Red Hat Security AdvisoryRHSA-2015:0377
libreoffice security, bug fix, and enhancement update
Released 2015-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) autocorr-af-1:4.2.6.3-5.el7, autocorr-bg-1:4.2.6.3-5.el7, autocorr-ca-1:4.2.6.3-5.el7 +47
- Red Hat Enterprise Linux Client Optional (v. 7) libabw-devel-0.0.2-1.el7, libabw-doc-0.0.2-1.el7, libabw-tools-0.0.2-1.el7 +31
- Red Hat Enterprise Linux Server Optional (v. 7) autocorr-af-1:4.2.6.3-5.el7, autocorr-bg-1:4.2.6.3-5.el7, autocorr-ca-1:4.2.6.3-5.el7 +47
- Red Hat Enterprise Linux Workstation (v. 7) autocorr-af-1:4.2.6.3-5.el7, autocorr-bg-1:4.2.6.3-5.el7, autocorr-ca-1:4.2.6.3-5.el7 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) libabw-devel-0.0.2-1.el7, libabw-doc-0.0.2-1.el7, libabw-tools-0.0.2-1.el7 +31
Fixes 3 records
Priority MEDIUM 49
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0389 · Published 2014-07-03 · Fixed
Priority MEDIUM 41
Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05051 · Published 2014-11-07 · Partial fix
Priority LOW 33
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.11338 · Published 2014-08-27 · Partial fix CWE-200
THREATIST.IORead the docs