Red Hat Security AdvisoryRHSA-2018:3054
libreoffice security and bug fix update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) autocorr-af-1:5.3.6.1-19.el7, autocorr-bg-1:5.3.6.1-19.el7, autocorr-ca-1:5.3.6.1-19.el7 +47
- Red Hat Enterprise Linux Client Optional (v. 7) libreoffice-1:5.3.6.1-19.el7, libreoffice-bsh-1:5.3.6.1-19.el7, libreoffice-gdb-debug-support-1:5.3.6.1-19.el7 +47
- Red Hat Enterprise Linux Server Optional (v. 7) autocorr-af-1:5.3.6.1-19.el7, autocorr-bg-1:5.3.6.1-19.el7, autocorr-ca-1:5.3.6.1-19.el7 +47
- Red Hat Enterprise Linux Workstation (v. 7) autocorr-af-1:5.3.6.1-19.el7, autocorr-bg-1:5.3.6.1-19.el7, autocorr-ca-1:5.3.6.1-19.el7 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) libreoffice-1:5.3.6.1-19.el7, libreoffice-bsh-1:5.3.6.1-19.el7, libreoffice-gdb-debug-support-1:5.3.6.1-19.el7 +47
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) autocorr-af-1:5.3.6.1-19.el7, autocorr-bg-1:5.3.6.1-19.el7, autocorr-ca-1:5.3.6.1-19.el7 +47
Fixes 3 records
Priority HIGH 72
An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=fi…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.78006 · Published 2018-05-01 · Partial fix CWE-200
Priority LOW 38
The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of ser…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02062 · Published 2018-04-15 · Partial fix CWE-129
Priority LOW 38
sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-fre…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01909 · Published 2018-04-15 · Partial fix CWE-416
THREATIST.IORead the docs