Red Hat Security Advisory

RHSA-2024:1480

libreoffice security update

Released 2024-03-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) autocorr-af-1:6.4.7.2-16.el8_4, autocorr-bg-1:6.4.7.2-16.el8_4, autocorr-ca-1:6.4.7.2-16.el8_4 +47
Red Hat Enterprise Linux AppStream E4S (v.8.4) autocorr-af-1:6.4.7.2-16.el8_4, autocorr-bg-1:6.4.7.2-16.el8_4, autocorr-ca-1:6.4.7.2-16.el8_4 +47
Red Hat Enterprise Linux AppStream TUS (v.8.4) autocorr-af-1:6.4.7.2-16.el8_4, autocorr-bg-1:6.4.7.2-16.el8_4, autocorr-ca-1:6.4.7.2-16.el8_4 +47

Fixes 2 records

TI-2023-05680 CVE-2023-6185 · GHSA-58qf-gq3r-xwgx

Improper input validation enabling arbitrary Gstreamer pipeline injection

MEDIUM 42

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01017 Published 2023-12-11 Partial fix · 7.5.9, 7.6.3

TI-2023-05681 CVE-2023-6186 · GHSA-q565-g228-cgg3

Link targets allow arbitrary script execution

LOW 39

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00772 Published 2023-12-11 Partial fix · 7.5.9, 7.6.4 CWE-281