2018-08-23
ALT-BU-2018-3412-1
Branch c7.1 update bulletin.
Package LibreOffice4 updated to version 4.2-alt2.M70C.7 for branch c7.1 in task 211456.
Closed vulnerabilities
Published: 2018-02-09
BDU:2019-00714
Уязвимость компонента COM.MICROSOFT.WEBSERVICE пакета офисных программ LibreOffice, позволяющая нарушителю получить доступ к защищаемой информации
Severity: MEDIUM (5.5)
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2018-02-09
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2018-6871
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
Severity: CRITICAL (9.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- RHSA-2018:0418
- RHSA-2018:0418
- RHSA-2018:0517
- RHSA-2018:0517
- https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-5-4-5&id=a916fc0c0e0e8b10cb4158fa0fa173fe205d434a
- https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-5-4-5&id=a916fc0c0e0e8b10cb4158fa0fa173fe205d434a
- https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure
- https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure
- USN-3579-1
- USN-3579-1
- DSA-4111
- DSA-4111
- 44022
- 44022
- https://www.libreoffice.org/about-us/security/advisories/cve-2018-1055/
- https://www.libreoffice.org/about-us/security/advisories/cve-2018-1055/