openSUSE Security Update : libreoffice-34 (openSUSE-SU-2011:1143-1)

high Nessus Plugin ID 75611

Synopsis

The remote openSUSE host is missing a security update.

Description

LibreOffice 3.4 includes new interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fix es/

The update fixes the following security issue :

- 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities (CVE-2011-2685)

- 722075: LibreOffice: Out-of-bounds read in DOC sprm (CVE-2011-2713)

This update also fixes the following non-security issues :

- 647959: LibO has a regression problem to show emf charts properly.

- 650049: pptx presentation has text in boxes and circles.
Only text is displayed.

- 651250: Video and Audio does not play in slide show mode of LibO Impress.

- 652562: LibreOffice crashes on start on 11.4-MS3 NET/DVD install

- 653662: libreoffice build calls mkbundle2 (deprecated) instead of mkbundle

- 663622: Writer crash during document save

- 665112: could not type or edit office document

- 675868: eliminate wording of ooconvert existed in loconvert --help

- 675961: Libreoffice Copy paste of formula in Writer tables does not work as expected

- 676858: Document with full page graphic in header will not allow click-drag or right-click.

- 678998: Libre Office 3.3.1 does not detect KDE3

- 680272: Deleting multiple sheets results in run-time error/crash

- 681738: DDE link is lost when .xls file is opened/saved in Calc.

- 683578: Large xlsx file takes extremely long to open with Libreoffice calc

- 684784: Microsoft Office spreadsheet does not display anything

- 693238: Column format in docx file is not displayed correctly.

- 693477: Format of Word .doc file from HP is bad.

- 694119: Using File-->Send-->Document as E-mail will crash Impress

- 694344: 3rd level bulleted items are not displayed properly.

- 695479: L3: RTF file is not displayed correctly by Writer.

- 696630: DDE link from Calc to Excel needs Excel open to update link in Calc.

- 702506: Writer crashes when opening docx files.

- 704639: HTML document appearance changes when opened in open office vs LibreOffice

- 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel

- 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt)

- 706792: PTF 3.3.1-21 introduced a crash when opening a pptx presentation.

- 707486: Macro from excel fails on Selection.Copy when run in Calc.

- 707779: Disappearing text

- 708137: xls spreadsheet is extremely slow to open and check boxes are broken.

- 708518: Bullet symbol is not rendered correctly in a specific slide.

- 710061: ODP export to PDF produces broken images

- 710920: RPM installation ending with redundant error.

- 711977: File association for fod* files are missing.

- 712358: Some extensions broken after upgrading.

- 715268: Command libreoffice --help does not work when LibreOffice is already started

- 715856: LibreOffice:Stable/libreoffice-converter: Bug

- 715416: Impress crashes starting Slide show in the context of dual monitors extension mode.

- 715931: failed to save an odp file.

- 717262: libtool adds /usr/lib64 into rpath

Solution

Update the affected libreoffice-34 packages.

See Also

https://www.libreoffice.org/download/download/

https://bugzilla.novell.com/show_bug.cgi?id=647959

https://bugzilla.novell.com/show_bug.cgi?id=650049

https://bugzilla.novell.com/show_bug.cgi?id=651250

https://bugzilla.novell.com/show_bug.cgi?id=652562

https://bugzilla.novell.com/show_bug.cgi?id=653662

https://bugzilla.novell.com/show_bug.cgi?id=663622

https://bugzilla.novell.com/show_bug.cgi?id=665112

https://bugzilla.novell.com/show_bug.cgi?id=675868

https://bugzilla.novell.com/show_bug.cgi?id=675961

https://bugzilla.novell.com/show_bug.cgi?id=676858

https://bugzilla.novell.com/show_bug.cgi?id=678998

https://bugzilla.novell.com/show_bug.cgi?id=680272

https://bugzilla.novell.com/show_bug.cgi?id=681738

https://bugzilla.novell.com/show_bug.cgi?id=683578

https://bugzilla.novell.com/show_bug.cgi?id=684784

https://bugzilla.novell.com/show_bug.cgi?id=693238

https://bugzilla.novell.com/show_bug.cgi?id=693477

https://bugzilla.novell.com/show_bug.cgi?id=694119

https://bugzilla.novell.com/show_bug.cgi?id=694344

https://bugzilla.novell.com/show_bug.cgi?id=695479

https://bugzilla.novell.com/show_bug.cgi?id=696630

https://bugzilla.novell.com/show_bug.cgi?id=702506

https://bugzilla.novell.com/show_bug.cgi?id=704311

https://bugzilla.novell.com/show_bug.cgi?id=704639

https://bugzilla.novell.com/show_bug.cgi?id=704642

https://bugzilla.novell.com/show_bug.cgi?id=705949

https://bugzilla.novell.com/show_bug.cgi?id=706792

https://bugzilla.novell.com/show_bug.cgi?id=707486

https://bugzilla.novell.com/show_bug.cgi?id=707779

https://bugzilla.novell.com/show_bug.cgi?id=708137

https://bugzilla.novell.com/show_bug.cgi?id=708518

https://bugzilla.novell.com/show_bug.cgi?id=710061

https://bugzilla.novell.com/show_bug.cgi?id=710920

https://bugzilla.novell.com/show_bug.cgi?id=711977

https://bugzilla.novell.com/show_bug.cgi?id=712358

https://bugzilla.novell.com/show_bug.cgi?id=715268

https://bugzilla.novell.com/show_bug.cgi?id=715416

https://bugzilla.novell.com/show_bug.cgi?id=715856

https://bugzilla.novell.com/show_bug.cgi?id=715931

https://bugzilla.novell.com/show_bug.cgi?id=717262

https://lists.opensuse.org/opensuse-updates/2011-10/msg00017.html

Plugin Details

Severity: High

ID: 75611

File Name: suse_11_3_libreoffice-34-111007.nasl

Version: 1.7

Type: local

Agent: unix

Published: 6/13/2014

Updated: 1/14/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:libreoffice-languagetool-sv, p-cpe:/a:novell:opensuse:libreoffice-l10n-km, p-cpe:/a:novell:opensuse:libreoffice-help-sl, p-cpe:/a:novell:opensuse:libreoffice-help-sv, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-galaxy, p-cpe:/a:novell:opensuse:libreoffice-l10n-da, p-cpe:/a:novell:opensuse:libreoffice-l10n-en-gb, p-cpe:/a:novell:opensuse:libreoffice-languagetool-sk, p-cpe:/a:novell:opensuse:libreoffice-languagetool-es, p-cpe:/a:novell:opensuse:libreoffice-l10n-lt, p-cpe:/a:novell:opensuse:libreoffice-l10n-cy, p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-tw, p-cpe:/a:novell:opensuse:libreoffice-base-extensions, p-cpe:/a:novell:opensuse:libreoffice-testtool, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql, p-cpe:/a:novell:opensuse:libreoffice-l10n-he, p-cpe:/a:novell:opensuse:libreoffice-help-ko, p-cpe:/a:novell:opensuse:libreoffice-l10n-zu, p-cpe:/a:novell:opensuse:libreoffice-help-nl, p-cpe:/a:novell:opensuse:libreoffice-l10n-mk, p-cpe:/a:novell:opensuse:libreoffice-l10n-ga, p-cpe:/a:novell:opensuse:libreoffice-l10n-rw, p-cpe:/a:novell:opensuse:libreoffice-help-km, p-cpe:/a:novell:opensuse:libreoffice-writer, p-cpe:/a:novell:opensuse:libreoffice-l10n-tr, p-cpe:/a:novell:opensuse:libreoffice-help-gl, p-cpe:/a:novell:opensuse:libreoffice-help-pt, p-cpe:/a:novell:opensuse:libreoffice-languagetool-ro, p-cpe:/a:novell:opensuse:libreoffice-l10n-pt, p-cpe:/a:novell:opensuse:libreoffice-help-zh-tw, p-cpe:/a:novell:opensuse:libreoffice-l10n-it, p-cpe:/a:novell:opensuse:libreoffice-kde4, p-cpe:/a:novell:opensuse:libreoffice-help-hu, p-cpe:/a:novell:opensuse:libreoffice-l10n-sl, p-cpe:/a:novell:opensuse:libreoffice-l10n-ss, p-cpe:/a:novell:opensuse:libreoffice-languagetool-it, p-cpe:/a:novell:opensuse:libreoffice-l10n-fr, p-cpe:/a:novell:opensuse:libreoffice-l10n-uk, p-cpe:/a:novell:opensuse:libreoffice-l10n-sh, p-cpe:/a:novell:opensuse:libreoffice-l10n-nr, p-cpe:/a:novell:opensuse:libreoffice-draw, p-cpe:/a:novell:opensuse:libreoffice-l10n-ar, p-cpe:/a:novell:opensuse:libreoffice-l10n-tg, p-cpe:/a:novell:opensuse:libreoffice-l10n-nn, p-cpe:/a:novell:opensuse:libreoffice-l10n-sv, p-cpe:/a:novell:opensuse:libreoffice-mailmerge, p-cpe:/a:novell:opensuse:libreoffice-calc, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql, p-cpe:/a:novell:opensuse:libreoffice-help-cs, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-oxygen, p-cpe:/a:novell:opensuse:libreoffice-l10n-pa-in, p-cpe:/a:novell:opensuse:libreoffice-help-hi-in, p-cpe:/a:novell:opensuse:libreoffice-help-de, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-tango, p-cpe:/a:novell:opensuse:libreoffice-l10n-sk, p-cpe:/a:novell:opensuse:libreoffice-help-pt-br, p-cpe:/a:novell:opensuse:libreoffice-l10n-ka, p-cpe:/a:novell:opensuse:libreoffice-filters-optional, p-cpe:/a:novell:opensuse:libreoffice-help-ru, p-cpe:/a:novell:opensuse:libreoffice-l10n-gu-in, p-cpe:/a:novell:opensuse:libreoffice-languagetool-fr, p-cpe:/a:novell:opensuse:libreoffice-l10n-hu, p-cpe:/a:novell:opensuse:libreoffice-openclipart, p-cpe:/a:novell:opensuse:libreoffice-languagetool-gl, p-cpe:/a:novell:opensuse:libreoffice-help-en-gb, p-cpe:/a:novell:opensuse:libreoffice-impress-extensions, p-cpe:/a:novell:opensuse:libreoffice-l10n-ko, p-cpe:/a:novell:opensuse:libreoffice-languagetool, p-cpe:/a:novell:opensuse:libreoffice-base, p-cpe:/a:novell:opensuse:libreoffice-help-zh-cn, cpe:/o:novell:opensuse:11.3, p-cpe:/a:novell:opensuse:libreoffice-l10n-nl, p-cpe:/a:novell:opensuse:libreoffice-kde, p-cpe:/a:novell:opensuse:libreoffice-l10n-prebuilt, p-cpe:/a:novell:opensuse:libreoffice-l10n-ca, p-cpe:/a:novell:opensuse:libreoffice-l10n-hi-in, p-cpe:/a:novell:opensuse:libreoffice-l10n-pt-br, p-cpe:/a:novell:opensuse:libreoffice-converter, p-cpe:/a:novell:opensuse:libreoffice-help-et, p-cpe:/a:novell:opensuse:libreoffice-draw-extensions, p-cpe:/a:novell:opensuse:libreoffice-l10n-th, p-cpe:/a:novell:opensuse:libreoffice-l10n-ts, p-cpe:/a:novell:opensuse:libreoffice-l10n-vi, p-cpe:/a:novell:opensuse:libreoffice-help-es, p-cpe:/a:novell:opensuse:libreoffice-mono, p-cpe:/a:novell:opensuse:libreoffice-l10n-es, p-cpe:/a:novell:opensuse:libreoffice-gnome, p-cpe:/a:novell:opensuse:libreoffice-l10n-nb, p-cpe:/a:novell:opensuse:libreoffice-l10n-hr, p-cpe:/a:novell:opensuse:libreoffice-help-da, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-hicontrast, p-cpe:/a:novell:opensuse:libreoffice-writer-extensions, p-cpe:/a:novell:opensuse:libreoffice-math, p-cpe:/a:novell:opensuse:libreoffice-l10n-en-za, p-cpe:/a:novell:opensuse:libreoffice-l10n-cs, p-cpe:/a:novell:opensuse:libreoffice-l10n-sr, p-cpe:/a:novell:opensuse:libreoffice-help-it, p-cpe:/a:novell:opensuse:libreoffice-impress, p-cpe:/a:novell:opensuse:libreoffice-l10n-el, p-cpe:/a:novell:opensuse:libreoffice-l10n-af, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-crystal, p-cpe:/a:novell:opensuse:libreoffice-l10n-ru, p-cpe:/a:novell:opensuse:libreoffice-languagetool-pl, p-cpe:/a:novell:opensuse:libreoffice-l10n-ja, p-cpe:/a:novell:opensuse:libreoffice-l10n-gl, p-cpe:/a:novell:opensuse:libreoffice-l10n-xh, p-cpe:/a:novell:opensuse:libreoffice-l10n-ve, p-cpe:/a:novell:opensuse:libreoffice-icon-themes-prebuilt, p-cpe:/a:novell:opensuse:libreoffice-help-ja, p-cpe:/a:novell:opensuse:libreoffice-l10n-et, p-cpe:/a:novell:opensuse:libreoffice-help-en-us, p-cpe:/a:novell:opensuse:libreoffice-l10n-fi, p-cpe:/a:novell:opensuse:libreoffice-languagetool-ca, p-cpe:/a:novell:opensuse:libreoffice, p-cpe:/a:novell:opensuse:libreoffice-help-gu-in, p-cpe:/a:novell:opensuse:libreoffice-l10n-pl, p-cpe:/a:novell:opensuse:libreoffice-languagetool-en, p-cpe:/a:novell:opensuse:libreoffice-l10n-st, p-cpe:/a:novell:opensuse:libreoffice-l10n-be-by, p-cpe:/a:novell:opensuse:libreoffice-languagetool-ru, p-cpe:/a:novell:opensuse:libreoffice-pyuno, p-cpe:/a:novell:opensuse:libreoffice-help-fr, p-cpe:/a:novell:opensuse:libreoffice-l10n-bg, p-cpe:/a:novell:opensuse:libreoffice-calc-extensions, p-cpe:/a:novell:opensuse:libreoffice-languagetool-nl, p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-cn, p-cpe:/a:novell:opensuse:libreoffice-officebean, p-cpe:/a:novell:opensuse:libreoffice-help-en-za, p-cpe:/a:novell:opensuse:libreoffice-help-pl, p-cpe:/a:novell:opensuse:libreoffice-branding-upstream, p-cpe:/a:novell:opensuse:libreoffice-l10n-de, p-cpe:/a:novell:opensuse:libreoffice-languagetool-de, p-cpe:/a:novell:opensuse:libreoffice-l10n-br

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 10/7/2011

Reference Information

CVE: CVE-2011-2685, CVE-2011-2713