Red Hat Security AdvisoryRHSA-2017:0979
libreoffice security update
Released 2017-04-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) autocorr-af-1:4.3.7.2-2.el6_9.1, autocorr-bg-1:4.3.7.2-2.el6_9.1, autocorr-ca-1:4.3.7.2-2.el6_9.1 +47
- Red Hat Enterprise Linux Desktop Optional (v. 6) autocorr-is-1:4.3.7.2-2.el6_9.1, libreoffice-1:4.3.7.2-2.el6_9.1, libreoffice-bsh-1:4.3.7.2-2.el6_9.1 +9
- Red Hat Enterprise Linux Server Optional (v. 6) autocorr-af-1:4.3.7.2-2.el6_9.1, autocorr-bg-1:4.3.7.2-2.el6_9.1, autocorr-ca-1:4.3.7.2-2.el6_9.1 +47
- Red Hat Enterprise Linux Workstation (v. 6) autocorr-af-1:4.3.7.2-2.el6_9.1, autocorr-bg-1:4.3.7.2-2.el6_9.1, autocorr-ca-1:4.3.7.2-2.el6_9.1 +47
- Red Hat Enterprise Linux Workstation Optional (v. 6) autocorr-is-1:4.3.7.2-2.el6_9.1, libreoffice-1:4.3.7.2-2.el6_9.1, libreoffice-bsh-1:4.3.7.2-2.el6_9.1 +9
Fixes 1 record
Priority LOW 30
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.03122 · Published 2017-11-20 · Fixed CWE-200
