File _patchinfo of Package patchinfo.13097

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.13097

<patchinfo incident="13097">
  <issue tracker="bnc" id="1144522">make LibreLogo a separate package</issue>
  <issue tracker="bnc" id="1105173">cmis-client - Fails to build with Boost 1.68.0</issue>
  <issue tracker="bnc" id="1061210">Table(s) from DOCX  show wrong position/color/...?</issue>
  <issue tracker="bnc" id="1152684">VUL-1: CVE-2019-9853: libreoffice: macro execution bypassed the security settings</issue>
  <issue tracker="cve" id="2019-9853"/>
  <issue tracker="jsc" id="SLE-8705"/>
  <issue tracker="jsc" id="ECO-212"/>
  <packager>scarabeus_iv</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for LibreOffice</summary>
  <description>This update libreoffice and libraries fixes the following issues:

LibreOffice was updated to 6.3.3 (jsc#SLE-8705), bringing many bug and stability fixes.

More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3	  
	  
Security issue fixed:

- CVE-2019-9853: Fixed an issue where by executing macros, the security settings 
  could have been bypassed (bsc#1152684).	  
	  
Other issues addressed:

- Dropped disable-kde4 switch, since it is no longer known by configure
- Disabled gtk2 because it will be removed in future releases 
- librelogo is now a standalone sub-package (bsc#1144522).
- Partial fixes for an issue where Table(s) from  DOCX showed wrong 
  position or color (bsc#1061210).
	  
cmis-client was updated to 0.5.2:

* Removed header for Uuid's sha1 header(bsc#1105173).
 * Fixed Google Drive login
 * Added support for Google Drive two-factor authentication
 * Fixed access to SharePoint root folder 
 * Limited the maximal number of redirections to 20 
 * Switched library implementation to C++11 (the API remains C++98-compatible)
 * Fixed encoding of OAuth2 credentials
 * Dropped cppcheck run from "make check". A new "make cppcheck" target was created for it
 * Added proper API symbol exporting
 * Speeded up building of tests a bit
 * Fixed a few issues found by coverity and cppcheck

libixion was updated to 0.15.0:

* Updated for new liborcus
 * Switched to spdlog for compile-time debug log outputs
 * Fixed various issues

libmwaw was updated 0.3.15:
 
 * Fixed fuzzing issues

liborcus was updated to 0.15.3:

* Fixed various xml related bugs
 * Improved performance
 * Fixed multiple parser issues 
 * Added map and structure mode to orcus-json
 * Other improvements and fixes

mdds was updated to 1.5.0:

* API changed to 1.5
 * Moved the API incompatibility notes from README to the rst doc.
 * Added the overview section for flat_segment_tree.

myspell-dictionaries was updated to 20191016:

* Updated Slovenian thesaurus
 * Updated the da_DK dictionary
 * Removed the abbreviations from Thai hunspell dictionary
 * Updated the English dictionaries
 * Fixed the logo management for "ca"

spdlog was updated to 0.16.3:

* Fixed sleep issue under MSVC that happens when changing
   the clock backwards 
 * Ensured that macros always expand to expressions 
 * Added global flush_on function

bluez changes:

* lib: Changed bluetooth.h to compile in strict C

gperf was updated to 3.1:

* The generated C code is now in ANSI-C by default.
 * Added option --constants-prefix.
 * Added declaration %define constants-prefix.

</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.13097

Places