=========================================================== 
Ubuntu Security Notice USN-444-1             March 27, 2007
openoffice.org(2)/-amd64, ia32-libs-openoffice.org vulnerabilities
CVE-2007-0238, CVE-2007-0239
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 5.10
Ubuntu 6.06 LTS
Ubuntu 6.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 5.10:
  openoffice.org2-calc                     1.9.129-0.1ubuntu4.3-1
  openoffice.org2-core                     1.9.129-0.1ubuntu4.3-1

Ubuntu 6.06 LTS:
  ia32-libs-openoffice.org                 11.0.2
  openoffice.org-calc                      2.0.2-2ubuntu12.3
  openoffice.org-core                      2.0.2-2ubuntu12.3
  openoffice.org2-base                     2.0.2-2ubuntu12.3
  openoffice.org2-calc                     2.0.2-2ubuntu12.3

Ubuntu 6.10:
  openoffice.org-calc                      2.0.4-0ubuntu5
  openoffice.org-core                      2.0.4-0ubuntu5

After a standard system upgrade you need to restart OpenOffice, or 
reboot your computer to effect the necessary changes.

Details follow:

A stack overflow was discovered in OpenOffice.org's StarCalc parser.  If 
a user were tricked into opening a specially crafted document, a remote 
attacker could execute arbitrary code with user privileges.  
(CVE-2007-0238)

A flaw was discovered in OpenOffice.org's link handling code.  If a user 
were tricked into clicking a link in a specially crafted document, a 
remote attacker could execute arbitrary shell commands with user 
privileges.  (CVE-2007-0239)


Updated packages for Ubuntu 5.10:

  Source archives:

          Size/MD5:    30265 bc31b32edcc402b634342e6283445967
          Size/MD5:      934 ed161257c2e64f0bcaea3e515a0c7917
          Size/MD5: 288051699 9512d0f247122f2664a58975ba214cfc
          Size/MD5: 42659946 11cf90f51a5a9bebd7971ddbce633724
          Size/MD5:     2745 a3cd25459cbc0dd16201fa96f5f738ef
          Size/MD5: 193239182 ca8c3fd5718fc31343abef213cb4df8d

  Architecture independent packages:

          Size/MD5: 22894890 485ec573020ef9b3858c62207d1c3533
          Size/MD5:  4783356 8aa4e02044d9e863c774faf441fe74d1
          Size/MD5:  2792916 8231acf0f98e1757ed223568e1415145
          Size/MD5:   588310 ea3055e78989b0bf17767df2141ac2a8
          Size/MD5:   145654 ef79aac02dd8ec7b1c09904200845c11

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2768996 ddf9a3f05d9501dd22feb7c78638c31a
          Size/MD5:  3514616 7dea34493527015a270183d65406bd0a
          Size/MD5: 31007356 1aea9d8396ada6644644a72073aa1ca7
          Size/MD5:  1749184 8512ac998ff13f631773954a6a043019
          Size/MD5:  7767994 af4f3e822c962c459e1ab841c53b2861
          Size/MD5:   209414 d2d037c7f569f1318b46191ec475ed14
          Size/MD5:   549826 b3df38b59d2dc676304e7c99a61ae36e
          Size/MD5:   191320 fe4b36828363f6b663891b516eec673d
          Size/MD5:   306618 d211eef908939723f278edf2e9b671b5
          Size/MD5:  4677042 5f02fc048e4271bf18b6a6cfc96e9041
          Size/MD5:    29618 65f260b37915c6e2c8c979cf1b55fc50

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:   103062 570801c860507842005d1f628f048ee8
          Size/MD5:  2815936 55ef3da80e4d75f19fbe38bee81eccba
          Size/MD5:  3561778 f9e9ecdd806491809838b99f71c2c078
          Size/MD5: 31053696 d852c7a5c9c655110d79d3ccba4ad6bc
          Size/MD5:  3600118 a69fcb4d5f30cca1be96466fe20bb9b1
          Size/MD5:  1795954 7d0307219784b40177267979be43dde6
          Size/MD5:   145444 8c1aabd6ba20f9740ab446b0eb8a1c76
          Size/MD5:  7814934 91edd8d5a07a6cd9c0c0abcf31d69b85
          Size/MD5:   256352 d956f0fb33e82e2233527134d737ed32
          Size/MD5:   596540 70f0b004af414caeae94e368dd88a90d
          Size/MD5:   237412 5116c3847f1db1107d277ec5b35d31a2
          Size/MD5:   353352 9d416bbb60d89c62a0bd7a58c5d35501
          Size/MD5:   114036 d1c9825306c468aa046ae9dbe2704f3a
          Size/MD5:  4724076 0fb1fe1317fbf671ad7b07b1c3e05b4e
          Size/MD5:    75608 08ab0920a210752ba9200db70ee85833
          Size/MD5:   206978 a8593d701bb1dc8b578dd9c0631ec698

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:   107604 1ae97c4a976cad57000afd02120736d6
          Size/MD5:  3521058 6eba3e2b7201834166054ea186633e7b
          Size/MD5:  4402754 c87e6e28061cf83e1f12cd8802528a9c
          Size/MD5: 36491168 4a629cc6e78d6bf73f915d7b0b7cf086
          Size/MD5:  3832994 25827bd16f9031f971c5c3a582d3e753
          Size/MD5:  2052792 f8aae88e0ac8e5bf6472d8419e00a35c
          Size/MD5:   163258 01a64cf02cf061ceee70fa8657ef7930
          Size/MD5:  9393660 0063d32c109547491bfae816cf13d3f6
          Size/MD5:   271158 55db4473a796caa9154fddf6a1543934
          Size/MD5:   745588 10dce9ff8f1c659829384ca9ef7990fb
          Size/MD5:   257478 52623c0e52e8b0cb580f0389d704c6e6
          Size/MD5:   381934 d6a5ce7d5c94f63ca6158ac548eefc90
          Size/MD5:   116676 57a4c55a476b63e06cf414defb40a10c
          Size/MD5:  5636250 4919b1b22d273ef8a9f8c1d5072247d6
          Size/MD5:    75618 642318f76be164ac8bfd30dbe64b34bf
          Size/MD5:   215262 a6924cc4e1ff74ce9ea6da7d204d9583

Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:     4102 59bd0a4cf7d2ccf0ddb992e8827feacf
          Size/MD5:      670 d089574ab1d35e54730fbb4e299028a7
          Size/MD5: 149166113 ebb8854c34d9db1b51dde45504fb4d97
          Size/MD5:    36100 b9e4ce73719fecb471885c2ca7330469
          Size/MD5:     1038 c2b0fc7b45b6bc550233084aec998e3c
          Size/MD5: 330960081 fc32c1c14ff83d86ef3a8dc0715fa95e
          Size/MD5: 73018011 2e7c6d3f5d3b65095eba7aa1e33f8ddb
          Size/MD5:     3264 06bd5e0fd2a1165a9888e80e11f16e25
          Size/MD5: 206094795 b789f87aaa1f943a47a75740a73ba7cc

  Architecture independent packages:

          Size/MD5: 26440604 d5005d441a48ad68df180dd1e51ab987
          Size/MD5:  4810576 fea69a4340ebbb3ebfbafc5a83bc588a
          Size/MD5:      920 ca5bac02de64d3330ba3ec1f7b7e3522
          Size/MD5:  2404466 53f888ea82b921d46c1b85448dce5687
          Size/MD5:   605236 551396c98133a6a36d50aa74e02a340f
          Size/MD5:  2092680 effa3dbbd2278711558b0a28fe9250c3
          Size/MD5:      922 15be94d11a53888282c0543ad8b1f7f4
          Size/MD5:      922 a267746c2ab752da71343dd1209edbfe
          Size/MD5:      924 bfcbb59bb3a3c123be96945800f3fe55
          Size/MD5:      920 cb10efa1dc657fdfe53e231065a007ad
          Size/MD5:      924 7ef9dcbd5fac9a929c2ce67936dbead4
          Size/MD5:      918 8e071405f8dec7195aef97371c15c076
          Size/MD5:      922 4f40cbc840829e12af01b495b5d277db
          Size/MD5:      928 4b09fb9ea8edc7bca8561012dd42bad9
          Size/MD5:      904 10f1182fd829e0c446f26a174b4a38c2
          Size/MD5:   161914 c76a677697afcb13f7807f0f52f25601

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5: 16054978 50120ddb79813ecd4de27de0ba400617
          Size/MD5:  2913168 9c2475f3692c7c47d689155093696d5b
          Size/MD5:  3898494 fc857b9e3814b8f87615ab547006540d
          Size/MD5: 29660200 0c22c7bf9fb39675df1f12ea5dc904be
          Size/MD5:  1843478 ca369fbb0cc6e4d1ef84fc88ae6c3722
          Size/MD5:  7917106 77527455d6c895a39a60878c79570f58
          Size/MD5:     6870 c8241ffff17d2db5ca726463e4ffa075
          Size/MD5:   203314 013aa6a9a5866ca3fc0bddcfb666769c
          Size/MD5:   564906 eb9ead89eed3ca224fd77d6ef74265a0
          Size/MD5:   190426 4b22735a6b77dfdedc622bb7ac53ce7d
          Size/MD5:   289960 05db842fe1af5ecbf9a26e3ae66c2ce5
          Size/MD5:   581282 d16dfb345182372dc30fcceaa5588cf2
          Size/MD5:  4806772 640dd39cbc3f4ed9f7934be56fc50205
          Size/MD5:     1842 5f9d51364f4418ffbcad4eed69d2fde2

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:    98366 35cdf7747c2a54431159f86db9eb5615
          Size/MD5:  2913546 1a2e3d65bd4f0bd2a45d116ef8d2681f
          Size/MD5:  3898876 ae0152125bd299486115fbd63cd96691
          Size/MD5: 29721828 4efd0e1a3b132715d4ce9e59e05583da
          Size/MD5:  3868856 c9991018563015750e6cd05e5a676680
          Size/MD5:  1843848 c97e87d89f7a7c6a6151b673ed6e6ded
          Size/MD5:    80736 aae02f24cbb9b6721d844fa872abb891
          Size/MD5:  7917274 25f3bfafd00e00fd6dadbb672d3293f2
          Size/MD5:  3295260 8ced1a4f17c50da959aa6f1613b72d6c
          Size/MD5:    59602 0333688b524bb63796a14e9b8ef7c253
          Size/MD5:   203592 11823a595217b6d41d05cc831e274c52
          Size/MD5:   565266 117b1978caea4a10d83be82e0b571cf4
          Size/MD5:   190614 e8c49586079bff301fafbb442b281058
          Size/MD5:   290324 4521f74b825de84e67fac05df7532a45
          Size/MD5:    45482 8d0aaf3841fe1268850b58112b8eee9e
          Size/MD5:   582216 8bc6ae9b00a0bec7b97d40686cf99e81
          Size/MD5:  4807184 32d7a56fb711922467fdc24b1c1f92a2
          Size/MD5:      924 f96fd231f3e43e448364f030aaff81f8
          Size/MD5:     1952 d98445de93cde783b036817b697bb52d
          Size/MD5:   225514 a27cdaee94670b5cf6ae322fe790c66f

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:    98396 868ce34941f8be9c1170cba4a1baa4e8
          Size/MD5:  3567636 9922ee93cfeae4c32475414e87886253
          Size/MD5:  4738522 e33a9b1599c4138a12cb699a234ca9c2
          Size/MD5: 34643322 3f5bcaba091f22b12399b6dd80f57551
          Size/MD5:  4087458 10b14da05b1df52d4a3be812c4938d58
          Size/MD5:  2075106 f13791ae3a81aa652bbf02f68dfe8158
          Size/MD5:    96272 1e91bba14fdcb021edfa46aaa1b7640d
          Size/MD5:  9322266 82ce8f4dcbea7f1b3ceb3cd0f64799d2
          Size/MD5:  3980194 a5b4d9d29f58bfce68b9117f166729de
          Size/MD5:    58810 d9bbd5784065fbfff3f7e2d48beda330
          Size/MD5:   217486 3491b1f6530126ec1f371de8b7b634a7
          Size/MD5:   716388 d53171fb5086bb90b2e755e9384062e7
          Size/MD5:   204356 10358d4af77e8fd7f998bb76a30eb1fc
          Size/MD5:   314180 8b2f93dfa2aa2ae01f0182e9379fc5b4
          Size/MD5:    47574 85d289ff61d58850d060f932acba509a
          Size/MD5:   596242 bd81d1464498f7fb1b0c761f7de5e6f7
          Size/MD5:  5635672 0e75553aa275fdc33c5540180613a198
          Size/MD5:      926 7d15b18f65233edaa9c4a15816e1107c
          Size/MD5:     1952 fc60a18c1f3f10d929750277dc8c3d5f
          Size/MD5:   230936 cf8e7dd8ecaf8a764498be5baed42964

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5: 72603121 7f558001f5b7da61577b81c602c03ef2
          Size/MD5:     4979 f3e3afb2dd1c242e6c73622e16c18a1a
          Size/MD5: 234253602 03d1f3db50df10e07d87c82dfb2c6ac1

  Architecture independent packages:

          Size/MD5:   147762 b8f2e1517861d19f1f31793a8ac40332
          Size/MD5: 11405618 0ca14692948b4e0c3d7e61305e684670
          Size/MD5:  4879238 d082906d56db85cc22f4d86682e46a68
          Size/MD5:   116138 4abc075f8f3ab39635243b9aed24709e
          Size/MD5:   172922 2d684a718401642a2460ae7913d3b481
          Size/MD5:  2695804 bace630721be258a5427dce4a123ad26
          Size/MD5:     1006 d576fb57f502d5e1b54182b87c9ce5df
          Size/MD5:  2118200 d48f4ef3cbe283d8189d04a12c499bc6
          Size/MD5:  4009636 8dfb0cec241c80276139c23f7652da1d
          Size/MD5:  3146970 33bc78a6368c03a5032287145bd1761d
          Size/MD5:  2665910 9e35c3a2f6bb6c7b5e7bc56bd9f70847
          Size/MD5:  3637442 994aad7e05dfc7cb64b0cf449ec0bd17
          Size/MD5:   148732 c89f9afb48e4cd6f7e8f2c663e4a63b1

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:    86084 1aebc1b09352810502f667e20db44d20
          Size/MD5:  3596854 9f2005460645824b3af88d15476cd6a8
          Size/MD5:  5215208 305c44c7ed47f665546bf843864df8d4
          Size/MD5: 35449926 792f3e1e381018ec478db7fcdba1b2f7
          Size/MD5:  3416406 e4452c65f52f999a4739985da77cf9b5
          Size/MD5:  2332460 830b9d07342326c100d7d5d4e167e27b
          Size/MD5:    94824 2db67badd4deea8f49e5c00ff1ae6abb
          Size/MD5:  9566902 9a873b9060fb3ac10929dfb48b865c3c
          Size/MD5:  4985152 2a205cf346207cb05a9306a655acab32
          Size/MD5:    57412 063f13bcf7e2c83fd6dab6f8bc25670a
          Size/MD5:   215530 220586c43d817a2d80fe2d6c98f50cad
          Size/MD5:   643652 fb5cf9eb8c1166a7b314e63adc0c0a38
          Size/MD5:   234628 193b718e46b3d174c6ebe997da5677f1
          Size/MD5:   321102 755e59a25d630bd42674bb8a6188a5a0
          Size/MD5:    39642 c16c66345e00daa8b3fd98f79ec641b9
          Size/MD5:   614196 50b9e2645363514ca4640176dd93099c
          Size/MD5:  6051918 eee35e8d4087270368b55176b1b8d87b
          Size/MD5:     3102 a40e2cb1cff0909c1d9dfc7550fb4014
          Size/MD5:   225174 fe8555a9d62e0d6f1986c5c5155b3357

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:    86596 da2ffba538ab9ce1ffbe4a96b61c2331
          Size/MD5:  3469884 debd68d6566d2c5190130737dae3ffd5
          Size/MD5:  4863402 d6d0e7b2b5c5fff0feb1ccf747297cbc
          Size/MD5: 33688158 fbf3a8dce4da42485c5fe5054b6a0e4e
          Size/MD5:  3347278 4df5f13d565f08825dbe081e61e9aff2
          Size/MD5:  2293312 961554d8e6ba23e0e17e7d85bde19a40
          Size/MD5:    85296 b44c780ff7bae128e10cbc01b2ed153c
          Size/MD5:  8884848 84928a2b308e3f3d655bb81eb6a02de5
          Size/MD5:  4005868 eb11bdee8a6dee52a94225b6e06cd3ec
          Size/MD5:    54404 e7850f02f441ccdd582898ea34bcdc9e
          Size/MD5:   202192 cb55611b1d5f544dbf6a2ffe097c9286
          Size/MD5:   757844 600b1f1f8bb8df9726a4d0e49b7af69f
          Size/MD5:   216374 e755ae3b22880b7e7d5fe458358d5d9a
          Size/MD5:   299514 fbe5392c86eb706ece24cdec53aeef0b
          Size/MD5:    39456 a9f27ac83e745bd845a1e9aa7e4fd9ba
          Size/MD5:   604102 8b4f592cce261c21cb24bd069c9f307f
          Size/MD5:  5761018 be867c2484063ddbef39694a6db20a11
          Size/MD5:     3102 6eacd7751e357b2ef3057faca1bc2881
          Size/MD5:   220338 484a1ec57ec7ddc58973425ac9a64d0e

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:    86696 6e7d27fbdb42a84384dc1d71cef16d75
          Size/MD5:  3657462 704c1ff3c21c0802e373683dca4cac0e
          Size/MD5:  5087296 6bebd7361204e3f15fa389a91da43496
          Size/MD5: 35439450 7d42a9205104ff4a74b77cf0c690ba7f
          Size/MD5:  3511102 ffc3ac5c1e606ea3b7af3754c8f6aa20
          Size/MD5:  2326454 09630984453e0f6242220f94fb572b62
          Size/MD5:    95862 78a085414e0172f8a2c425a2e49ae205
          Size/MD5:  9319358 ac203c1eafec4ebb51dddac67d213c8d
          Size/MD5:  4708930 e7a9ffe51ca4612f9a722fd2a896d527
          Size/MD5:    59032 e36139e0e5d93fcf4b810b3b001d3b0e
          Size/MD5:   217562 ff24a6cad32ff81f188931d9849131a8
          Size/MD5:   761308 34516cfbf615d5096ba6a1d41051ea96
          Size/MD5:   231340 23b6b4047286da1d5d6d5a133be3e8ab
          Size/MD5:   305260 414f1ffea713701cbd683e054594f164
          Size/MD5:    41410 710ebd5864aa515a7640ee026c3d11e2
          Size/MD5:   607512 feea8b160e3e1eb2a6acb5fcf5ffbdd6
          Size/MD5:  5860702 f48449375f304590414ab2f39aa4ea60
          Size/MD5:     3102 8ae5ac5658ea98e6d4f3e438f98b9fe0
          Size/MD5:   226506 f2ae13f10b62331ceb7b24450c0fa0c5


--GvXjxJ+pjyke8COw
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGCaOnH/9LqRcGPm0RAl50AKCbmnHV33gI1eEEJxXpC1YXxonyDQCfTu22
BylN0z5TE5yU9X75wEbfwTQ=CW/0
-----END PGP SIGNATURE-------GvXjxJ+pjyke8COw--
--==============270614926806903016=Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--==============270614926806903016==--

Ubuntu: OpenOffice.org vulnerabilities

March 27, 2007
A stack overflow was discovered in OpenOffice.org's StarCalc parser

Summary

Update Instructions

References

Severity
Ubuntu Security Notice USN-444-1 March 27, 2007

Package Information

Related News