Red Hat Security AdvisoryRHSA-2020:1151
libreoffice security and bug fix update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) autocorr-af-1:5.3.6.1-24.el7, autocorr-bg-1:5.3.6.1-24.el7, autocorr-ca-1:5.3.6.1-24.el7 +47
- Red Hat Enterprise Linux Client Optional (v. 7) libreoffice-1:5.3.6.1-24.el7, libreoffice-bsh-1:5.3.6.1-24.el7, libreoffice-gdb-debug-support-1:5.3.6.1-24.el7 +47
- Red Hat Enterprise Linux Server Optional (v. 7) autocorr-af-1:5.3.6.1-24.el7, autocorr-bg-1:5.3.6.1-24.el7, autocorr-ca-1:5.3.6.1-24.el7 +47
- Red Hat Enterprise Linux Workstation (v. 7) autocorr-af-1:5.3.6.1-24.el7, autocorr-bg-1:5.3.6.1-24.el7, autocorr-ca-1:5.3.6.1-24.el7 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) libreoffice-1:5.3.6.1-24.el7, libreoffice-bsh-1:5.3.6.1-24.el7, libreoffice-gdb-debug-support-1:5.3.6.1-24.el7 +47
Fixes 7 records
Priority HIGH 82
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.77837 · Published 2019-08-15 · Partial fix · 6.2.6 CWE-20
Priority HIGH 65
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.2887 · Published 2019-07-17 · Partial fix · 6.2.5 CWE-94
Priority MEDIUM 47
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02928 · Published 2019-08-15 · Partial fix · 6.2.6 CWE-20
Priority MEDIUM 40
LibreOffice documents can contain macros.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03081 · Published 2019-09-27 · Partial fix · 6.2.7, 6.3.1 CWE-116
Priority LOW 38
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01756 · Published 2019-09-06 · Partial fix · 6.2.7, 6.3.1 CWE-22
Priority LOW 38
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01752 · Published 2019-08-15 · Partial fix · 6.2.6 CWE-116
Priority LOW 25
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.02602 · Published 2019-07-17 · Partial fix · 6.2.5
THREATIST.IORead the docs