Welcome to NeoOffice developer notes and announcements
NeoOffice
Developer notes and announcements
 
 

Problems after upgrading to El Capitan or Sierra? Try these steps
Download or installation problems? Try these steps


Support
· NeoOffice Support
· NeoWiki


Announcements
· Twitter @NeoOffice


Downloads
· Download NeoOffice
· Download latest patch
· User Guide
· User Guide Volume 2


RSS Feeds
· Announcements Only
· All Posts


  
NeoOffice :: View topic - Fix for security vulnerabilities
 SearchSearch   ProfileProfile   Log inLog in 

Fix for security vulnerabilities
 
Post new topic   Reply to topic    NeoOffice Forum Index -> NeoOffice Testing
View previous topic :: View next topic  
Author Message
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11645
Location: California, USA

PostPosted: Sat Jul 18, 2015 6:48 pm    Post subject: Fix for security vulnerabilities Reply with quote

I recently heard about security vulnerability CVE-2015-1774 which affects OpenOffice and LibreOffice. This security vulnerability occurs when opening documents with a file name ending in .hwp.

Fortunately, the LibreOffice engineers have already fixed this security vulnerability in LibreOffice 4.4.2 so I backported their fix.

The fix for this security vulnerability is in the following test patches for anyone who wants to install the fix now:

NeoOffice 2014.12:
http://nick.neooffice.org/test/NeoOffice-2014.12-Test-1-Intel.dmg

NeoOffice 2014.12 Free Edition:
http://nick.neooffice.org/test/NeoOffice-2014.12_Free_Edition-Test-1-Intel.dmg

NeoOffice 3.4.1:
http://nick.neooffice.org/test/NeoOffice-3.4.1-Patch-16-Test-1-Intel.dmg


Last edited by pluby on Wed Aug 19, 2015 10:24 am; edited 1 time in total
Back to top
View user's profile Send private message Visit poster's website
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11645
Location: California, USA

PostPosted: Wed Jul 22, 2015 9:12 am    Post subject: Reply with quote

After backporting LibreOffice's fix for this CVE-2015-1774, I noticed that the LibreOffice engineers had already fixed a couple of other security vulnerabilities so I backported those as well.

Fixes for those other security vulnerabilities are in the following test patches:

NeoOffice 2014.12:
http://nick.neooffice.org/test/NeoOffice-2014.12-Test-2-Intel.dmg

NeoOffice 2014.12 Free Edition:
http://nick.neooffice.org/test/NeoOffice-2014.12_Free_Edition-Test-2-Intel.dmg

NeoOffice 3.4.1:
http://nick.neooffice.org/test/NeoOffice-3.4.1-Patch-16-Test-2-Intel.dmg

Patrick
Back to top
View user's profile Send private message Visit poster's website
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11645
Location: California, USA

PostPosted: Tue Aug 04, 2015 5:44 pm    Post subject: Reply with quote

FYI. I have included the fixes for these security vulnerabilties in NeoOffice 2014.13 which is available in Apple's Mac App Store.

I have also included the fixes in NeoOffice 3.4.1 Patch 17 which can be downloaded from the NeoOffice patch download page.

Patrick
Back to top
View user's profile Send private message Visit poster's website
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11645
Location: California, USA

PostPosted: Wed Aug 19, 2015 10:23 am    Post subject: Reply with quote

The LibreOffice engineers recently fixed another security vulnerability. This security vulnerability causes NeoOffice to crash and is triggered by a specially crafted .doc file.

I have backported LibreOffice's fix for this security vulnerability and the fix is in the following test patches:

NeoOffice 2014.13:
http://nick.neooffice.org/test/NeoOffice-2014.13-Test-2-Intel.dmg

NeoOffice 2014.13 Free Edition:
http://nick.neooffice.org/test/NeoOffice-2014.13_Free_Edition-Test-2-Intel.dmg

NeoOffice 3.4.1:
http://nick.neooffice.org/test/NeoOffice-3.4.1-Patch-17-Test-2-Intel.dmg

Patrick
Back to top
View user's profile Send private message Visit poster's website
pluby
The Architect
The Architect


Joined: Jun 16, 2003
Posts: 11645
Location: California, USA

PostPosted: Thu Sep 17, 2015 7:47 am    Post subject: Reply with quote

FYI. I have included the fix for the bug described in my previous post in NeoOffice 2015 which is available in Apple's Mac App Store.

I have also included the fix in NeoOffice 2015 Classic Edition which can be downloaded from the NeoOffice download page.

Patrick
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    NeoOffice Forum Index -> NeoOffice Testing All times are GMT - 7 Hours
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Powered by phpBB © 2001, 2005 phpBB Group

All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest © Planamesa Inc.
NeoOffice is a registered trademark of Planamesa Inc. and may not be used without permission.
PHP-Nuke Copyright © 2005 by Francisco Burzi. This is free software, and you may redistribute it under the GPL. PHP-Nuke comes with absolutely no warranty, for details, see the license.
Page Generation: 0.02 Seconds