[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#978737: marked as done (libreoffice-writer: LibreOffice Writer produces PDF with virus if there are links in the document)

Your message dated Thu, 31 Dec 2020 11:51:18 +0100
with message-id <81f23386-dc02-3956-e45d-b4685a38becc@debian.org>
and subject line Re: Bug#978737: libreoffice-writer: LibreOffice Writer produces PDF with virus if there are links in the document
has caused the Debian Bug report #978737,
regarding libreoffice-writer: LibreOffice Writer produces PDF with virus if there are links in the document
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
978737: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=978737
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libreoffice-writer
Version: 1:7.0.4~rc2-1+b1
Severity: important

Dear Maintainer,

On my machine, LibreOffice Writer produces PDF with virus if there are links in
the document. That PDF file is blocked by Gmail, and is detected with
PDF/Downldr.F.gen!Camelot by Cyren on VirusTotal.

The .odt file which produces the .pdf file with virus are both attached.

Michael



-- Package-specific info:

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-5-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_HK.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en_HK:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libreoffice-writer depends on:
ii  libabw-0.1-1             0.1.3-1
ii  libc6                    2.31-6
ii  libe-book-0.1-1          0.1.3-2
ii  libepubgen-0.1-1         0.1.1-1
ii  libetonyek-0.1-1         0.1.9-4
ii  libgcc-s1                10.2.1-3
ii  libicu67                 67.1-5
ii  libmwaw-0.3-3            0.3.17-1
ii  libodfgen-0.1-1          0.1.7-1
ii  libreoffice-base-core    1:7.0.4~rc2-1+b1
ii  libreoffice-common       1:7.0.4~rc2-1
ii  libreoffice-core         1:7.0.4~rc2-1+b1
ii  librevenge-0.0-0         0.0.4-6+b1
ii  libstaroffice-0.0-0      0.0.7-1
ii  libstdc++6               10.2.1-3
ii  libuno-cppu3             1:7.0.4~rc2-1+b1
ii  libuno-cppuhelpergcc3-3  1:7.0.4~rc2-1+b1
ii  libuno-sal3              1:7.0.4~rc2-1+b1
ii  libuno-salhelpergcc3-3   1:7.0.4~rc2-1+b1
ii  libwpd-0.10-10           0.10.3-1
ii  libwpg-0.3-3             0.3.3-1
ii  libwps-0.4-4             0.4.12-1
ii  libxml2                  2.9.10+dfsg-6.3+b1
ii  ucf                      3.0043
ii  uno-libs-private         1:7.0.4~rc2-1+b1
ii  zlib1g                   1:1.2.11.dfsg-2

Versions of packages libreoffice-writer recommends:
ii  libreoffice-math  1:7.0.4~rc2-1+b1

Versions of packages libreoffice-writer suggests:
ii  default-jre [java8-runtime]     2:1.11-72
ii  fonts-crosextra-caladea         20130214-2.1
ii  fonts-crosextra-carlito         20130920-1.1
ii  libreoffice-base                1:7.0.4~rc2-1+b1
ii  libreoffice-java-common         1:7.0.4~rc2-1
ii  openjdk-11-jre [java8-runtime]  11.0.9.1+1-1

Versions of packages libreoffice-core depends on:
ii  fontconfig                      2.13.1-4.2
ii  fonts-opensymbol                2:102.11+LibO7.0.4~rc2-1
ii  libboost-locale1.74.0           1.74.0-3+b1
ii  libc6                           2.31-6
ii  libcairo2                       1.16.0-4
ii  libclucene-contribs1v5          2.3.3.4+dfsg-1+b1
ii  libclucene-core1v5              2.3.3.4+dfsg-1+b1
ii  libcmis-0.5-5v5                 0.5.2-2+b2
ii  libcups2                        2.3.3op1-3
ii  libcurl3-gnutls                 7.72.0-1
ii  libdbus-1-3                     1.12.20-1
ii  libdconf1                       0.38.0-1
ii  libeot0                         0.01-5+b1
ii  libepoxy0                       1.5.4-1
ii  libexpat1                       2.2.10-1
ii  libexttextcat-2.0-0             3.4.5-1
ii  libfontconfig1                  2.13.1-4.2
ii  libfreetype6                    2.10.4+dfsg-1
ii  libgcc-s1                       10.2.1-3
ii  libglib2.0-0                    2.66.4-1
ii  libgpgmepp6                     1.14.0-1+b2
ii  libgraphite2-3                  1.3.14-1
ii  libgstreamer-plugins-base1.0-0  1.18.2-1
ii  libgstreamer1.0-0               1.18.2-1
ii  libharfbuzz-icu0                2.6.7-1
ii  libharfbuzz0b                   2.6.7-1
ii  libhunspell-1.7-0               1.7.0-3
ii  libhyphen0                      2.8.8-7
ii  libice6                         2:1.0.10-1
ii  libicu67                        67.1-5
ii  libjpeg62-turbo                 1:2.0.5-1.1
ii  liblcms2-2                      2.9-4+b1
ii  libldap-2.4-2                   2.4.56+dfsg-1
ii  libmythes-1.2-0                 2:1.2.4-3+b1
ii  libneon27-gnutls                0.31.2-1
ii  libnspr4                        2:4.29-1
ii  libnss3                         2:3.60-1
ii  libnumbertext-1.0-0             1.0.6-1
ii  liborcus-0.16-0                 0.16.1-3+b2
ii  liborcus-parser-0.16-0          0.16.1-3+b2
ii  libpng16-16                     1.6.37-3
ii  libpoppler102                   20.09.0-3
ii  libqrcodegencpp1                1.5.0-2
ii  libraptor2-0                    2.0.14-1.1
ii  librdf0                         1.0.17-1.1+b1
ii  libreoffice-common              1:7.0.4~rc2-1
ii  librevenge-0.0-0                0.0.4-6+b1
ii  libsm6                          2:1.2.3-1
ii  libstdc++6                      10.2.1-3
ii  libuno-cppu3                    1:7.0.4~rc2-1+b1
ii  libuno-cppuhelpergcc3-3         1:7.0.4~rc2-1+b1
ii  libuno-sal3                     1:7.0.4~rc2-1+b1
ii  libuno-salhelpergcc3-3          1:7.0.4~rc2-1+b1
ii  libx11-6                        2:1.6.12-1
ii  libx11-xcb1                     2:1.6.12-1
ii  libxext6                        2:1.3.3-1.1
ii  libxinerama1                    2:1.1.4-2
ii  libxml2                         2.9.10+dfsg-6.3+b1
ii  libxmlsec1                      1.2.31-1
ii  libxmlsec1-nss                  1.2.31-1
ii  libxrandr2                      2:1.5.1-1
ii  libxrender1                     1:0.9.10-1
ii  libxslt1.1                      1.1.34-4
ii  uno-libs-private                1:7.0.4~rc2-1+b1
ii  ure                             1:7.0.4~rc2-1+b1
ii  zlib1g                          1:1.2.11.dfsg-2

Versions of packages libreoffice-core recommends:
ii  gstreamer1.0-libav         1.18.2-1
ii  gstreamer1.0-plugins-bad   1.18.0-2+b1
ii  gstreamer1.0-plugins-base  1.18.2-1
ii  gstreamer1.0-plugins-good  1.18.2-1
ii  gstreamer1.0-plugins-ugly  1.18.2-1
ii  libpaper-utils             1.1.28+b1

-- no debconf information

Attachment: cv.pdf
Description: Adobe PDF document

Attachment: cv.odt
Description: application/vnd.oasis.opendocument.text


--- End Message ---
--- Begin Message --- 
Hi,

Am 31.12.20 um 05:19 schrieb Michael Tsang:
> On my machine, LibreOffice Writer produces PDF with virus if there are links in
> the document.

No, that is hilarious. Maybe do some reasearch before filing a bug with
this hilarious title?


>  That PDF file is blocked by Gmail,
So what? Gmail blocks a loads of stuff. That's why people who know what
they do don't use gmail.
>  and is detected with
> PDF/Downldr.F.gen!Camelot by Cyren on VirusTotal.

And because some questionable thingy thinks this is a virus it is? Come on.

I'd bet it chokes on the clickable links (and or *thinks* it wants to
"download" something?)


Virus Scanners *thinking* there might be something in something is not
"there *is* something in something.)


I just created a test odt just containing "Test123". Exported to PDF.
Uploaded there.

As expected: No issue.


Then added http://www.libreoffice.org which got converted into a link.
Exported to PDF. Uploaded there.

As expected: No issue.


And *if* it created something which actually had something in it, maybe
*you* should check *your* system?


Closing. Again, please some care if you write bug reports. Especially
with such a title.


Regards,


Rene

--- End Message ---
Reply to: