SuSE 11.1 Security Update : LibreOffice (SAT Patch Number 5271)

high Nessus Plugin ID 57118

Synopsis

The remote SuSE 11 host is missing one or more security updates.

Description

LibreOffice 3.4 includes new interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fixes/

The update fixes the following security issue :

- 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities. (CVE-2011-2685)

- 722075: LibreOffice: Out-of-bounds read in DOC sprm (CVE-2011-2713) This update also fixes the following non-security issues :

- 653519: Welcome screen missing.

- 653662: libreoffice build calls mkbundle2 (deprecated) instead of mkbundle

- 663622: Writer crash during document save

- 675868: eliminate wording of ooconvert existed in loconvert --help

- 675961: Libreoffice Copy paste of formula in Writer tables does not work as expected

- 676858: Document with full page graphic in header will not allow click-drag or right-click.

- 677354: The languagetool.rpm does not work as expected

- 678998: Libre Office does not detect KDE3

- 680272: Deleting multiple sheets results in run-time error/crash

- 681738: DDE link is lost when .xls file is opened/saved in Calc.

- 683578: Large xlsx file takes extremely long to open with Libreoffice calc

- 684784: Microsoft Office spreadsheet does not display anything

- 693238: Column format in docx file is not displayed correctly.

- 693477: Format of Word .doc file from HP is bad.

- 694119: Using File-->Send-->Document as E-mail will crash Impress

- 694344: 3rd level bulleted items are not displayed properly.

- 695479: RTF file is not displayed correctly by Writer.

- 696630: DDE link from Calc to Excel needs Excel open to update link in Calc.

- 699334: Presentation created in MS Office is missing text when opened in LibreOffice

- 701317: xls spreadsheet macro fails with LibreOffice.

- 702506: Writer crashes when opening docx files.

- 704639: HTML document appearance changes when opened in open office vs LibreOffice

- 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel

- 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt)

- 706792: crash when opening a pptx presentation.

- 707486: Macro from excel fails on Selection.Copy when run in Calc.

- 707779: Disappearing text

- 708137: xls spreadsheet is extremely slow to open and check boxes are broken.

- 708518: Bullet symbol is not rendered correctly in a specific slide.

- 710061: ODP export to PDF produces broken images

- 710920: RPM installation ending with redundant error.

- 711977: File association for fod* files are missing.

- 712358: Some extensions broken after upgrading.

- 715268: Command libreoffice --help does not work when LibreOffice is already started

- 715416: Impress crashes starting Slide show in the context of dual monitors extension mode.

- 715931: failed to save an odp file.

- 717262: libtool adds /usr/lib64 into rpath

- 715856: LibreOffice:Stable/libreoffice-converter: Bug

- 677354: The languagetool.rpm does not work as expected.

- 693200: Documents created in MS Office cause LibreOffice to crash

- 693386: Documents created in MS Office bring up the filter selection dialog when opened with LibreOffice

- 693427: When using QT dialogs and not LibreOffice dialogs causes LibreOffice to hang when attempting to save a document

- 706731: VBA Macros from MS Office Spreadsheet do not work correct with LibreOffice 3.3.1

Solution

Apply SAT patch number 5271.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=653519

https://bugzilla.novell.com/show_bug.cgi?id=653662

https://bugzilla.novell.com/show_bug.cgi?id=663622

https://bugzilla.novell.com/show_bug.cgi?id=675868

https://bugzilla.novell.com/show_bug.cgi?id=675961

https://bugzilla.novell.com/show_bug.cgi?id=676858

https://bugzilla.novell.com/show_bug.cgi?id=678998

https://bugzilla.novell.com/show_bug.cgi?id=680272

https://bugzilla.novell.com/show_bug.cgi?id=681738

https://bugzilla.novell.com/show_bug.cgi?id=683578

https://bugzilla.novell.com/show_bug.cgi?id=684784

https://bugzilla.novell.com/show_bug.cgi?id=693238

https://bugzilla.novell.com/show_bug.cgi?id=693477

https://bugzilla.novell.com/show_bug.cgi?id=694119

https://bugzilla.novell.com/show_bug.cgi?id=694344

https://bugzilla.novell.com/show_bug.cgi?id=695479

https://bugzilla.novell.com/show_bug.cgi?id=696630

https://bugzilla.novell.com/show_bug.cgi?id=699334

https://bugzilla.novell.com/show_bug.cgi?id=702506

https://bugzilla.novell.com/show_bug.cgi?id=704311

https://bugzilla.novell.com/show_bug.cgi?id=704639

https://bugzilla.novell.com/show_bug.cgi?id=704642

https://bugzilla.novell.com/show_bug.cgi?id=705949

https://bugzilla.novell.com/show_bug.cgi?id=706792

https://bugzilla.novell.com/show_bug.cgi?id=707486

https://bugzilla.novell.com/show_bug.cgi?id=707779

https://bugzilla.novell.com/show_bug.cgi?id=708137

https://bugzilla.novell.com/show_bug.cgi?id=708518

https://bugzilla.novell.com/show_bug.cgi?id=710061

https://bugzilla.novell.com/show_bug.cgi?id=710920

https://bugzilla.novell.com/show_bug.cgi?id=711977

https://bugzilla.novell.com/show_bug.cgi?id=712358

https://bugzilla.novell.com/show_bug.cgi?id=715268

https://bugzilla.novell.com/show_bug.cgi?id=715416

https://bugzilla.novell.com/show_bug.cgi?id=715856

https://bugzilla.novell.com/show_bug.cgi?id=715931

https://bugzilla.novell.com/show_bug.cgi?id=717262

http://support.novell.com/security/cve/CVE-2011-2685.html

http://support.novell.com/security/cve/CVE-2011-2713.html

Plugin Details

Severity: High

ID: 57118

File Name: suse_11_libreoffice-34-111012.nasl

Version: 1.6

Type: local

Agent: unix

Published: 12/13/2011

Updated: 1/19/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-es, p-cpe:/a:novell:suse_linux:11:libneon27, p-cpe:/a:novell:suse_linux:11:libreoffice-help-zh-cn, p-cpe:/a:novell:suse_linux:11:libreoffice-filters-optional, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-ja, p-cpe:/a:novell:suse_linux:11:libreoffice-help-es, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-it, p-cpe:/a:novell:suse_linux:11:libreoffice-icon-themes, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-zh-cn, p-cpe:/a:novell:suse_linux:11:libreoffice-openclipart, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-ko, p-cpe:/a:novell:suse_linux:11:libreoffice-help-zh-tw, p-cpe:/a:novell:suse_linux:11:libneon27-32bit, p-cpe:/a:novell:suse_linux:11:libreoffice-help-fr, p-cpe:/a:novell:suse_linux:11:libreoffice-impress-extensions, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-en-gb, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-zh-tw, p-cpe:/a:novell:suse_linux:11:libreoffice-writer-extensions, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-pt-br, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-af, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-fr, p-cpe:/a:novell:suse_linux:11:libreoffice-calc-extensions, p-cpe:/a:novell:suse_linux:11:libreoffice-impress, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-xh, p-cpe:/a:novell:suse_linux:11:libreoffice-help-da, p-cpe:/a:novell:suse_linux:11:libreoffice-help-sv, p-cpe:/a:novell:suse_linux:11:libreoffice-help-hi-in, p-cpe:/a:novell:suse_linux:11:libreoffice-draw, p-cpe:/a:novell:suse_linux:11:libreoffice-help-ko, p-cpe:/a:novell:suse_linux:11:libreoffice-help-pt-br, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-en, p-cpe:/a:novell:suse_linux:11:libreoffice-math, p-cpe:/a:novell:suse_linux:11:libreoffice-help-pl, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-sv, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-fi, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-nn, cpe:/o:novell:suse_linux:11, p-cpe:/a:novell:suse_linux:11:libreoffice-calc, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-pl, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-it, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-nl, p-cpe:/a:novell:suse_linux:11:libreoffice-base-extensions, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-de, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-sv, p-cpe:/a:novell:suse_linux:11:libreoffice-help-hu, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-nb, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-hu, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-sk, p-cpe:/a:novell:suse_linux:11:libreoffice-kde, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-fr, p-cpe:/a:novell:suse_linux:11:libreoffice-help-en-gb, p-cpe:/a:novell:suse_linux:11:libreoffice-converter, p-cpe:/a:novell:suse_linux:11:libreoffice-mailmerge, p-cpe:/a:novell:suse_linux:11:libreoffice-draw-extensions, p-cpe:/a:novell:suse_linux:11:libreoffice-help-gu-in, p-cpe:/a:novell:suse_linux:11:libreoffice-help-de, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-hi-in, p-cpe:/a:novell:suse_linux:11:libreoffice-writer, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-zu, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-cs, p-cpe:/a:novell:suse_linux:11:libreoffice-help-en-us, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-da, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-nl, p-cpe:/a:novell:suse_linux:11:libreoffice-pyuno, p-cpe:/a:novell:suse_linux:11:libreoffice-gnome, p-cpe:/a:novell:suse_linux:11:libreoffice-base-drivers-postgresql, p-cpe:/a:novell:suse_linux:11:libreoffice-help-ru, p-cpe:/a:novell:suse_linux:11:libreoffice-officebean, p-cpe:/a:novell:suse_linux:11:libreoffice-kde4, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-ru, p-cpe:/a:novell:suse_linux:11:libreoffice, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-ar, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-es, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-de, p-cpe:/a:novell:suse_linux:11:libreoffice-help-pt, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-gu-in, p-cpe:/a:novell:suse_linux:11:libreoffice-base, p-cpe:/a:novell:suse_linux:11:libreoffice-mono, p-cpe:/a:novell:suse_linux:11:libreoffice-help-nl, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-ca, p-cpe:/a:novell:suse_linux:11:libreoffice-help-it, p-cpe:/a:novell:suse_linux:11:libreoffice-languagetool-pl, p-cpe:/a:novell:suse_linux:11:libreoffice-help-cs, p-cpe:/a:novell:suse_linux:11:libreoffice-help-ja, p-cpe:/a:novell:suse_linux:11:libreoffice-l10n-pt

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 10/12/2011

Reference Information

CVE: CVE-2011-2685, CVE-2011-2713