Red Hat Security AdvisoryRHSA-2019:2130
libreoffice security and bug fix update
Released 2019-08-08 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) autocorr-af-1:5.3.6.1-21.el7, autocorr-bg-1:5.3.6.1-21.el7, autocorr-ca-1:5.3.6.1-21.el7 +47
- Red Hat Enterprise Linux Client Optional (v. 7) libreoffice-1:5.3.6.1-21.el7, libreoffice-bsh-1:5.3.6.1-21.el7, libreoffice-gdb-debug-support-1:5.3.6.1-21.el7 +47
- Red Hat Enterprise Linux Server Optional (v. 7) autocorr-af-1:5.3.6.1-21.el7, autocorr-bg-1:5.3.6.1-21.el7, autocorr-ca-1:5.3.6.1-21.el7 +47
- Red Hat Enterprise Linux Workstation (v. 7) autocorr-af-1:5.3.6.1-21.el7, autocorr-bg-1:5.3.6.1-21.el7, autocorr-ca-1:5.3.6.1-21.el7 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) libreoffice-1:5.3.6.1-21.el7, libreoffice-bsh-1:5.3.6.1-21.el7, libreoffice-gdb-debug-support-1:5.3.6.1-21.el7 +47
Fixes 1 record
Priority HIGH 79
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.67321 · Published 2019-03-25 · Partial fix CWE-356
