Lucene search

K
rockyRockylinux Product ErrataRLSA-2024:1514
HistoryMar 27, 2024 - 4:34 a.m.

libreoffice security fix update

2024-03-2704:34:32
Rockylinux Product Errata
errata.rockylinux.org
7
libreoffice
security fix
update
rocky linux 8
cve-2023-6185
cve-2023-6186
input validation
macro execution

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.8%

An update is available for libreoffice.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

  • libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution (CVE-2023-6185)

  • libreoffice: Insufficient macro permission validation leading to macro execution (CVE-2023-6186)