You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openoffice.apache.org by ks...@apache.org on 2016/07/31 18:37:40 UTC
svn commit: r14590 - in /dev/openoffice/4.1.2-patch1/binaries/Linux32: ./
Linux32.README libtl.so libtl.so.asc
Author: kschenk
Date: Sun Jul 31 18:37:40 2016
New Revision: 14590
Log:
Linux32 patch and instructions for CVE-2016-1513.
Library provided by: arielch. Thanks also goes to damjan for contributions.
Added:
dev/openoffice/4.1.2-patch1/binaries/Linux32/
dev/openoffice/4.1.2-patch1/binaries/Linux32/Linux32.README
dev/openoffice/4.1.2-patch1/binaries/Linux32/libtl.so (with props)
dev/openoffice/4.1.2-patch1/binaries/Linux32/libtl.so.asc
Added: dev/openoffice/4.1.2-patch1/binaries/Linux32/Linux32.README
==============================================================================
--- dev/openoffice/4.1.2-patch1/binaries/Linux32/Linux32.README (added)
+++ dev/openoffice/4.1.2-patch1/binaries/Linux32/Linux32.README Sun Jul 31 18:37:40 2016
@@ -0,0 +1,74 @@
+This directory contains the following three files:
+ * The Linux32.README file you are reading
+ * A repacement file, libtl.so, that you will need to install
+ * The public signature file,libtl.so.asc, of the developer providing the repalcement file.
+
+You can use whatever gpg tools you have to verify the signature against the information provided in the Apache OpenOffice KEYS file --
+https://dist.apache.org/repos/dist/release/openoffice/KEYS
+
+
+This file provides basic instructions for installing the replacment file, libtl.so, into your existing Apache OpenOffice installation. You will need to do this replacement using a console (terminal) window and will likely need to use "root" (administrator) access to your system.
+
+Step 1: Open a console window and login to a console window as root.
+ Command in console window: su -
+
+Step 2: a)If you already know where Apache OpenOffice is located on your system, navigate
+ to that directory. Example: "cd /opt/openoffice4".
+ b) If you do not know where Apapaceh OpenOffice is located on your system, you
+ can use the "locate" comand to find the location. Example: "locate openoffice".
+ The locate command may produce a lot of output but at some point you should see
+ the actual location on your system where Apache OpenOffice is installed.
+ Navigate to that location.
+
+Step 3: Navigate to the "program" subdirectory of your Apache OpenOffice installation
+ area.
+ You should now be located in the openoffice4 installation area of your system. For illustration, this will be called /opt/openoffice4. Navigate to the "program" subdirectory.
+ Command: cd "program"
+
+ You should now be in directory /opt/openoffice4/program
+
+Step 4: List the files in the Apache OpenOffice program subdirectory.
+ Command: "ls"
+
+ You should see a file called "libtl.so".
+
+Step 5: Rename the existing libtl.so.
+ You can leave this renamed libtl.so where it is if you like.
+ Command: "mv libtl.so libtl.so.orig"
+
+Step 6: Save the libtl.so provided in this area to your Apache OpenOffice program folder.
+
+ You should download the libtl.so provided here as a non-root user. Then using
+ your root console window already open, copy it from the downloaded location to
+ the Apache OpenOffice program folder.
+
+ Examples: User jane downloaded libtl.so from her browser window and saved it in
+ a folder called "Downloads". The full path to Jane's Download area is:
+ /home/jane/Downloads.
+
+ Still in the root console window in the Apache OpenOffice "program" folder, use the following command:
+
+ Command: cp /home/jane/Downloads/libtl.so .
+ the last part of this command is a dot (.)
+
+Step 7: Verify that the libtl.so got placed in the "program" directory.
+
+ Command: ls -al
+
+ This will allow you to verify permission settings on the new file. If it is NOT
+ set as "-r--r--r-- 1 root root", go to Step 8.
+
+Step 8: Fix ownership and permissions if needed.
+ To correct the ownership/ permission settings on the new libtl.so, do the
+ following still in the command window as root in /opt/openoffice4/program:
+
+ Command: chown root:root libtl.so
+ Command: chmod 755 libtl.so
+
+Step 9: Start Apache OpenOffice as your normally would as a non-priviledged user.
+
+
+
+
+
+
Added: dev/openoffice/4.1.2-patch1/binaries/Linux32/libtl.so
==============================================================================
Binary file - no diff available.
Propchange: dev/openoffice/4.1.2-patch1/binaries/Linux32/libtl.so
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/openoffice/4.1.2-patch1/binaries/Linux32/libtl.so.asc
==============================================================================
--- dev/openoffice/4.1.2-patch1/binaries/Linux32/libtl.so.asc (added)
+++ dev/openoffice/4.1.2-patch1/binaries/Linux32/libtl.so.asc Sun Jul 31 18:37:40 2016
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+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+=5rxq
+-----END PGP SIGNATURE-----