[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

./packages/openofficeorg/2.4/experimental r1067: mention CVEs



------------------------------------------------------------
revno: 1067
committer: Rene Engelhard <rene@debian.org>
branch nick: unstable
timestamp: Wed 2008-04-16 04:22:36 +0200
message:
  mention CVEs
modified:
  changelog
=== modified file 'changelog'
--- a/changelog	2008-04-15 19:38:07 +0000
+++ b/changelog	2008-04-16 02:22:36 +0000
@@ -4,6 +4,8 @@
     - revert libstlport4.6-dev builddep bump. Will break our builddeps
       for etch-backports and testing now has already -ldbl
     - set PACKAGE_NPSOPLUGIN=n when MOZILLA= (--disable-mozilla)
+  * debian/changelog: mention the various security fixes in OOH680_m5 and
+    OOH680_m6
 
  -- Rene Engelhard <rene@debian.org>  Tue, 15 Apr 2008 21:15:29 +0200
 
@@ -268,6 +270,8 @@
 openoffice.org (1:2.4.0~ooh680m6-1) experimental; urgency=low
 
   * new upstream snapshot (OOH680_m6)
+    - fixes CVE-2007-4770 and CVE-2007-4771 for the (unused) internal icu
+      copy
   * ooo-build:
     - update (r11494)
   * debian/rules:
@@ -287,6 +291,8 @@
     - now queries CUPS for printers again when opening the print dialogue;
       not only on startup (closes: #290016)
     - doesn't link libofficebean.so with -lgcj anymore (closes: #441202)
+    - fixes CVE-2007-5745, CVE-2007-5746, CVE-2007-5747 and
+      CVE-2008-0320
   * ooo-build:
     - use trunk again (r11432)
     - src:


Reply to: