[SECURITY] [DLA 1356-1] libreoffice security update

2018-04-1921:07:49

lists.debian.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON

Package : libreoffice
Version : 1:3.5.4+dfsg2-0+deb7u11
CVE ID : CVE-2018-10119 CVE-2018-10120

Fuzzing by the OSS-Fuzz project found two memory safety issues
in LibreOffice, which could result in an application crash or
possibly other unspecified impact.

For Debian 7 "Wheezy", these problems have been fixed in version
1:3.5.4+dfsg2-0+deb7u11.

We recommend that you upgrade your libreoffice packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian8i386libreoffice-sdbc-hsqldb< 1:4.3.3-2+deb8u11libreoffice-sdbc-hsqldb_1:4.3.3-2+deb8u11_i386.deb
Debian8s390xuno-libs3< 4.3.3-2+deb8u11uno-libs3_4.3.3-2+deb8u11_s390x.deb
Debian8mipslibreoffice-gtk< 1:4.3.3-2+deb8u11libreoffice-gtk_1:4.3.3-2+deb8u11_mips.deb
Debian8ppc64ellibreoffice-sdbc-firebird< 1:4.3.3-2+deb8u11libreoffice-sdbc-firebird_1:4.3.3-2+deb8u11_ppc64el.deb
Debian9mipseluno-libs3< 5.2.7-1+deb9u4uno-libs3_5.2.7-1+deb9u4_mipsel.deb
Debian9mips64elure-dbgsym< 5.2.7-1+deb9u4ure-dbgsym_5.2.7-1+deb9u4_mips64el.deb
Debian8powerpcpython-uno< 1:4.3.3-2+deb8u11python-uno_1:4.3.3-2+deb8u11_powerpc.deb
Debian9ppc64elure< 5.2.7-1+deb9u4ure_5.2.7-1+deb9u4_ppc64el.deb
Debian7alllibreoffice-help-pt-br< 1:3.5.4+dfsg2-0+deb7u11libreoffice-help-pt-br_1:3.5.4+dfsg2-0+deb7u11_all.deb
Debian8powerpcbrowser-plugin-libreoffice< 1:4.3.3-2+deb8u11browser-plugin-libreoffice_1:4.3.3-2+deb8u11_powerpc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	i386	libreoffice-sdbc-hsqldb	< 1:4.3.3-2+deb8u11	libreoffice-sdbc-hsqldb_1:4.3.3-2+deb8u11_i386.deb
Debian	8	s390x	uno-libs3	< 4.3.3-2+deb8u11	uno-libs3_4.3.3-2+deb8u11_s390x.deb
Debian	8	mips	libreoffice-gtk	< 1:4.3.3-2+deb8u11	libreoffice-gtk_1:4.3.3-2+deb8u11_mips.deb
Debian	8	ppc64el	libreoffice-sdbc-firebird	< 1:4.3.3-2+deb8u11	libreoffice-sdbc-firebird_1:4.3.3-2+deb8u11_ppc64el.deb
Debian	9	mipsel	uno-libs3	< 5.2.7-1+deb9u4	uno-libs3_5.2.7-1+deb9u4_mipsel.deb
Debian	9	mips64el	ure-dbgsym	< 5.2.7-1+deb9u4	ure-dbgsym_5.2.7-1+deb9u4_mips64el.deb
Debian	8	powerpc	python-uno	< 1:4.3.3-2+deb8u11	python-uno_1:4.3.3-2+deb8u11_powerpc.deb
Debian	9	ppc64el	ure	< 5.2.7-1+deb9u4	ure_5.2.7-1+deb9u4_ppc64el.deb
Debian	7	all	libreoffice-help-pt-br	< 1:3.5.4+dfsg2-0+deb7u11	libreoffice-help-pt-br_1:3.5.4+dfsg2-0+deb7u11_all.deb
Debian	8	powerpc	browser-plugin-libreoffice	< 1:4.3.3-2+deb8u11	browser-plugin-libreoffice_1:4.3.3-2+deb8u11_powerpc.deb