SUSE-SU-2016:1728-1 Security update for LibreOffice

LibreOffice was updated to version 5.1.3.2, bringing many new features and bug fixes. Two security issues have been fixed: - CVE-2016-0795: LibreOffice allowed remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LwpTocSuperLayout...

openSUSE Security Update : libreoffice (openSUSE-2016-642)

This libreoffice update to version 5.0.6.3 fixes the following issues : Security issues fixed : - CVE-2016-0794: multiple lwp issues boo967014 - CVE-2016-0795: multiple lwp issues boo967015 Bugs fixed : - Version update to 5.0.6.3 : - 5.0.6 release, various bugfixes on the 5.0 series, this is las...

Fedora 22 : libreoffice-4.4.7.2-3.fc22 (2016-962c0d156d)

CVE-2016-0794 and CVE-2016-0795 LotusWordPro filter security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

LibreOffice < 5.0.5 Multiple RCE (Mac OS X)

The version of LibreOffice installed on the remote Mac OS X host is prior to 5.0.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper validation of user-supplied input when handling LotusWordPro LWP documents. A remote attacker...

LibreOffice < 5.0.5 Multiple RCE

The version of LibreOffice installed on the remote Windows host is prior to 5.0.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper validation of user-supplied input when handling LotusWordPro LWP documents. A remote attacker...

Debian DSA-3482-1 : libreoffice - security update

An anonymous contributor working with VeriSign iDefense Labs discovered that libreoffice, a full-featured office productivity suite, did not correctly handle Lotus WordPro files. This would enable an attacker to crash the program, or execute arbitrary code, by supplying a specially crafted LWP...

DEBIAN-CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

CVE-2016-0794

CVE-2016-0794 affects LibreOffice with the LotusWordPro (lwp) filter. The vulnerability exists in LibreOffice before 5.0.4, enabling memory corruption/DoS via a crafted LWP document. Connected advisories indicate upstream fixes in LibreOffice 5.0.6.2 (and related updates across RHEL/CentOS/SUSE/M...

CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

[SECURITY] [DSA 3482-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3482-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 17, 2016 https://www.debian.org/security/faq -...

KLA10762 Denial of service vulnerabilities in LibreOffice

Buffer overflow vulnerabilities were found in LibreOffice. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed document. Technical details These vulnerabilities related to parsing the...

CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

UBUNTU-CVE-2016-0794

The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted LotusWordPro lwp document...

SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2015:2065-1)

The dracut package was updated to fix the following security and non-security issues : - CVE-2015-0794: Use mktemp instead of hard-coded filenames, possible vulnerability bsc935338. - Always install mdraid modules bsc935993. - Add notice when dracut failed to install modules bsc952491. - Always...

SUSE-SU-2015:2065-1 Security update for dracut

The dracut package was updated to fix the following security and non-security issues: - CVE-2015-0794: Use mktemp instead of hardcoded filenames, possible vulnerability bsc935338. - Always install mdraid modules bsc935993. - Add notice when dracut failed to install modules bsc952491. - Always...

CVE-2015-0794

modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracutblockuuid.map...

CVE-2015-0794

CVE-2015-0794 affects the dracut package (openSUSE 13.2) prior to 037-17.30.1 via a symlink attack on /tmp/dracut_block_uuid.map in modules.d/90crypt/module-setup.sh. Root cause: use of fixed filenames instead of safe tmp handling; patched in SUSE-SU-2015:2065-1 with mktemp usage. Impact is descr...

openSUSE Security Update : dracut (openSUSE-2015-765)

The dracut package was updated to fix the following security and non security issues : - CVE-2015-0794: Use mktemp instead of hardcoded filenames, possible vulnerability bnc935338. - Always install mdraid modules boo935993. - Add notice when dracut failed to install modules bsc952491. %NASLMINLEV...

Oracle: Security Advisory (ELSA-2015-0794)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for krb5-devel CESA-2015:0794 centos6

Check the version of krb5-devel SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882160";...