Mandriva Linux Security Advisory 2010-075 – OpenOffice’s xmlsec uses a bundled Libtool which might load .la file in the current working directory allowing local users to gain privileges via a Trojan horse file. For enabling such vulnerability xmlsec has to use –enable-crypto_dl building flag however it does not, although the fix keeps protected against this threat whenever that flag had been enabled.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/88487/MDVSA-2010-075.txt
Source: https://packetstormsecurity.com/files/88487/Mandriva-Linux-Security-Advisory-2010-075.html