Red Hat Security AdvisoryRHSA-2018:0418
libreoffice security update
Released 2018-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) autocorr-af-1:5.0.6.2-15.el7_4, autocorr-bg-1:5.0.6.2-15.el7_4, autocorr-ca-1:5.0.6.2-15.el7_4 +47
- Red Hat Enterprise Linux Client Optional (v. 7) libreoffice-1:5.0.6.2-15.el7_4, libreoffice-bsh-1:5.0.6.2-15.el7_4, libreoffice-filters-1:5.0.6.2-15.el7_4 +12
- Red Hat Enterprise Linux Server Optional (v. 7) autocorr-af-1:5.0.6.2-15.el7_4, autocorr-bg-1:5.0.6.2-15.el7_4, autocorr-ca-1:5.0.6.2-15.el7_4 +47
- Red Hat Enterprise Linux Workstation (v. 7) autocorr-af-1:5.0.6.2-15.el7_4, autocorr-bg-1:5.0.6.2-15.el7_4, autocorr-ca-1:5.0.6.2-15.el7_4 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) libreoffice-1:5.0.6.2-15.el7_4, libreoffice-bsh-1:5.0.6.2-15.el7_4, libreoffice-filters-1:5.0.6.2-15.el7_4 +12
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) autocorr-af-1:5.0.6.2-15.el7_4, autocorr-bg-1:5.0.6.2-15.el7_4, autocorr-ca-1:5.0.6.2-15.el7_4 +47
Fixes 1 record
Priority MEDIUM 62
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22803 · Published 2018-02-09 · Fixed
