Issued:
2007-12-05
Updated:
2007-12-05

RHSA-2007:1048 - Moderate: openoffice.org, hsqldb security update

Synopsis

Moderate: openoffice.org, hsqldb security update

Type/Severity

Security Advisory Moderate

Topic

Updated openoffice.org and hsqldb packages that fix security flaws are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Description

OpenOffice.org is an office productivity suite. HSQLDB is a Java relational database engine used by OpenOffice.org Base.

It was discovered that HSQLDB could allow the execution of arbitrary public static Java methods. A carefully crafted odb file opened in OpenOffice.org Base could execute arbitrary commands with the permissions of the user running OpenOffice.org. (CVE-2007-4575)

It was discovered that HSQLDB did not have a password set on the 'sa' user. If HSQLDB has been configured as a service, a remote attacker who could connect to the HSQLDB port (tcp 9001) could execute arbitrary SQL commands. (CVE-2003-0845)

Note that in Red Hat Enterprise Linux 5, HSQLDB is not enabled as a service by default, and needs manual configuration in order to work as a service.

Users of OpenOffice.org or HSQLDB should update to these errata packages which contain backported patches to correct these issues.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for x86_64 - Extended Update Support5.1x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support5.1i386
Red Hat Enterprise Linux Workstation5x86_64
Red Hat Enterprise Linux Workstation5i386
Red Hat Enterprise Linux Server5x86_64
Red Hat Enterprise Linux Server5i386
Red Hat Enterprise Linux Server from RHUI5x86_64
Red Hat Enterprise Linux Server from RHUI5i386
Red Hat Enterprise Linux Desktop5x86_64
Red Hat Enterprise Linux Desktop5i386

Updated Packages

  • hsqldb-demo-1.8.0.4-3jpp.6.i386.rpm
  • hsqldb-1.8.0.4-3jpp.6.i386.rpm
  • openoffice.org-core-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-xh_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-or_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-te_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ko_KR-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-sr_CS-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-bn-2.0.4-5.4.25.i386.rpm
  • hsqldb-manual-1.8.0.4-3jpp.6.i386.rpm
  • openoffice.org-langpack-ga_IE-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-cy_GB-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-pl_PL-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-bg_BG-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-gl_ES-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-as_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-sk_SK-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-fr-2.0.4-5.4.25.i386.rpm
  • openoffice.org-pyuno-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-hi_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-math-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-lt_LT-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ml_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-tr_TR-2.0.4-5.4.25.i386.rpm
  • hsqldb-javadoc-1.8.0.4-3jpp.6.i386.rpm
  • openoffice.org-langpack-zh_CN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-st_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-zh_TW-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-emailmerge-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-af_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-de-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-xsltfilter-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-da_DK-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-pt_PT-2.0.4-5.4.25.i386.rpm
  • openoffice.org-impress-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-te_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-nso_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-cs_CZ-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-2.0.4-5.4.25.src.rpm
  • openoffice.org-langpack-pt_PT-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-testtools-2.0.4-5.4.25.x86_64.rpm
  • hsqldb-1.8.0.4-3jpp.6.x86_64.rpm
  • openoffice.org-langpack-tn_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-xsltfilter-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-base-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-nso_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-as_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-nl-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ur-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-sr_CS-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-he_IL-2.0.4-5.4.25.i386.rpm
  • openoffice.org-graphicfilter-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ga_IE-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ja_JP-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ur-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-fi_FI-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ru-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ko_KR-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-nb_NO-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-et_EE-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-zu_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-hu_HU-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-et_EE-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-sv-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-zh_TW-2.0.4-5.4.25.i386.rpm
  • openoffice.org-impress-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-hi_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-sl_SI-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-javafilter-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-lt_LT-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ca_ES-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-th_TH-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-he_IL-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-es-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-it-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-math-2.0.4-5.4.25.i386.rpm
  • openoffice.org-pyuno-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-af_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-st_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-or_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-nl-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-nn_NO-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ml_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-gu_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ms_MY-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-testtools-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-sk_SK-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-cy_GB-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ca_ES-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-th_TH-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-writer-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-draw-2.0.4-5.4.25.i386.rpm
  • hsqldb-demo-1.8.0.4-3jpp.6.x86_64.rpm
  • openoffice.org-langpack-mr_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-draw-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-kn_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ms_MY-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ss_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-nn_NO-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-es-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ta_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ss_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-el_GR-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-nr_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-nb_NO-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-pa_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-kn_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ru-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-bn-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-hr_HR-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-da_DK-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-zh_CN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ar-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-sl_SI-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ts_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-calc-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-it-2.0.4-5.4.25.i386.rpm
  • hsqldb-1.8.0.4-3jpp.6.src.rpm
  • openoffice.org-writer-2.0.4-5.4.25.i386.rpm
  • openoffice.org-emailmerge-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ta_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ja_JP-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-nr_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-sv-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-tn_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-base-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ve_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-fi_FI-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-hr_HR-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-pa_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-eu_ES-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-mr_IN-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-pl_PL-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-pt_BR-2.0.4-5.4.25.i386.rpm
  • hsqldb-javadoc-1.8.0.4-3jpp.6.x86_64.rpm
  • openoffice.org-langpack-eu_ES-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-bg_BG-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-javafilter-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-gl_ES-2.0.4-5.4.25.i386.rpm
  • openoffice.org-graphicfilter-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-de-2.0.4-5.4.25.i386.rpm
  • openoffice.org-core-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-hu_HU-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-el_GR-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-zu_ZA-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-pt_BR-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-cs_CZ-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ar-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-fr-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-ve_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-gu_IN-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-ts_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-langpack-tr_TR-2.0.4-5.4.25.x86_64.rpm
  • openoffice.org-langpack-xh_ZA-2.0.4-5.4.25.i386.rpm
  • openoffice.org-calc-2.0.4-5.4.25.i386.rpm
  • hsqldb-manual-1.8.0.4-3jpp.6.x86_64.rpm

Fixes

CVEs

References

Additional information