------------------------------------------------------------ revno: 1810 committer: Rene Engelhard <r...@debian.org> branch nick: debian timestamp: Fri 2010-02-12 01:55:00 +0100 message: mention security fixes modified: changelog
=== modified file 'changelog' --- a/changelog 2010-02-11 17:39:54 +0000 +++ b/changelog 2010-02-12 00:55:00 +0000 @@ -17,6 +17,7 @@ - build-depend on libjpeg-dev instead of libjpeg62-dev * debian/control.ure.in: fix uno-libs3*'s ure replaces + * debian/changelog: mention security fixes in last uploads -- Rene Engelhard <r...@debian.org> Thu, 11 Feb 2010 13:48:29 +0100 @@ -161,6 +162,7 @@ * ooo-build - update (26ed7c54320e44e0d31005c7db78194257ec80c8) + - fixes vba macros not honouring macro security settings (CVE-2010-0136) - makes "Always allow saving of document" configurable (closes: #478130) - src: add OOO320 GSIs from ftp.linux.cz @@ -241,6 +243,10 @@ openoffice.org (1:3.2.0~ooo320m6-1) experimental; urgency=low * OpenOffice.org 3.2.0 release branch milestone 6 + - fixes "OpenOffice.org XPM Import Integer Overflow" (CVE-2009-2949) + and "OpenOffice.org GIF Import Heap Overflow" (CVE-2009-2950 + - fixes "OOO sprmTDefTable issue" (CVE-2009-3301) and + "OOO sprmTSetBrc issue" (CVE-2009-3302) * ooo-build - update (405cdcba2ee1f14ddac18095cff2e2c3df907719) @@ -332,6 +338,7 @@ openoffice.org (1:3.2.0~beta-1) experimental; urgency=low * OpenOffice.org 3.2.0 beta (OOO320_m2) + - fixes internal libxmlsec copy for CVE-2009-0217 - paste into memo field doesn't replace existing content anymore (closes: #482473) - has many performance improvements for Base (closes: #488202)