Red Hat Security AdvisoryRHSA-2023:6933
libreoffice security update
Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libreoffice-sdk-1:6.4.7.2-15.el8, libreoffice-sdk-doc-1:6.4.7.2-15.el8
- Red Hat Enterprise Linux AppStream (v. 8) autocorr-af-1:6.4.7.2-15.el8, autocorr-bg-1:6.4.7.2-15.el8, autocorr-ca-1:6.4.7.2-15.el8 +47
Fixes 4 records
Priority MEDIUM 61
A flaw was found in the Libreoffice package.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.64878 · Published 2023-07-10 · Partial fix · 7.4.6, 7.5.1 CWE-20
Priority LOW 38
Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00872 · Published 2023-03-24 · Partial fix · 4.1.14 CWE-1188
Priority LOW 36
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.003 · Published 2023-05-25 · Partial fix · 7.4.6, 7.5.1 CWE-129
Priority LOW 28
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02225 · Published 2023-05-25 · Partial fix · 7.4.7, 7.5.3 CWE-264