Lucene search

K
oraclelinuxOracleLinuxELSA-2017-0914
HistoryApr 12, 2017 - 12:00 a.m.

libreoffice security and bug fix update

2017-04-1200:00:00
linux.oracle.com
36

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.144 Low

EPSS

Percentile

95.2%

[1:5.0.6.2-5.0.1.1]

  • Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile
  • Build with --with-vendor=‘Oracle America, Inc.’
    [1:5.0.6.2-5.1]
  • Resolves: rhbz#1435534 CVE-2017-3157 Arbitrary file disclosure in Calc and
    Writer
    [1:5.0.6.2-5]
  • Resolves: rhbz#1426348 Encrypted files opening as plain text after
    cancelling password dialog
    [1:5.0.6.2-4]
  • Resolves: rhbz#1425535 crash in calc on exit after using csv dialog with a11y enabled
  • Resolves: rhbz#1425536 crash in calc on closing dialog with a11y enabled
    [1:5.0.6.2-3]
  • Resolves: rhbz#1364335 tooltips are truncated
    [1:5.0.6.2-2]
  • Resolves: rhbz#1353839 CVE-2016-4324 dereference of invalid STL iterator on
    processing RTF file
    [1:5.0.6.2-1]
  • Related: rhbz#1290148 rebase to 5.0.6
  • Related: rhbz#1290148 include more fixes from F-23
    [1:5.0.5.2-2]
  • Related: rhbz#1290148 remove unintentional dependency of libreoffice-core on
    libreoffice-calc
  • Related: rhbz#1290148 restore lost changelog entry
  • Related: rhbz#1290148 add additional 5.0.6 patches
    [1:5.0.5.2-1]
  • Resolves: rhbz#1290148 rebase to 5.0.x

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.144 Low

EPSS

Percentile

95.2%