Collabora Office 5.0 release is based on upstream LibreOffice 5.0 source code, thus it contains all fixes from the upstream libreoffice-5-0 branch, plus more fixes and backported stable features from higher releases.
5.0-46
Released on 2018-10-22
Most important fixes
- Keep PyUNO script processing below base URI
5.0-45
Released on 2018-05-25
Most important fixes
- CVE-2018-10583 Information disclosure via SMB link embedded in ODF document
An ODF document with a linked image, which is on a Samba share, will cause Collabora Office to automatically initiate a Samba connection to retrieve the image. This is analogous to how opening HTML documents which contain links to images on remote web sites are automatically fetched by web browsers.
Since Collabora Office 5.3-49, end users or administrators can disable this functionality to automatically fetch such linked images via “Tools->Options->Security->Options->Block any links from documents not among the trusted locations”
- Other security and stability fixes
5.0-44
Released on 2018-04-24
Most important fixes
- Fix of CVE-2018-10119 and CVE-2018-10120
5.0-43
Released on 2018-02-09
Most important fixes
- CVE-2018-1055 libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula
- Follow-on improvements reducing similar risks like CVE-2018-1055
5.0-42
Released on 2017-04-24
Most important fixes
- Disabled auto-accelerator behaviour for gtk, because it caused problems on Cent OS 5 desktop
- Backported many OSS Fuzzer fixes, including fixes for CVE-2016-10327 and CVE-2017-7870
- Added ICU changeset-39671 fix for CVE-2017-7867 and CVE-2017-7868
- Backported bugfixes: tdf#94457, tdf#101187, tdf#106557, tdf#106724
5.0-41
Released on 2017-03-22
Most important fixes
- Fix for CVE-2017-3157 Arbitrary file disclosure in Calc and Writer
- Updated 3rd party libraries: libpng 1.6.28, nss 3.27, libxslt 1.1.29, libxml 2.9.4, expat 2.2.0, curl 7.52.1, openssl 1.0.2k
- Backported bugfixes: tdf#76322, tdf#76349, tdf#90697, tdf#93640, tdf#95367, tdf#96750
5.0-40
Released on 2016-07-01
Most important fixes
- Fix for CVE-2016-4324 Dereference of invalid STL iterator on processing RTF file
- Multiple fixes of SVG export of presentations
- Backported bugfixes: tdf#92157, tdf#95775
5.0-34
Released on 2016-05-06
Most important fixes
- Updated internal OpenSSL library to version 1.0.2h (see the Security Advisory)
- Backported bugfixes:
tdf#65642, tdf#90097, tdf#93868, tdf#94760, tdf#96549, tdf#97863, tdf#97989, tdf#99074, tdf#99093, tdf#99135 - Various other fixes from upstream, up to LibreOffice 5.0.6 release
5.0-30
Released on 2016-04-11
Most important fixes
- Italian translation of Remote File Open/Save dialog
- Fixed entering special characters with Ctrl+Alt+dead key in Writer (e.g. Ctrl+Alt+` and e -> è)
- Various other fixes from upstream
5.0-26
Released on 2016-03-04
Distinctive features
(compared to upstream LibreOffice 5.0 by The Document Foundation)
- Remote file open/save dialogue
- Collabora branding
- We do not bundle Liberation fonts on Windows, because they reportedly cause BSOD on Windows 7 SP1 (tdf#62764)
- We bundle Convert Text To Number and Numbertext extensions.
- Online update is disabled
- Enabled creation of MSP patches on Windows
