) Filters :

  - crash when loading embedded elements. (bnc#693238)

  - crash when importing an empty paragraph (rh#667082)

  - more on bentConnectors. (bnc#736495)

  - wrong text color in smartArt. (bnc#746996)

  - reading of w:textbox contents. (bnc#693388)

  - textbox position and size DOCX import (fdo#45560)

  - RTF/DOCX import of transparent frames. (bnc#695479)

  - consecutive frames in RTF/DOCX import. (bnc#703032)

  - handling of frame properties in RTF import. (bnc#417818)

  - force imported XLSX active tab to be shown. (bnc#748198)

  - create TableManager for inside shapes. (bnc#747471,     bnc#693238)

  - textboxes import with OLE objects inside. (bnc#747471,     bnc#693238)

  - table style. (bnc#705991)

  - text rotation fixes. (bnc#734734)

  - crash in PPTX import. (bnc#706792)

  - read w:sdt* contents. (bnc#705949)

  - connector shape fixes. (bnc#719989)

  - legacy fragment import. (bnc#699334)

  - non-working Excel macros. (bnc#705977)

  - free drawn curves import. (bnc#657909)

  - group shape transformations. (bnc#621739)

  - extLst of drawings in diagrams import. (bnc#655408)

  - flip properties of custom shapes import. (bnc#705985)

  - line spacing is used from previous values. (bnc#734734)

  - missing ooxml customshape->mso shape name entries.
    (bnc#737921)

  - word doesn't break the numberings and prefers hiding     them. (bnc#707157)

Base :

  - iterator misuse (fdo #44040, bnc#742178) Writer :

  - do not use an invalidated iterator (fdo#46337)

  - field refreshing (fdo#39694)

  - more layout crashers (i#101776, fdo#39510)

  - textbox borders style and width in DOCX import     (fdo#45560)

  - expand all text fields when setting properties     (fdo#42073)

  - version 3.4.5.3, tag suse-3.4.5.3 (SUSE LO 3.4.5-rc1)

  - SmartArt import

  - custom shapes import

  - Oracle Java 1.7.0 detection

  - reading AES-encrypted ODF 1.2 documents as generated by     LO 3.5

  - frame selection. (bnc#740117)

  - crash when editing index. (bnc#726174)

  - order database properties. (bnc#740032)

  - numbering levels in DOC import. (bnc#715115)

  - image size issue in DOC import. (bnc#718971)

  - pointless forward moving of a table. (bnc#706138)

  - tabs set after the end margin in DOCX import.
    (bnc#693238)

  - add hyperlinks by default in Table of Contents     (bnc#705956) Calc :

  - pie charts colors messed in XLS import (fdo#40320)

  - correctly import data point formats in data series     (fdo#40320) Components :

  - crash when parsing XML signatures (fdo#39657)

  - broken getDataArray (fdo#46165, fdo#38441, i#117010)

  - don't paint a frame around the list of edit boxes     (fdo#42543)

  - inconsistent compression method for encrypted documents.
    (bnc#653688)

  - allow pasting to multiple ranges. (bnc#715094)

  - correctly convert chart data ranges. (bnc#727504)

  - definedName corruption for XLSX export. (bnc#741182)

  - adjust/shrink the ranges while copying. (bnc#677811)

  - extra graph data is displayed for label. (bnc#717290)

  - getCellRangeByName failure for named range. (bnc#738113)

  - graph in XLS file has dates displayed wrong.
    (bnc#720443)

  - improve performance of large Excel documents.
    (bnc#715104)

  - display page background color/image properly.
    (bnc#722045)

  - pivot table output becoming empty on re-save.
    (bnc#715543)

  - encode virtual paths to local volume correctly.
    (bnc#719887)

  - avoid adjusting cell-anchored objects on other sheets.
    (bnc#726152)

  - make sure to adjust the sheet index of drawing objects.
    (bnc#733864)

  - make the data validation popup more reliable (fdo     #36851, bnc#737190) Impress :

  - do not create an empty slide when printing handouts     (fdo#31966)

  - undo corruption. (bnc#685123)

  - do not set duplicate master slide names (bnc#735533)     Libraries :

  - default shortcut for .uno:SearchDialog should be Ctrl+H

  - crash using instances dialog of dataform navigator     (fdo#44816)

  - disable problematic reading of external entities in     raptor

  - correctly calculate leap year

  - use proper Indian Rupee currency symbol U+20B9     (rh#794679)

  - handle copy and paste from ConsoleOne. (bnc#704274)

  - VBA control events not working, broken eventattacher.
    (bnc#718227)

  - 'General Error' when double-click graphic in     presentation. (bnc#720948)

  - upgrade graphite to 1.0.3 fix surrogate support

  - crash at exit. (bnc#728603)

  - radial gradient offset. (bnc#714787)

  - horizontal scrollbars with KDE oxygen style.
    (bnc#722918)

  - rendering of metafiles embedded in EMF+ (updated)     (bnc#705956) Postprocess :

  - make the 3D transitions work again (bnc#728559) URE :

  - make Duden Korrektor 5 and 6 work General :

  - add compat symlinks for the old main desktop icon.
    (bnc#724087)

  - Fix tooltips are all black in KDE4 (bnc#723074,     fdo#40461)

  - do-not-display-math-in-desktop-menu.diff: do not display     math in desktop menu (fdo#41681)

  - desktop-submenu.diff: display LO application in the     right desktop submenu. (bnc#718694)

  - bash-completion-for-loffice.diff: define bash completion     for 'loffice' wrapper. (bnc#719656)

  - svx-globlmn-hrc-build-dep.diff: fix build dependency     problem in svx

The update fixes the following security issues :

  - 740453: Vulnerability in RDF handling. (CVE-2012-0037)

  - 752595: overflow in jpeg handling (CVE-2012-1149) This     update also fixes the following non-security issues :

Extras :

  - add SUSE color palette (fate#312645) Filters :

  - crash when loading embedded elements. (bnc#693238)

  - crash when importing an empty paragraph (rh#667082)

  - more on bentConnectors. (bnc#736495)

  - wrong text color in smartArt. (bnc#746996)

  - reading of w:textbox contents. (bnc#693388)

  - textbox position and size DOCX import (fdo#45560)

  - RTF/DOCX import of transparent frames. (bnc#695479)

  - consecutive frames in RTF/DOCX import. (bnc#703032)

  - handling of frame properties in RTF import. (bnc#417818)

  - force imported XLSX active tab to be shown. (bnc#748198)

  - create TableManager for inside shapes. (bnc#747471,     bnc#693238)

  - textboxes import with OLE objects inside. (bnc#747471,     bnc#693238)

  - table style. (bnc#705991)

  - text rotation fixes. (bnc#734734)

  - crash in PPTX import. (bnc#706792)

  - read w:sdt* contents. (bnc#705949)

  - connector shape fixes. (bnc#719989)

  - legacy fragment import. (bnc#699334)

  - non-working Excel macros. (bnc#705977)

  - free drawn curves import. (bnc#657909)

  - group shape transformations. (bnc#621739)

  - extLst of drawings in diagrams import. (bnc#655408)

  - flip properties of custom shapes import. (bnc#705985)

  - line spacing is used from previous values. (bnc#734734)

  - missing ooxml customshape->mso shape name entries.
    (bnc#737921)

  - word doesn't break the numberings and prefers hiding     them (bnc#707157) Base :

  - iterator misuse (fdo #44040, bnc#742178) Writer :

  - do not use an invalidated iterator (fdo#46337)

  - field refreshing (fdo#39694)

  - more layout crashers (i#101776, fdo#39510)

  - textbox borders style and width in DOCX import     (fdo#45560)

  - expand all text fields when setting properties     (fdo#42073)

  - version 3.4.5.3, tag suse-3.4.5.3 (SUSE LO 3.4.5-rc1)

  - SmartArt import

  - custom shapes import

  - Oracle Java 1.7.0 detection

  - reading AES-encrypted ODF 1.2 documents as generated by     LO 3.5

  - frame selection. (bnc#740117)

  - crash when editing index. (bnc#726174)

  - order database properties. (bnc#740032)

  - numbering levels in DOC import. (bnc#715115)

  - image size issue in DOC import. (bnc#718971)

  - pointless forward moving of a table. (bnc#706138)

  - tabs set after the end margin in DOCX import.
    (bnc#693238)

  - add hyperlinks by default in Table of Contents     (bnc#705956) Calc :

  - pie charts colors messed in XLS import (fdo#40320)

  - correctly import data point formats in data series     (fdo#40320) Components :

  - crash when parsing XML signatures (fdo#39657)

  - broken getDataArray (fdo#46165, fdo#38441, i#117010)

  - don't paint a frame around the list of edit boxes     (fdo#42543)

  - inconsistent compression method for encrypted documents.
    (bnc#653688)

  - allow pasting to multiple ranges. (bnc#715094)

  - correctly convert chart data ranges. (bnc#727504)

  - definedName corruption for XLSX export. (bnc#741182)

  - adjust/shrink the ranges while copying. (bnc#677811)

  - extra graph data is displayed for label. (bnc#717290)

  - getCellRangeByName failure for named range. (bnc#738113)

  - graph in XLS file has dates displayed wrong.
    (bnc#720443)

  - improve performance of large Excel documents.
    (bnc#715104)

  - display page background color/image properly.
    (bnc#722045)

  - pivot table output becoming empty on re-save.
    (bnc#715543)

  - encode virtual paths to local volume correctly.
    (bnc#719887)

  - avoid adjusting cell-anchored objects on other sheets.
    (bnc#726152)

  - make sure to adjust the sheet index of drawing objects.
    (bnc#733864)

  - make the data validation popup more reliable (fdo     #36851, bnc#737190) Impress :

  - do not create an empty slide when printing handouts     (fdo#31966)

  - undo corruption. (bnc#685123)

  - do not set duplicate master slide names (bnc#735533)     Libraries :

  - default shortcut for .uno:SearchDialog should be Ctrl+H

  - crash using instances dialog of dataform navigator     (fdo#44816)

  - disable problematic reading of external entities in     raptor

  - correctly calculate leap year

  - use proper Indian Rupee currency symbol U+20B9     (rh#794679)

  - handle copy and paste from ConsoleOne. (bnc#704274)

  - VBA control events not working, broken eventattacher.
    (bnc#718227)

  - 'General Error' when double-click graphic in     presentation. (bnc#720948)

  - upgrade graphite to 1.0.3 fix surrogate support

  - crash at exit. (bnc#728603)

  - radial gradient offset. (bnc#714787)

  - horizontal scrollbars with KDE oxygen style.
    (bnc#722918)

  - rendering of metafiles embedded in EMF+ (updated)     (bnc#705956) Postprocess :

  - make the 3D transitions work again (bnc#728559) URE :

  - make Duden Korrektor 5 and 6 work General :

  - add compat symlinks for the old main desktop icon.
    (bnc#724087)

  - Fix tooltips are all black in KDE4 (bnc#723074,     fdo#40461)

  - do-not-display-math-in-desktop-menu.diff: do not display     math in desktop menu (fdo#41681)

  - desktop-submenu.diff: display LO application in the     right desktop submenu. (bnc#718694)

  - bash-completion-for-loffice.diff: define bash completion     for 'loffice' wrapper. (bnc#719656)

  - svx-globlmn-hrc-build-dep.diff: fix build dependency     problem in svx

  - Update gdocs extension to version 3.0.0; needed to make     it working with the current Google Docs interface

ID	名稱	產品	系列	已發布	已更新	嚴重性
61288	Scientific Linux Security Update : raptor on SL6.x i386/x86_64 (20120322)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
67206	Ubuntu 12.04 LTS : raptor2 vulnerability (USN-1901-1)	Nessus	Ubuntu Local Security Checks	2013/7/9	2019/9/19	medium
74581	openSUSE Security Update : libreoffice (openSUSE-SU-2012:0428-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
58436	Debian DSA-2438-1 : raptor - programming error	Nessus	Debian Local Security Checks	2012/3/23	2021/1/11	medium
58830	Mandriva Linux Security Advisory : raptor (MDVSA-2012:061)	Nessus	Mandriva Local Security Checks	2012/4/23	2021/1/6	medium
60158	Fedora 17 : raptor-1.4.21-12.fc17 (2012-10591)	Nessus	Fedora Local Security Checks	2012/7/31	2021/1/11	medium
61287	Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64 (20120322)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
58442	RHEL 5 : openoffice.org (RHSA-2012:0411)	Nessus	Red Hat Local Security Checks	2012/3/23	2024/11/4	medium
58457	CentOS 6 : raptor (CESA-2012:0410)	Nessus	CentOS Local Security Checks	2012/3/26	2021/1/4	medium
58458	CentOS 5 : openoffice.org (CESA-2012:0411)	Nessus	CentOS Local Security Checks	2012/3/26	2021/1/4	medium
58696	Fedora 17 : raptor2-2.0.7-1.fc17 (2012-4629)	Nessus	Fedora Local Security Checks	2012/4/12	2021/1/11	medium
58727	OpenOffice XML External Entity RDF Document Handling Information Disclosure	Nessus	Windows	2012/4/12	2018/7/16	high
58731	Fedora 16 : raptor2-2.0.7-1.fc16 (2012-4663)	Nessus	Fedora Local Security Checks	2012/4/13	2021/1/11	medium
74584	openSUSE Security Update : libreoffice (openSUSE-SU-2012:0433-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
58577	SuSE 10 Security Update : LibreOffice (ZYPP Patch Number 8022)	Nessus	SuSE Local Security Checks	2012/4/3	2021/1/19	high
58721	SuSE 11.1 Security Update : LibreOffice (SAT Patch Number 6003)	Nessus	SuSE Local Security Checks	2012/4/12	2021/1/19	high

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

high

high