UbuntuUpdates.org

Package "libreoffice-mysql-connector"

Name: libreoffice-mysql-connector

Description:

transitional package for MariaDB/MySQL Connector extension for LibreOffice
Latest version: 1:6.4.7-0ubuntu0.20.04.10
Release: focal (20.04)
Level: updates
Repository: universe
Head package: libreoffice
Homepage: http://www.libreoffice.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libreoffice-mysql-connector"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libreoffice-mysql-connector" in Focal

Repository Area Version
base universe 1:6.4.2-0ubuntu3
security universe 1:6.4.7-0ubuntu0.20.04.10
backports universe 1:7.4.7-0ubuntu0.22.10.1~bpo20.04.1

Changelog

Version: 1:6.4.7-0ubuntu0.20.04.5 2022-10-06 16:06:22 UTC

  libreoffice (1:6.4.7-0ubuntu0.20.04.5) focal-security; urgency=medium

  * SECURITY UPDATE: Improper Certificate Validation vulnerability
    - debian/patches/CVE-2022-26305.patch: compare authors using Thumbprint
      in xmlsecurity/source/component/documentdigitalsignatures.cxx.
    - CVE-2022-26305
  * SECURITY UPDATE: stored passwords IV always the same
    - debian/patches/CVE-2022-26306.patch: add Initialization Vectors to
      password storage in
      officecfg/registry/schema/org/openoffice/Office/Common.xcs,
      svl/source/passwordcontainer/passwordcontainer.cxx,
      svl/source/passwordcontainer/passwordcontainer.hxx.
    - CVE-2022-26306
  * SECURITY UPDATE: password storage master key weak entropy
    - debian/patches/CVE-2022-26307-1.patch: make hash encoding match
      decoding in
      officecfg/registry/schema/org/openoffice/Office/Common.xcs,
      svl/source/passwordcontainer/passwordcontainer.cxx,
      svl/source/passwordcontainer/passwordcontainer.hxx,
      uui/source/iahndl-authentication.cxx.
    - debian/patches/CVE-2022-26307-2.patch: add infobar to prompt to
      refresh to replace old format in include/sfx2/strings.hrc,
      include/sfx2/viewfrm.hxx, sfx2/source/view/viewfrm.cxx.
    - CVE-2022-26307

 -- Marc Deslauriers <email address hidden> Thu, 29 Sep 2022 08:40:35 -0400
Source diff to previous version
CVE-2022-26305 An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only
CVE-2022-26306 LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a sin
CVE-2022-26307 LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a sin

Version: 1:6.4.7-0ubuntu0.20.04.4 2022-03-15 20:07:30 UTC

  libreoffice (1:6.4.7-0ubuntu0.20.04.4) focal-security; urgency=medium

  * SECURITY UPDATE: Improper certificate validation
    - debian/patches/CVE-2021-25636.patch: only use X509Data in
      xmlsecurity/inc/xmlsec-wrapper.h,
      xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx,
      xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx.
    - CVE-2021-25636
  * debian/rules: limit NUM_CPUS to 3 on amd64 to fix FTBFS.

 -- Marc Deslauriers <email address hidden> Mon, 14 Mar 2022 11:28:35 -0400
Source diff to previous version
CVE-2021-25636 LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occur

Version: 1:6.4.7-0ubuntu0.20.04.2 2021-11-22 15:06:44 UTC

  libreoffice (1:6.4.7-0ubuntu0.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: Improper certificate validation
    - debian/patches/CVE-2021-2563x-*.patch: multiple commits to fix
      security issues.
    - CVE-2021-25633
    - CVE-2021-25634

 -- Marc Deslauriers <email address hidden> Tue, 16 Nov 2021 12:42:50 -0500
Source diff to previous version
CVE-2021-25633 LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occur
CVE-2021-25634 LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occur

Version: 1:6.4.7-0ubuntu0.20.04.1 2021-04-15 11:06:23 UTC

  libreoffice (1:6.4.7-0ubuntu0.20.04.1) focal; urgency=medium

  * New upstream release (LP: #1906684)
  * Move libreoffice-sdbc-hsqldb to Recommends (LP: #1916786)
  * Fix Calc crash in ScSelectionTransferObj (LP: #1897784)

 -- Rico Tzschichholz <email address hidden> Mon, 15 Mar 2021 19:12:01 +0100
Source diff to previous version
1906684 [SRU] libreoffice 6.4.7 for Focal
1916786 weak dependency to libreoffice-sdbc-hsqldb
1897784 /usr/lib/libreoffice/program/soffice.bin:11:ScSelectionTransferObj::~ScSelectionTransferObj:ScSelectionTransferObj::~ScSelectionTransferObj:com::sun:

Version: 1:6.4.6-0ubuntu0.20.04.1 2020-09-23 18:06:55 UTC

  libreoffice (1:6.4.6-0ubuntu0.20.04.1) focal; urgency=medium

  * New upstream release (LP: #1892783)

 -- Heather Ellsworth <email address hidden> Mon, 24 Aug 2020 16:58:01 -0600
1892783 [SRU] libreoffice 6.4.6 for focal


About   -   Send Feedback to @ubuntu_updates