Bug 871462 - [fix available] Libreoffice version in RHEL6 triggers various anti-virus software
Summary: [fix available] Libreoffice version in RHEL6 triggers various anti-virus soft...
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: libreoffice
Version: 6.3
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: rc
: ---
Assignee: Caolan McNamara
QA Contact: Desktop QE
URL:
Whiteboard:
Keywords:
Depends On:
Blocks: 960054
TreeView+ depends on / blocked
 
Reported: 2012-10-30 13:29 UTC by Mark J. Cox
Modified: 2013-11-21 10:04 UTC (History)
6 users (show)

(edit)
Libreoffice contains a number of harmless files used for testing purposes. However, on Microsoft Windows system, these files can trigger false positive alerts on various anti-virus software, such as Microsoft Security Essentials. For example, the alerts can be triggered when scanning the Red Hat Enterprise Linux 6 ISO file.
Clone Of:
(edit)
Last Closed: 2013-11-21 10:04:00 UTC


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2013:1594 normal SHIPPED_LIVE libreoffice bug fix and enhancement update 2013-11-20 22:04:20 UTC

Description Mark J. Cox 2012-10-30 13:29:08 UTC
Libreoffice contains a number of harmless files used for testing purposes but these files trigger various AV software such as "Microsoft Security Essentials" with serious warnings.  This means that anyone scanning our source ISO with these tools will receive false positive virus alerts.

Upstream received lots of comments about this and decided to alter the files so they were not longer triggers; see
http://cgit.freedesktop.org/libreoffice/core/patch/sw/qa/core/data/ww8/pass/?id=e898bcc1c2f2d227d8b638dfbee01e393562e142

We should do the same for the next ASYNC libreoffice or RHEL6.4 whichever is earliest.

Comment 9 Tomas Hoger 2012-10-30 14:35:37 UTC
(In reply to comment #0)

> Upstream received lots of comments about this and decided to alter the files
> so they were not longer triggers; see
> http://cgit.freedesktop.org/libreoffice/core/patch/sw/qa/core/data/ww8/pass/
> ?id=e898bcc1c2f2d227d8b638dfbee01e393562e142

A better link to a complete commit including decoding code:

http://cgit.freedesktop.org/libreoffice/core/commit/?id=e898bcc1c2f2d227d8b638dfbee01e393562e142

Comment 11 Caolan McNamara 2012-10-30 16:18:10 UTC
doable, seeing as did it upstream already

Comment 21 Caolan McNamara 2012-11-22 10:17:16 UTC
FWIW what we'd have to do (assuming that we're not going to rebase in 6.4 to a later version, which I think is a given for the moment) is to backport my decrypt-on-the-fly-during-tests code and then unpack the sources, crypt the offending docs, and repack the sources in order to not have the raw files in the .src.rpms

Comment 32 errata-xmlrpc 2013-11-21 10:04:00 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-1594.html


Note You need to log in before you can comment on or make changes to this bug.