Red Hat Security AdvisoryRHSA-2018:0517
libreoffice security update
Released 2018-03-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) autocorr-af-1:4.3.7.2-2.el6_9.2, autocorr-bg-1:4.3.7.2-2.el6_9.2, autocorr-ca-1:4.3.7.2-2.el6_9.2 +47
- Red Hat Enterprise Linux Desktop Optional (v. 6) autocorr-is-1:4.3.7.2-2.el6_9.2, libreoffice-1:4.3.7.2-2.el6_9.2, libreoffice-bsh-1:4.3.7.2-2.el6_9.2 +9
- Red Hat Enterprise Linux Server Optional (v. 6) autocorr-af-1:4.3.7.2-2.el6_9.2, autocorr-bg-1:4.3.7.2-2.el6_9.2, autocorr-ca-1:4.3.7.2-2.el6_9.2 +47
- Red Hat Enterprise Linux Workstation (v. 6) autocorr-af-1:4.3.7.2-2.el6_9.2, autocorr-bg-1:4.3.7.2-2.el6_9.2, autocorr-ca-1:4.3.7.2-2.el6_9.2 +47
- Red Hat Enterprise Linux Workstation Optional (v. 6) autocorr-is-1:4.3.7.2-2.el6_9.2, libreoffice-1:4.3.7.2-2.el6_9.2, libreoffice-bsh-1:4.3.7.2-2.el6_9.2 +9
Fixes 1 record
Priority MEDIUM 62
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22803 · Published 2018-02-09 · Fixed
