This bug was fixed in the package libreoffice - 1:3.5.7-0ubuntu7 --------------- libreoffice (1:3.5.7-0ubuntu7) precise-security; urgency=medium
* SECURITY UPDATE: fix OLE objects (LP: #1380711) - CVE-2014-3575 * disable external mozilla header to fix FTBFS -- Bjoern Michaelsen <bjoern.michael...@canonical.com> Wed, 22 Oct 2014 16:11:30 +0200 ** Changed in: libreoffice (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libreoffice in Ubuntu. https://bugs.launchpad.net/bugs/1380711 Title: security CVE 2014-3575 Status in “libreoffice” package in Ubuntu: Fix Released Bug description: dear mantainers, as you can see here http://www.securitytracker.com/id/1030804, libreoffice earlier than 4.2.6 secfix1 is vulnerable, as apache openoffice earlier than 4.1.1 to CVE 2014-3575, if i understan correctly the report. thank's for you work. best regards Tiziano Casavecchia To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1380711/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp