libreoffice 1:6.0.7-0ubuntu0.18.04.9 source package in Ubuntu

Changelog

libreoffice (1:6.0.7-0ubuntu0.18.04.9) bionic-security; urgency=medium

  * SECURITY UPDATE: Insufficient URL validation allowing LibreLogo script execution
    - debian/patches/CVE-2019-9850_1_2.diff: decode escape codes and ban scripts
      with "LibreLogo" anywhere in its path.
    - CVE-2019-9850
  * SECURITY UPDATE: LibreLogo global-event script execution
    - debian/patches/CVE-2019-9850_1_2.diff: catch more LibreLogo script executions
      by expanding check to global events.
    - CVE-2019-9851
  * SECURITY UPDATE: Insufficient URL encoding flaw in allowed script location check
    - debian/patches/CVE-2019-9850_1_2.diff: ensure that all URLs leaving
      scriptURI2StorageUri() are percent-encoded.
    - CVE-2019-9852

 -- Marcus Tomlinson <email address hidden>  Wed, 14 Aug 2019 15:15:42 +0100

Upload details

Uploaded by:
Marcus Tomlinson
Sponsored by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
alpha amd64 arm64 armel armhf hppa i386 ia64 kfreebsd-amd64 kfreebsd-i386 m68k mips mipsel mips64 mips64el powerpc powerpcspe ppc64 ppc64el s390 s390x sparc sparc64 all
Section:
editors
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libreoffice_6.0.7.orig-helpcontent2.tar.xz 2.3 MiB 41c1ef4b0437acd7e8ba36789b45906e99e0487b12198bce0d30ed74c9e0ccaf
libreoffice_6.0.7.orig-tarballs.tar.xz 205.5 MiB 96116dcc195ab1f47fa677bf88f8d233561422dbfe5a0539f7408b56e254c194
libreoffice_6.0.7.orig-translations.tar.xz 133.1 MiB 24a3ef909cfb0722dec3d6e40924681b41641f175e5df90b3e5507fdceb43186
libreoffice_6.0.7.orig.tar.xz 174.7 MiB fc67036b0c00c1685d39acec6c485a4a250b6bb92fc08a88377d39d2f7fd7923
libreoffice_6.0.7-0ubuntu0.18.04.9.debian.tar.xz 2.1 MiB 06f86b944ed1dc59474ddd257c000c8f3d74cb747f4d11ee35515ddcd05114f6
libreoffice_6.0.7-0ubuntu0.18.04.9.dsc 17.7 KiB a695f24a87b70e96aa4582fa4d0f69f7e6f056285e717121e7059c3ce2231f11

View changes file

Binary packages built by this source

fonts-opensymbol: OpenSymbol TrueType font

 This package contains the OpenSymbol TrueType font included in
 LibreOffice. This font contains symbols (like fonts as Wingdings(tm)),
 bullets (needed for bullets in LibreOffice) and non-latin character

gir1.2-lokdocview-0.1: GTK3 widget wrapping LibreOffice functionality - introspection

 LOKDocView is the GTK3 widget that wraps the libreoffice functionality and
 exposes a simple API for applications to use this widget.
 .
 This package contains the Introspection data.

liblibreofficekitgtk: GTK3 widget wrapping LibreOffice functionality

 This package contains a (basic) GTK+ document viewer widget (used
 by e.g. LOKDocView)

liblibreofficekitgtk-dbgsym: debug symbols for liblibreofficekitgtk
libreoffice: office productivity suite (metapackage)

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This metapackage installs all components of libreoffice:
  * libreoffice-writer: Word processor
  * libreoffice-calc: Spreadsheet
  * libreoffice-impress: Presentation
  * libreoffice-draw: Drawing
  * libreoffice-base: Database
  * libreoffice-math: Equation editor
 It also recommends additional packages (e.g. fonts) in order to match an
 upstream LibreOffice install as closely as possible.
 .
 You can extend the functionality of LibreOffice by installing these
 packages:
  * hunspell-*/myspell-*: Hunspell/Myspell dictionaries
    for use with LibreOffice
  * libreoffice-l10n-*: UI interface translation
  * libreoffice-help-*: User help
  * mythes-*: Thesauri for the use with LibreOffice
  * hyphen-*: Hyphenation patterns for LibreOffice
  * libreoffice-gtk(2|3): Gtk UI Plugin, GNOME File Picker support
  * libreoffice-gnome: GIO backend
  * unixodbc: ODBC database support
  * cups-bsd: Allows LibreOffice to detect your CUPS printer queues
    automatically
  * libsane: Use your sane-supported scanner with LibreOffice
  * libxrender1: Speed up display by using Xrender library
  * libgl1: OpenGL support
  * openclipart-libreoffice: Open Clip Art Gallery with LibreOffice index
    files
  * firefox-esr | thunderbird | firefox:
    Mozilla profile with Certificates needed for XML Security...
  * openjdk-11-jre | openjdk-8-jre | java8-runtime:
    Java Runtime Environment for use with LibreOffice
  * pstoedit / imagemagick / ghostscript: helper tools for EPS
  * gstreamer0.10-plugins-*: GStreamer plugins for use with LibreOffices
    media backend
  * libpaper-utils: papersize detection support via paperconf
  * bluez: Bluetooth support for Impress (slideshow remote control)

libreoffice-avmedia-backend-gstreamer: transitional package for GStreamer backend for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package used to contain the GStreamer backend for LibreOffice.
 This has now been merged into the "core" package and this package thus
 can be safely removed once installed.

libreoffice-avmedia-backend-gstreamer-dbgsym: debug symbols for libreoffice-avmedia-backend-gstreamer
libreoffice-base: office productivity suite -- database

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the database component for LibreOffice.

libreoffice-base-core: office productivity suite -- shared library

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains common libraries of LibreOffice Base used by
 Base, Writer and Calc.
 .
 If you need full Base functionality (or actual database drivers), please
 install libreoffice-base (and/or libreoffice-base-drivers and/o
 libreoffice-sdbc-*).

libreoffice-base-core-dbgsym: debug symbols for libreoffice-base-core
libreoffice-base-dbgsym: debug symbols for libreoffice-base
libreoffice-base-drivers: Database connectivity drivers for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the database connectivity drivers used by LibreOffices
 database functionality:
  - ODBC
  - JDBC
  - dBase
  - Calc
  - Flat files
 .
 You can extend this by installing:
 .
  * unixodbc: ODBC database support
  * libmyodbc | odbc-postgresql | libsqliteodbc | tdsodbc | odbc-mdbtools: ODBC
    drivers for:
    - MySQL
    - PostgreSQL
    - SQLite
    - MS SQL / Sybase SQL
    - *.mdb (JET / MS Access)
  * libmariadb-java | libpg-java | libjtds-java: JDBC Drivers
    for:
    - MySQL/MariaDB
    - PostgreSQL
    - MS SQL Server and Sybase
  * libreoffice-sdbc-hsqldb: embedded HSQLDB SDBC Driver
  * libreoffice-sdbc-firebird: Firebird SDBC Driver
  * libreoffice-sdbc-postgresql: PostgreSQL SDBC Driver
  * libreoffice-sdbc-mysql: MySQL/MariaDB SDBC Driver

libreoffice-base-drivers-dbgsym: debug symbols for libreoffice-base-drivers
libreoffice-calc: office productivity suite -- spreadsheet

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the spreadsheet component for LibreOffice.

libreoffice-calc-dbgsym: debug symbols for libreoffice-calc
libreoffice-common: office productivity suite -- arch-independent files

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the architecture-independent files of
 LibreOffice.

libreoffice-core: office productivity suite -- arch-dependent files

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the architecture-dependent core files of
 LibreOffice. See the libreoffice package for more information.

libreoffice-core-dbgsym: debug symbols for libreoffice-core
libreoffice-dev: office productivity suite -- SDK -- architecture-dependent parts

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the (architecture-dependent) files needed to build
 plugins/add-ons for LibreOffice (build tools, libraries, arch-dependent
 includes, ...).

libreoffice-dev-common: office productivity suite -- SDK -- architecture-independent parts

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the (architecture-independent) files needed to build
 plugins/add-ons for LibreOffice (includes, IDL files, ...)

libreoffice-dev-dbgsym: debug symbols for libreoffice-dev
libreoffice-dev-doc: office productivity suite -- SDK documentation

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the documentation of the LibreOffice SDK:
 .
  * C++/Java API reference
  * IDL reference
  * C++/Java/Basic examples

libreoffice-draw: office productivity suite -- drawing

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the drawing component for LibreOffice.

libreoffice-draw-dbgsym: debug symbols for libreoffice-draw
libreoffice-evolution: office productivity suite -- Evolution addressbook support

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package allows LibreOffice to access Evolution address books.
 You need to install evolution separately.

libreoffice-evolution-dbgsym: debug symbols for libreoffice-evolution
libreoffice-gnome: office productivity suite -- GNOME integration

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the GIO support.
 .
 You can extend the functionality of this by installing these packages:
 .
  * libreoffice-evolution: Evolution addressbook support
  * evolution

libreoffice-gnome-dbgsym: debug symbols for libreoffice-gnome
libreoffice-gtk: transitional package for LibreOffice gtk2 backend

 This package used to contain the LibreOffice gtk2 backend. The package has
 been renamed to libreoffice-gtk2 to distinguish it from the gtk3 backend.
 .
 You can safely remove this package.

libreoffice-gtk2: transitional package for LibreOffice gtk2 backend

 This package used to contain the LibreOffice gtk2 backend.
 .
 You can safely remove this package.

libreoffice-gtk2-dbgsym: debug symbols for libreoffice-gtk2
libreoffice-gtk3: office productivity suite -- GTK+ 3 integration

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the Gtk plugin for drawing LibreOffices widgets
 with Gtk+ 3 and Gtk/GNOMEish print dialog when running under GNOME.

libreoffice-gtk3-dbgsym: debug symbols for libreoffice-gtk3
libreoffice-impress: office productivity suite -- presentation

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the presentation component for LibreOffice.

libreoffice-impress-dbgsym: debug symbols for libreoffice-impress
libreoffice-java-common: office productivity suite -- arch-independent Java support files

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the architecture-independent files of
 the Java support for LibreOffice (Java classes, scripts, config snippets).

libreoffice-kde: transitional package for LibreOffice KDE integration

 This package used to contain the LibreOffice KDE 4 backend. The package has
 been renamed to libreoffice-kdeX and this package now depends on the new
 libreoffice-kde5 packages.
 .
 You can safely remove this package.

libreoffice-kde4: transitional package for LibreOffice KDE integration

 This package used to contain the LibreOffice KDE 4 backend.
 .
 You can safely remove this package.

libreoffice-kde4-dbgsym: debug symbols for libreoffice-kde4
libreoffice-l10n-in: office productivity suite -- Indic language packages

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package is a metapackage installing l10n packages for all available
 indic languages.

libreoffice-l10n-za: office productivity suite -- South African language packages

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package is a metapackage installing l10n packages for all 11 South
 African languages.

libreoffice-librelogo: Logo-like programming language for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains Librelogo, which is a pyuno-based Logo-like programming
 language with interactive vectorgraphics for education and DTP
  - basic Logo syntax for back compatibility with educational Logo systems
  - interactive vectorgraphics in LibreOffice Writer
  - native commands (easily translatable)
  - Python data structures (list, tuple, set, dictionary) and other Python
    features

libreoffice-math: office productivity suite -- equation editor

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the equation editor component for LibreOffice.

libreoffice-math-dbgsym: debug symbols for libreoffice-math
libreoffice-mysql-connector: transitional package for MariaDB/MySQL Connector extension for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package used to contain the LibreOffice MySQL/MariaDB Connector extension.
 This has now been added to the "main" packages (libreoffice-sdbc-mysql)
 and this package thus can be safely removed once installed.

libreoffice-mysql-connector-dbgsym: debug symbols for libreoffice-mysql-connector
libreoffice-nlpsolver: "Solver for Nonlinear Programming" extension for LibreOffice

 By default LibreOffice Calc ships with a solver engine for linear
 programming only. This allows the optimization of models to a certain degree.
 However, if the formulas or constraints become more complex,
 nonlinear programming is required. That missing gap is now filled by the
 Solver for Nonlinear Programming extension.
 .
 Currently it incorporates two Evolutionary Algorithms which are able to
 handle floating point and integer variables as well as nonlinear constraints.

libreoffice-officebean: transitional package for libofficebean-java

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package formerly contained binaries for the the LibreOffice Office Bean
 for embedding LibreOffice in custom Java applications.
 .
 This has now been merged into libofficebean-java so this package can safely
 be removed.

libreoffice-officebean-dbgsym: debug symbols for libreoffice-officebean
libreoffice-ogltrans: transitional package for libreoffice-ogltrans

 This package used to contain the OpenGL slide transitions for LibreOffice
 Impress.
 That has been merged into libreoffice-impress directly and thus this package
 can be safely removed.

libreoffice-ogltrans-dbgsym: debug symbols for libreoffice-ogltrans
libreoffice-pdfimport: transitional package for PDF Import component for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package formerly contained a component enabling LibreOffice to import PDF
 Documents. This now has been merged back into the "main" packages and this
 package thus can be safely removed once installed.

libreoffice-report-builder: LibreOffice component for building database reports

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the report builder:
  "Create with the Sun Report Builder stylish, smart-looking database reports.
  The flexible report editor can define group and page headers as well as
  group and page footers and even calculation fields are available to
  accomplish complex database reports."

libreoffice-report-builder-bin: LibreOffice component for building database reports -- libraries

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains some architecture-dependent support libraries
 (librpt*.so) for the report builder component.

libreoffice-report-builder-bin-dbgsym: debug symbols for libreoffice-report-builder-bin
libreoffice-script-provider-bsh: BeanShell script support provider for LibreOffice scripting framework

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 The Scripting Framework allows LibreOffice users to write and run macros
 in multiple languages including LibreOffice Basic, Python, Java, BeanShell
 and JavaScript. These macros can then be assigned to menus, toolbars,
 keyboard shortcuts, events and embedded objects.
 .
 This package contains the script provider to support BeanShell.

libreoffice-script-provider-js: JavaScript script support provider for LibreOffice scripting framework

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 The Scripting Framework allows LibreOffice users to write and run macros
 in multiple languages including LibreOffice Basic, Python, Java, BeanShell
 and JavaScript. These macros can then be assigned to menus, toolbars,
 keyboard shortcuts, events and embedded objects.
 .
 This package contains the script provider to support JavaScript.

libreoffice-script-provider-python: Python script support provider for LibreOffice scripting framework

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 The Scripting Framework allows LibreOffice users to write and run macros
 in multiple languages including LibreOffice Basic, Python, Java, BeanShell
 and JavaScript. These macros can then be assigned to menus, toolbars,
 keyboard shortcuts, events and embedded objects.
 .
 This package contains the script provider to support Python.

libreoffice-sdbc-firebird: Firebird SDBC driver for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 The Firebird SDBC Driver allows one to use the Firebird database from
 LibreOffice without any wrapper layer such as ODBC or JDBC.

libreoffice-sdbc-firebird-dbgsym: debug symbols for libreoffice-sdbc-firebird
libreoffice-sdbc-hsqldb: HSQLDB SDBC driver for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 The HSQLDB SDBC Driver allows one to use the HSQLDB embedded database from
 LibreOffice without any wrapper layer such as ODBC or JDBC.

libreoffice-sdbc-hsqldb-dbgsym: debug symbols for libreoffice-sdbc-hsqldb
libreoffice-sdbc-postgresql: PostgreSQL SDBC driver for LibreOffice

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 The PostgreSQL SDBC Driver allows one to use the PostgreSQL database from
 LibreOffice without any wrapper layer such as ODBC or JDBC.

libreoffice-sdbc-postgresql-dbgsym: debug symbols for libreoffice-sdbc-postgresql
libreoffice-style-breeze: office productivity suite -- Breeze symbol style

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the "breeze" symbol style, default style for KDE 5.

libreoffice-style-elementary: office productivity suite -- Elementary symbol style

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the "elementary" symbol style, default style
 for GTK+/Gnome.

libreoffice-style-galaxy: transitional package for Galaxy symbol style

 You can safely remove this package.

libreoffice-style-hicontrast: transitional package for Hicontrast symbol style

 You can safely remove this package.

libreoffice-style-human: transitional package for Human symbol style

 You can safely remove this package.

libreoffice-style-oxygen: transitional package for Oxygen symbol style

 You can safely remove this package.

libreoffice-style-sifr: office productivity suite -- Sifr symbol style

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the "sifr" symbol style (an adaption of the Gnome
 symbolic theme), needs to be manually enabled in the LibreOffice option
 menu.

libreoffice-style-tango: transitional package for Tango symbol style

 You can safely remove this package.

libreoffice-subsequentcheckbase: LibreOffice java test libraries

 Java libraries LibreOffice subsequentchecks integration test suite

libreoffice-systray: transitional package for removed LibreOffice "Quickstarter"

 You can safely remove this package.

libreoffice-systray-dbgsym: debug symbols for libreoffice-systray
libreoffice-wiki-publisher: LibreOffice extension for working with MediaWiki articles

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains an extension to create/edit/publish MediaWiki
 articles with LibreOffice

libreoffice-writer: office productivity suite -- word processor

 LibreOffice is a full-featured office productivity suite that provides
 a near drop-in replacement for Microsoft(R) Office.
 .
 This package contains the wordprocessor component for LibreOffice.

libreoffice-writer-dbgsym: debug symbols for libreoffice-writer
libreofficekit-data: common data for LOKDocView

 LOKDocView is the GTK3 widget that wraps the libreoffice functionality and
 exposes a simple API for applications to use this widget.
 .
 This package contains architecture-independent data (e.g. the selection
 handlers).

libreofficekit-dev: LibreOfficeKit -- headers

 LibreOfficeKit can be used for accessing LibreOffice functionality through
 C/C++, without any need to use UNO.
 .
 For now it only offers document conversion (in addition to an experimental
 tiled rendering API).
 .
 This package contains the headers needed for using LibreOfficeKit.

python3-uno: Python-UNO bridge

 The Python-UNO bridge allows use of the standard LibreOffice API
 with the Python scripting language. It additionally allows
 others to develop UNO components in Python, thus Python UNO components
 may be run within the LibreOffice process and can be called from C++
 or the built in StarBasic scripting language.

python3-uno-dbgsym: debug symbols for python3-uno
uno-libs3: LibreOffice UNO runtime environment -- public shared libraries

 The Uno Runtime Environment (URE) is the well-known UNO component model
 of LibreOffice, packaged up as an individual product.
 .
 It offers you a flexible, low-overhead component model that is most ideal
 for (but not limited to) combining in one application components written in
 different computer languages, and developed by different parties. You can use
 it to create any kind of application, in whatever application domain you can
 imagine.
 .
 This package contains the public libraries:
  - libuno_sal: System Abstraction Layer (C Interface)
  - libuno_salhelpergcc3: additional C++ functionality for sal
  - libuno_cppu: C++ UNO bridge (C Interface)
  - libuno_cppuhelpergcc3: additional C++ functionality for cppu
  - libuno_purpenvhelpergcc3: "purpose environments" helper

uno-libs3-dbgsym: debug symbols for uno-libs3
ure: LibreOffice UNO runtime environment

 The Uno Runtime Environment (URE) is the well-known UNO component model
 of LibreOffice, packaged up as an individual product.
 .
 It offers you a flexible, low-overhead component model that is most ideal
 for (but not limited to) combining in one application components written in
 different computer languages, and developed by different parties. You can use
 it to create any kind of application, in whatever application domain you can
 imagine.

ure-dbgsym: debug symbols for ure