File _patchinfo of Package patchinfo.5696

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.5696

<patchinfo incident="5696">
  <issue id="1000102" tracker="bnc">gnome-documents crashed and dumped core</issue>
  <issue id="987553" tracker="bnc">Dereference of invalid STL iterator on processing RTF file</issue>
  <issue id="2016-4324" tracker="cve" />
  <category>security</category>
  <rating>low</rating>
  <packager>scarabeus_iv</packager>
  <description>LibreOffice was updated to version 5.1.5.2, bringing enhancements and bug fixes.

- CVE-2016-4324: Parsing the Rich Text Format character style index was insufficiently
  checked for validity. Documents could be constructed which dereference an iterator to
  the first entry of an empty STL container. (bsc#987553)
- Don't use "nullable" for introspection, as it isn't available on SLE 12's version
  of gobject-introspection. This prevents a segmentation fault in gnome-documents.
  (bsc#1000102)

This update was imported from the SUSE:SLE-12:Update update project.</description>
  <summary>Security update for libreoffice</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.5696

Places