Группа :: Офис
Пакет: LibreOffice-still
навигация по пакетам
Главная Изменения Спек Патчи Sources Загрузить Gear Bugs and FR Repocop
29 сентября 2023 Andrey Cherepanov <cas at altlinux.org> 7.5.7.1-alt2
- Rebuilt with bundled mdds and orcus.
- New version.
- Add LibreOffice-still-langpack-uz with Uzbek localization.
- Complete Russian localization of interface.
- New version.
- New version.
- Fixed build with Boost 1.82.
- New version (ALT #46320).
- Security fixes:
+ CVE-2023-2255 Remote documents loaded without prompt via IFrame
+ CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Built with KDE5 support.
- New version.
- New version.
- Required spell dictionary for langpack (ALT #42242).
- New version.
- Security fixes in 7.3.6.2:
+ CVE-2022-3140 Macro URL arbitrary script execution
- New version.
- New version.
- Security fixes:
+ CVE-2022-26305 Execution of Untrusted Macros Due to Improper Certificate Validation
+ CVE-2022-26306 Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password
+ CVE-2022-26307 Weak Master Keys
- New version.
- New version.
- NMU: - adapted spec for kf5-kcoreaddons-devel-5.91.0-alt1 and kf5-kcoreaddons-devel-5.90.0-alt1
- Security fixes:
+ CVE-2021-25636 Incorrect trust validation of signature with ambiguous KeyInfo children
- NMU: Fix build (ftbfs)
- Fix id and add icons to appdata metainfo.
- New Still version.
- Add information about Still version and package names to appdata files.
- Use bundled liborcus
- Use bundled mdds-1.5.
- New version.
- Exclude libvclplug_gtk3_kde5lo.so from LibreOffice-still-gtk3.
- New version.
- New version.
- Security fixes:
+ CVE-2021-25633 Content Manipulation with Double Certificate Attack
+ CVE-2021-25634 Timestamp Manipulation with Signature Wrapping
+ CVE-2021-25635 Content Manipulation with Certificate Validation Attack
- New version.
- Use gtk3-kde5 vcl instead of kde5 due to incorrect icon scaling.
- Build with bundled liborcus-0.15.
- New version.
- Use python3 autoreq for python scripts.
- docxexport: export russianUpper/russianLower numbering.
- New version.
- Use -fPIC for build on any architectures.
- Remove BR: openjdk-devel from non-java builds.
- New version.
- Add Greek languagepack (ALT #39636).
- Use all available processors for build.
- Get rid of java-related BRs in non-java builds.
- Fix build on mipsel.
- Do not provide liblibreofficekitgtk.so (ALT #39219).
- New Still version 6.4.7.2.
- Package KDE5-specific libraries to LibreOffice-still-kde5.
- New version 6.4.6.2 (Still).
- Remove deprecated package LibreOffice-still-gtk2.
- New version 6.4.5.2 (Still).
- Fixed:
+ CVE-2020-12801 Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save
+ CVE-2020-12802 remote graphics contained in docx format retrieved in 'stealth mode'
+ CVE-2020-12803 XForms submissions could overwrite local files - Install mime package bundle for LibreOffice MIME types.
- Rebuild with dconf enabled (Closes: 38753).
- Remove deprecated libtelepathy-devel.
- Put libreoffice- prefix to icons and desktop files (ALT #38480).
- New version 6.3.6.2 (Still).
- New version 6.3.5.2 (Still).
- Set MOZILLA_CERTIFICATE_FOLDER as default Firefox profile.
- Remove version from Name and icon names in desktop files.
- Remove old scalable icons.
- Do not use version suffux for icons and in desktop files.
- Rebuilt with mdds-1.5.0 and boost-1.71.0.
- New version 6.2.8.2 (Still).
- New version 6.2.7.1 (Still).
- Fixed:
+ CVE-2019-9849 Disabled fetching remote bullet graphics in 'stealth mode'
+ CVE-2019-9850 Fixed insufficient URL validation that allowed LibreLogo script execution
+ CVE-2019-9851 Fixed LibreLogo global-event script execution issue
+ CVE-2019-9852 Fixed insufficient URL encoding flaw in allowed script location check
+ CVE-2019-9854 Fixed unsafe URL assembly flaw
+ CVE-2019-9855 Fixed path equivalence handling flaw
- New version 6.2.6.2 (Still).
- Fixed:
+ CVE-2019-9848 Fixed an arbitrary script execution via LibreLogo
- Require pentaho-reporting-flow-engine only if build with java
support.
- Requires pentaho-reporting-flow-engine for queries in Base.
- New version 6.1.6.3 (Still).
- New version 6.1.6.2 (Still).
- New version 6.1.5.2 (Still).
- New version 6.0.7.3 (Still).
- Link with bundled poppler-0.66.
- New version 6.0.7.2 (Still).
- Unexpected abort fixed (bug #35444) by mrdrew@.
- New version 6.0.7.1 (Still).
- Build with bundled old mdds/orcus
- New version 6.0.6.2 (Still).
- Disable CoinMP.
- Use simplified scalable desktop icons from LibreOffice 6.1.
- NMU: rebuilt with boost-1.67.0
- New version 5.4.7.2 (Still).
- New package LibreOffice-still with Still version of LibreOffice for Sisyphus.
- New version 5.4.7.1 (Still).
- New version 5.4.6.2 (Still) (ALT #34502)
- Return Oxygen icon theme from LibreOffice 5.3.
- Update to 5.4.3.2
- Version up
- Rebuilt with libCoinMP-1.8.3.
- New stable version 5.3.7.2
- Update to 5.4.2.2
- Update to 5.4.1.2
- Update to 5.4.0.3
- Enable languagetool extension
- Update to 5.3.3.2
- Build SDK
- Update to 5.3.2.2
- Update to 5.3.0.3
- Change versioning scheme
- Update to 5.2.3.1
- Update to 5.2.1.1
- Update to 5.2.0.2
- (closes: #31953)
- Update to 5.2.0.1
- Update to 5.1.3.2
- Fix buildreqs
- Update to 5.1.2.1
- Build with system python again
- Update to 5.1.1.3
- Build without forky (turns out -XX:ParallelGCThreads=2 fixes OOM)
- Update to 5.1.1.1
- Build with internal Python3
- Update to 5.0.3.2
- Update to 5.0.3.1
- Rename package
- Remove -standalone package
- Update to 4.4.1.2
- Update to 4.4.0.3
- Turn tt and be langpacks on
- Update to 4.3.5.1
- Update to 4.3.4.1
- Update to 4.3.3.2
- Provide loffice binary (Closes: #30044)
- Reqiure gst-libav (Closes: #30015)
- 4.3.0.0.beta2-buildfix1
- update BR:
- switch to librevenge-based import libs
- Version up to 4.2.4.1
- Version up to 4.2.3.3
- Version up
- Merge -full package into general one
- Buld with help (closes: #29735)
- Require gst1.0 plugins to install (closes: #29782)
- Build with --enable-release-build
- Version up to officially corporative stable 4.1.4.2
- Disable applied patches
- Version up to officially stable 4.1.3.2
- More accurate forky utilization
- Version up to 4.1.2.3
- rebuild against libharfbuzz-icu
- Version up to 4.1.1.2
- Refresh FC patchset
- Un-hardcode /tmp usage (Closes: 29267)
- fixed gnome file list
- fixed kde file list
- drop use gnome-open in gnome-open-url.sh
- build with gstreamer-1.0
- build with system libraries (libodfgen,libcdr,libmspub,libmwaw,libvisio,libcmis,libexttextcat)
- build with system jar files
- changed configure options --with-system-* to --with-system-libs
- Version up to 4.1.0.4
- Renew FC patchset (previous ones are pushed to upstream)
- Version up to 4.0.3.3
- Drop some RH patches accepted by upstream
- NMU: rebuilt with new poppler
- Closes: 28883
- Drop some internal libraries build
- Version up to 4.0.2.2
- Incoprporate useful RH patches
- Introduce Kazakh locale
- Fix common binary displacement
- Fix conflicts with LO3
- Introduce "full" package (without langpacks and GNOME/KDE stuff)
- Update to 4.0.2.1
- Introduce extra extensions
- Separate LibreOffice-still-standalone and LibreOffice-still-integrated packages
- Introduce LibreOffice-still-mimetype
- Separate KDE4 plugins
- Apply Firefox certificates import patch
- Initial test build