Most recent entries from all

ALSA-2020:4628 — Low: libreoffice security, bug fix, and enhancement update

Affected: AlmaLinux:8: libcmis, AlmaLinux:8: libreoffice-sdk, AlmaLinux:8: libreoffice-sdk-doc

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)

Security Fix(es):

* libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802)

* libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2020-03672

certfr-2020-avi-347 — Une vulnérabilité a été découverte dans LibreOffice. Elle permet à un attaquant de provoquer une atteinte à la confiden…

certfr-2020-avi-347

cnvd-2020-35942

EUVD-2026-185153

fkie_cve-2020-12802

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.

GHSA-r3c7-2c6p-8qmc

gsd-2020-12802

openSUSE-SU-2020:1222-1 — Security update for libreoffice

Security update for libreoffice

RHSA-2020:4628 — Red Hat Security Advisory: libreoffice security, bug fix, and enhancement update

libreoffice: 'stealth mode' remote resource restrictions bypass libreoffice: forms allowed to be submitted to any URI could result in local file overwrite

SUSE-SU-2020:2217-1 — Security update for libreoffice

Security update for libreoffice

UBUNTU-CVE-2020-12802

Affected: Ubuntu:20.04:LTS: libreoffice

WID-SEC-W-2022-1808 — LibreOffice: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Dateien zu überschreiben.