Lotus Symphony 3.0 Fixpack 2

The second service release to the Lotus Symphony 3.0 Office Suite was released pretty quietly last month. FP2 contains a small collection of security patches for the underlying OpenOffice.org code as well as some compatibility fixes when interacting with other office suites.

Download Lotus Symphony 3.0 Fixpack 2 here (For Windows) (or here for Official download source)

This release is Officially compatible with:

• Windows XP SP3, Windows Vista SP2, Windows 7
  
• SuSE Linux Enterprise Desktop 11, RedHat Enterprise Linux 5 Update 4, Ubuntu 8.04
  
• Macintosh OS X 10.5, Macintosh OS X 10.6.2, Intel only

Fixes from the FP2 Release Notes:

• CVE-2010-4643: A security vulnerability in OpenOffice.org which is related to TGA file processing might lead to arbitrary code execution.
• CVE-2010-3689: The OpenOffice.org start script and other shell scripts expand the LD_LIBRARY_PATH in an insecure way.
• CVE-2010-2935 / CVE-2010-2936: A security vulnerability in OpenOffice.org which is related to PowerPoint document processing might lead to arbitrary code execution.
• CVE-2010-4253: A security vulnerability in OpenOffice.org which is related to PNG file processing might lead to arbitrary code execution.
• CVE-2010-3453 / CVE-2010-3454: A security vulnerability in OpenOffice.org which is related to Word document processing might lead to arbitrary code execution.
• CVE-2010-3451 / CVE-2010-3452: A security vulnerability in OpenOffice.org which is related to RTF document processing might lead to arbitrary code execution.
• CVE-2010-4008 / CVE-2010-4494: Possible Security Vulnerability in OpenOffice.org resulting from 3rd party library LIBXML2.
• CVE-2010-3450: A directory traversal vulnerability in OpenOffice.org which is related to zip/jar package extraction might lead to overwriting files and even to arbitrary code execution.
• SPR #JCHC89R945: Include mandatory Eclipse help patches, SPR #MSTO89WRX8: Enhanced selective access control support.
• PPT files with grouped objects will be corrupted if save them in Symphony and open them again in MS Office which contains a security patch claimed in Microsoft Security Bulletin MS10-087. For detailed patch information, please refer to http://www.microsoft.com/technet/security/bulletin/ms10-087.mspx.
• Optimize preload notification behavior by removing the notification bubble.
• Password protected MS Excel with edit password cannot be edited.
• The cell border orientation will be lost when opening a MS Excel file in Lotus Symphony.
• The result is wrong when copying a table which contains hidden columns from Lotus Symphony spreadsheet to Lotus Notes.
• The behavior of Subtotal in DataPilot is wrong when there are more than one items in Data area.
• 'divide by 1000' format is not supported in Lotus Symphony 3 Spreadsheet.