Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3835
HistoryJun 12, 2024 - 12:00 a.m.

libreoffice security update

2024-06-1200:00:00
linux.oracle.com
2
libreoffice
security update
oracle colors
hamcrest
vendor change
cve fixes

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.6%

[7.1.8.1-12.0.1]

  • Replace colors with Oracle colors [Orabug: 32120093]
  • Added the --with-hamcrest option to configure.
    [7.1.8.1]
  • Remove Red Hat branding
  • Change vendor to RESF
    [1:7.1.8.1-12]
  • Fix CVE-2023-6185 escape url passed to gstreamer
  • Fix CVE-2023-6186 check link target protocols
    [1:7.1.8.1-11]
  • Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  • Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  • Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write
    [1:7.1.8.1-10]
  • Fix erroneous libreoffice-ure dependencies
    [1:7.1.8.1-9]
  • Resolves: rhbz#2182392 CVE-2022-38745
    [1:7.1.8.1-8]
  • Resolves: rhbz#2134759 Untrusted Macros
  • Resolves: rhbz#2134757 Weak Master Keys
  • Resolves: rhbz#2134755 Static Initialization Vector
  • Resolves: rhbz#2134761 Macro URL arbitrary script execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.6%