Red Hat Security Advisory

RHSA-2024:3835

libreoffice security update

Released 2024-06-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) autocorr-af-1:7.1.8.1-12.el9_4, autocorr-bg-1:7.1.8.1-12.el9_4, autocorr-ca-1:7.1.8.1-12.el9_4 +47
Red Hat Enterprise Linux CRB (v. 9) libreoffice-sdk-1:7.1.8.1-12.el9_4, libreoffice-sdk-doc-1:7.1.8.1-12.el9_4

Fixes 2 records

TI-2023-05680 CVE-2023-6185 · GHSA-58qf-gq3r-xwgx

Improper input validation enabling arbitrary Gstreamer pipeline injection

MEDIUM 42

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01017 Published 2023-12-11 Partial fix · 7.5.9, 7.6.3

TI-2023-05681 CVE-2023-6186 · GHSA-q565-g228-cgg3

Link targets allow arbitrary script execution

LOW 39

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00772 Published 2023-12-11 Partial fix · 7.5.9, 7.6.4 CWE-281