Bug 871462

Summary:	[fix available] Libreoffice version in RHEL6 triggers various anti-virus software
Product:	Red Hat Enterprise Linux 6	Reporter:	Mark J. Cox <mjc>
Component:	libreoffice	Assignee:	Caolan McNamara <caolanm>
Status:	CLOSED ERRATA	QA Contact:	Desktop QE <desktop-qa-list>
Severity:	high	Docs Contact:
Priority:	high
Version:	6.3	CC:	bressers, cschalle, dgregor, fweimer, jlieskov, tpelka
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	libreoffice-3.4.5.2-18.el6	Doc Type:	Known Issue
Doc Text:	Libreoffice contains a number of harmless files used for testing purposes. However, on Microsoft Windows system, these files can trigger false positive alerts on various anti-virus software, such as Microsoft Security Essentials. For example, the alerts can be triggered when scanning the Red Hat Enterprise Linux 6 ISO file.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-11-21 10:04:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	960054

Description Mark J. Cox 2012-10-30 13:29:08 UTC

Libreoffice contains a number of harmless files used for testing purposes but these files trigger various AV software such as "Microsoft Security Essentials" with serious warnings.  This means that anyone scanning our source ISO with these tools will receive false positive virus alerts.

Upstream received lots of comments about this and decided to alter the files so they were not longer triggers; see
http://cgit.freedesktop.org/libreoffice/core/patch/sw/qa/core/data/ww8/pass/?id=e898bcc1c2f2d227d8b638dfbee01e393562e142

We should do the same for the next ASYNC libreoffice or RHEL6.4 whichever is earliest.

Comment 1 Mark J. Cox 2012-10-30 13:29:41 UTC

See also
http://lists.freedesktop.org/archives/libreoffice/2011-September/018749.html
https://bugs.freedesktop.org/show_bug.cgi?id=42655

Comment 9 Tomas Hoger 2012-10-30 14:35:37 UTC

(In reply to comment #0)

> Upstream received lots of comments about this and decided to alter the files
> so they were not longer triggers; see
> http://cgit.freedesktop.org/libreoffice/core/patch/sw/qa/core/data/ww8/pass/
> ?id=e898bcc1c2f2d227d8b638dfbee01e393562e142

A better link to a complete commit including decoding code:

http://cgit.freedesktop.org/libreoffice/core/commit/?id=e898bcc1c2f2d227d8b638dfbee01e393562e142

Comment 11 Caolan McNamara 2012-10-30 16:18:10 UTC

doable, seeing as did it upstream already

Comment 21 Caolan McNamara 2012-11-22 10:17:16 UTC

FWIW what we'd have to do (assuming that we're not going to rebase in 6.4 to a later version, which I think is a given for the moment) is to backport my decrypt-on-the-fly-during-tests code and then unpack the sources, crypt the offending docs, and repack the sources in order to not have the raw files in the .src.rpms

Comment 32 errata-xmlrpc 2013-11-21 10:04:00 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-1594.html