Red Hat Security AdvisoryRHSA-2023:6508
libreoffice security update
Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) libreoffice-sdk-1:7.1.8.1-11.el9, libreoffice-sdk-doc-1:7.1.8.1-11.el9
- Red Hat Enterprise Linux AppStream (v. 9) autocorr-af-1:7.1.8.1-11.el9, autocorr-bg-1:7.1.8.1-11.el9, autocorr-ca-1:7.1.8.1-11.el9 +47
Fixes 4 records
Priority MEDIUM 61
A flaw was found in the Libreoffice package.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.64878 · Published 2023-07-10 · Partial fix · 7.4.6, 7.5.1 CWE-20
Priority LOW 38
Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00872 · Published 2023-03-24 · Partial fix · 4.1.14 CWE-1188
Priority LOW 36
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.003 · Published 2023-05-25 · Partial fix · 7.4.6, 7.5.1 CWE-129
Priority LOW 28
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02225 · Published 2023-05-25 · Partial fix · 7.4.7, 7.5.3 CWE-264