Bug 212379 - security/vuxml: Security vulnerability in editors/openoffice-4 (CVE-2014-3575)
Summary: security/vuxml: Security vulnerability in editors/openoffice-4 (CVE-2014-3575)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Mark Felder
URL: http://www.openoffice.org/security/cv...
Keywords: needs-patch, security
Depends on:
Blocks:
 
Reported: 2016-09-04 23:58 UTC by Sevan Janiyan
Modified: 2016-10-12 01:23 UTC (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sevan Janiyan 2016-09-04 23:58:44 UTC 
CVE-2014-3575 - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3575
Comment 1 VK freebsd_triage 2016-10-07 11:00:16 UTC 
* Upstream report:
  http://www.openoffice.org/security/cves/CVE-2014-3575.html

> Versions Affected:
> * Apache OpenOffice 4.1.0 and older on Windows.
> * OpenOffice.org versions are also affected.
> Apache OpenOffice users are advised to upgrade to Apache OpenOffice 4.1.1.
Comment 2 commit-hook freebsd_committer freebsd_triage 2016-10-12 01:17:47 UTC 
A commit references this bug:

Author: feld
Date: Wed Oct 12 01:17:13 UTC 2016
New revision: 423814
URL: https://svnweb.freebsd.org/changeset/ports/423814

Log:
  Document OpenOffice vulnerability

  PR:		212379
  Security:	CVE-2014-3575

Changes:
  head/security/vuxml/vuln.xml
Comment 3 Mark Felder freebsd_committer freebsd_triage 2016-10-12 01:23:09 UTC 
Thanks for your report!