Lucene search

K
suseSuseOPENSUSE-SU-2019:1929-1
HistoryAug 18, 2019 - 12:00 a.m.

Security update for LibreOffice (moderate)

2019-08-1800:00:00
lists.opensuse.org
115

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

An update that solves one vulnerability and has 11 fixes is
now available.

Description:

This update for libreoffice and libraries fixes the following issues:

LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455),
bringing lots of bug and stability fixes.

Additional bugfixes:

  • If there is no firebird engine we still need java to run hsqldb
    (bsc#1135189)
  • PPTX: Rectangle turns from green to blue and loses transparency when
    transparency is set (bsc#1135228)
  • Slide deck compression doesn’t, hmm, compress too much (bsc#1127760)
  • Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869)
  • Image from PPTX shown in a square, not a circle (bsc#1121874)

libixion was updated to 0.14.1:

  • Updated for new orcus

liborcus was updated to 0.14.1:

  • Boost 1.67 support
  • Various cell handling issues fixed

libwps was updated to 0.4.10:

  • QuattroPro: add parser of .qwp files
  • all: support complex encoding

mdds was updated to 1.4.3:

  • Api change to 1.4
  • More multivector operations and tweaks
  • Various multi vector fixes
  • flat_segment_tree: add segment iterator and functions
  • fix to handle out-of-range insertions on flat_segment_tree
  • Another api version -> rename to mdds-1_2

myspell-dictionaries was updated to 20190423:

  • Serbian dictionary updated
  • Update af_ZA hunspell
  • Update Spanish dictionary
  • Update Slovenian dictionary
  • Update Breton dictionary
  • Update Galician dictionary

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2019-1929=1

  • openSUSE Leap 15.0:

    zypper in -t patch openSUSE-2019-1929=1

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P