Red Hat Security AdvisoryRHSA-2017:0914
libreoffice security and bug fix update
Released 2017-04-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) autocorr-af-1:5.0.6.2-5.el7_3.1, autocorr-bg-1:5.0.6.2-5.el7_3.1, autocorr-ca-1:5.0.6.2-5.el7_3.1 +47
- Red Hat Enterprise Linux Client Optional (v. 7) libreoffice-1:5.0.6.2-5.el7_3.1, libreoffice-bsh-1:5.0.6.2-5.el7_3.1, libreoffice-filters-1:5.0.6.2-5.el7_3.1 +10
- Red Hat Enterprise Linux Server Optional (v. 7) autocorr-af-1:5.0.6.2-5.el7_3.1, autocorr-bg-1:5.0.6.2-5.el7_3.1, autocorr-ca-1:5.0.6.2-5.el7_3.1 +47
- Red Hat Enterprise Linux Workstation (v. 7) autocorr-af-1:5.0.6.2-5.el7_3.1, autocorr-bg-1:5.0.6.2-5.el7_3.1, autocorr-ca-1:5.0.6.2-5.el7_3.1 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) libreoffice-1:5.0.6.2-5.el7_3.1, libreoffice-bsh-1:5.0.6.2-5.el7_3.1, libreoffice-filters-1:5.0.6.2-5.el7_3.1 +10
Fixes 1 record
Priority LOW 30
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.03122 · Published 2017-11-20 · Fixed CWE-200
