| Description: | Updated openoffice.org packages that correct security issues are nowavailable for Red Hat Enterprise Linux 3, 4, and 5.This update has been rated as having important security impact by the RedHat Security Response Team.OpenOffice.org is an office productivity suite that includes desktopapplications, such as a word processor, spreadsheet, presentation manager,formula editor, and a drawing program.An integer underflow flaw and a boundary error flaw, both possibly leadingto a heap-based buffer overflow, were found in the way OpenOffice.orgparses certain records in Microsoft Word documents. An attacker couldcreate a specially-crafted Microsoft Word document, which once opened by anunsuspecting user, could cause OpenOffice.org to crash or, potentially,execute arbitrary code with the permissions of the user runningOpenOffice.org. (CVE-2009-0200, CVE-2009-0201)All users of OpenOffice.org are advised to upgrade to these updatedpackages, which contain backported patches to correct these issues. Allrunning instances of OpenOffice.org applications must be restarted forthis update to take effect. |