openSUSE Security Update : calligra (openSUSE-SU-2012:1061-1)

This script is Copyright (C) 2014 Tenable Network Security, Inc.


Synopsis :

The remote openSUSE host is missing a security update.

Description :

Fix buffer overflow in MS Word ODF filter among other non-security
related bugs.

Also a version update to 2.4.3 happened :

- Words :

- Always show vertical scroll bar to avoid race condition
(kde#301076)

- Do not save with an attribue that makes LibreOffice and
OpenOffice crash (kde#298689 )

- Kexi :

- Fixed import from csv when “Start at Line”
value changed (kde#302209)

- Set limit to 255 characters for Text type (VARCHAR)
(kde#301277 and 301136)

+ - Remove limits for Text data type, leave as option
(kde#301277)

- Fixed data saving when focus policy for one of widgets
is NoFocus (kde#301109)

- Krita :

- Read and set the resolution for psd images

- Charts :

- Fix load/save styles of all shapes
(title,subtitle,axistitles,footer,etc.)

- Lines in the chart should be displayed (kde#271771)

- Combined Bar and Line Charts only show bars (Trendlines
not supported) (kde#288537)

- Load/save chart type for each dataset (kde#271771 and
288537)

See also :

http://lists.opensuse.org/opensuse-updates/2012-08/msg00041.html
https://bugzilla.novell.com/show_bug.cgi?id=774534

Solution :

Update the affected calligra packages.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

Family: SuSE Local Security Checks

Nessus Plugin ID: 74724 ()

Bugtraq ID:

CVE ID: CVE-2012-3456

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now