Support Forum: Get Support for Patch My PC Products and Services

Patch My PC Home Updater (Free Updater) => Report Detection Issues Here => Topic started by: jwoods on February 05, 2019, 06:05:58 PM

Title: No LibreOffice updates since version 6.1.1
Post by: jwoods on February 05, 2019, 06:05:58 PM
Read an article today that a vulnerability had been patched in 6.1.3 but PatchMyPC does not detect any updates to 6.1.1.

https://www.bleepingcomputer.com/news/security/openoffice-vulnerable-to-remote-code-execution-libreoffice-patched/
Title: Re: No LibreOffice updates since version 6.1.1
Post by: Admin - Omar on February 06, 2019, 05:42:30 AM
Hey there,
We are using the latest "Still Branch" version of LibreOffice (6.0.7) which is already patched for these vulnerabilities months ago, and it's mentioned actually in the URL you sent :)

Here is the difference between Fresh Branch & Still Branch:
https://www.libreoffice.org/download/release-notes/
Title: Re: No LibreOffice updates since version 6.1.1
Post by: jwoods on February 07, 2019, 12:40:37 AM
Correct.

However, I am using the 6.1 branch, and there were issues with that.

From the article...

In the 6.1 series, the problem was compounded by an additional feature which enables specifying in the document arguments to pass to the python method (Earlier series only allow a method to be called with no argument). The bundled python happens to include a method which executes via os.system one of its arguments, providing a simple route in 6.1 to execute arbitrary commands via such a crafted document.

I was expecting 6.1.3 to show up as a result.
Title: Re: No LibreOffice updates since version 6.1.1
Post by: Admin - Omar on February 07, 2019, 07:34:20 AM
Unfortunately we can't use both Fresh Branch & Still Branch in Patch My PC right now, and many users were upset that we were using the Fresh Branch because they wanted the more secure and stable one "Still Branch".
But fortunately there is a new update for both today! Still Branch now is v6.1.5
Title: Re: No LibreOffice updates since version 6.1.1
Post by: jwoods on February 07, 2019, 08:38:49 AM
PatchMyPC detected 6.15