Welcome to NeoOffice developer notes and announcements
NeoOffice
Developer notes and announcements
 
 

This website is an archive and is no longer active
NeoOffice announcements have moved to the NeoOffice News website


Support
· Forums
· NeoOffice Support
· NeoWiki


Announcements
· Twitter @NeoOffice


Downloads
· Download NeoOffice


  
NeoOffice :: View topic - Fix for security vulnerabilities
Fix for security vulnerabilities
 
   NeoOffice Forum Index -> NeoOffice Testing
View previous topic :: View next topic  
Author Message
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11949

PostPosted: Sat Jul 18, 2015 6:48 pm    Post subject: Fix for security vulnerabilities

I recently heard about security vulnerability CVE-2015-1774 which affects OpenOffice and LibreOffice. This security vulnerability occurs when opening documents with a file name ending in .hwp.

Fortunately, the LibreOffice engineers have already fixed this security vulnerability in LibreOffice 4.4.2 so I backported their fix.

The fix for this security vulnerability is in the following test patches for anyone who wants to install the fix now:

NeoOffice 2014.12:
http://nick.neooffice.org/test/NeoOffice-2014.12-Test-1-Intel.dmg

NeoOffice 2014.12 Free Edition:
http://nick.neooffice.org/test/NeoOffice-2014.12_Free_Edition-Test-1-Intel.dmg

NeoOffice 3.4.1:
http://nick.neooffice.org/test/NeoOffice-3.4.1-Patch-16-Test-1-Intel.dmg


Last edited by pluby on Wed Aug 19, 2015 10:24 am; edited 1 time in total
Back to top
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11949

PostPosted: Wed Jul 22, 2015 9:12 am    Post subject:

After backporting LibreOffice's fix for this CVE-2015-1774, I noticed that the LibreOffice engineers had already fixed a couple of other security vulnerabilities so I backported those as well.

Fixes for those other security vulnerabilities are in the following test patches:

NeoOffice 2014.12:
http://nick.neooffice.org/test/NeoOffice-2014.12-Test-2-Intel.dmg

NeoOffice 2014.12 Free Edition:
http://nick.neooffice.org/test/NeoOffice-2014.12_Free_Edition-Test-2-Intel.dmg

NeoOffice 3.4.1:
http://nick.neooffice.org/test/NeoOffice-3.4.1-Patch-16-Test-2-Intel.dmg

Patrick
Back to top
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11949

PostPosted: Tue Aug 04, 2015 5:44 pm    Post subject:

FYI. I have included the fixes for these security vulnerabilties in NeoOffice 2014.13 which is available in Apple's Mac App Store.

I have also included the fixes in NeoOffice 3.4.1 Patch 17 which can be downloaded from the NeoOffice patch download page.

Patrick
Back to top
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11949

PostPosted: Wed Aug 19, 2015 10:23 am    Post subject:

The LibreOffice engineers recently fixed another security vulnerability. This security vulnerability causes NeoOffice to crash and is triggered by a specially crafted .doc file.

I have backported LibreOffice's fix for this security vulnerability and the fix is in the following test patches:

NeoOffice 2014.13:
http://nick.neooffice.org/test/NeoOffice-2014.13-Test-2-Intel.dmg

NeoOffice 2014.13 Free Edition:
http://nick.neooffice.org/test/NeoOffice-2014.13_Free_Edition-Test-2-Intel.dmg

NeoOffice 3.4.1:
http://nick.neooffice.org/test/NeoOffice-3.4.1-Patch-17-Test-2-Intel.dmg

Patrick
Back to top
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11949

PostPosted: Thu Sep 17, 2015 7:47 am    Post subject:

FYI. I have included the fix for the bug described in my previous post in NeoOffice 2015 which is available in Apple's Mac App Store.

I have also included the fix in NeoOffice 2015 Classic Edition which can be downloaded from the NeoOffice download page.

Patrick
Back to top
Display posts from previous:   
   NeoOffice Forum Index -> NeoOffice Testing All times are GMT - 7 Hours
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Powered by phpBB © 2001, 2005 phpBB Group

All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest © Planamesa Inc.
NeoOffice is a registered trademark of Planamesa Inc. and may not be used without permission.
PHP-Nuke Copyright © 2005 by Francisco Burzi. This is free software, and you may redistribute it under the GPL. PHP-Nuke comes with absolutely no warranty, for details, see the license.