Most recent entries from all

ALSA-2023:6508 — Moderate: libreoffice security update

Affected: AlmaLinux:9: autocorr-af, AlmaLinux:9: autocorr-bg, AlmaLinux:9: autocorr-ca, AlmaLinux:9: autocorr-cs, AlmaLinux:9: autocorr-da, AlmaLinux:9: autocorr-de, AlmaLinux:9: autocorr-dsb, AlmaLinux:9: autocorr-el, AlmaLinux:9: autocorr-en, AlmaLinux:9: autocorr-es and 169 more

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Empty entry in Java class path (CVE-2022-38745) * libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950) * libreoffice: Arbitrary file write (CVE-2023-1183) * libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-01592

certfr-2023-avi-0261 — Une vulnérabilité a été découverte dans LibreOffice. Elle permet à un attaquant de provoque…

certfr-2023-avi-0261

cnvd-2023-25930

EUVD-2026-215414

fkie_cve-2022-38745

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

GHSA-w32v-x9j2-mv46

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

gsd-2022-38745

RHSA-2023:6508 — Red Hat Security Advisory: libreoffice security update

libreoffice: Empty entry in Java class path libreoffice: Array index underflow in Calc formula parsing libreoffice: Arbitrary file write libreoffice: Remote documents loaded without prompt via IFrame

UBUNTU-CVE-2022-38745

Affected: Ubuntu:18.04:LTS: libreoffice, Ubuntu:20.04:LTS: libreoffice

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

WID-SEC-W-2023-0760 — Apache OpenOffice und LibreOffice: Mehrere Schwachstellen ermöglichen Codeausführung

Ein lokaler oder entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache OpenOffice und LibreOffice ausnutzen, um beliebigen Programmcode auszuführen.