[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2020:1151 -- centos 7 libreoffice

ID: oval:org.secpod.oval:def:205532Date: (C)2020-04-10   (M)2023-12-20
Class: PATCHFamily: unix




LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix: * libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands * libreoffice: Insufficient URL validation allowing LibreLogo script execution * libreoffice: LibreLogo global-event script execution * libreoffice: Insufficient URL encoding flaw in allowed script location check * libreoffice: Insufficient URL decoding flaw in categorizing macro location * libreoffice: Unsafe URL assembly flaw in allowed script location check * libreoffice: Remote resources protection module not applied to bullet graphics For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

Platform:
CentOS 7
Product:
libreoffice
autocorr
libreoffice-langpack
Reference:
CESA-2020:1151
CVE-2019-9848
CVE-2019-9849
CVE-2019-9850
CVE-2019-9851
CVE-2019-9852
CVE-2019-9853
CVE-2019-9854
CVE    7
CVE-2019-9851
CVE-2019-9850
CVE-2019-9849
CVE-2019-9848
...
CPE    2
cpe:/a:libreoffice:libreoffice
cpe:/o:centos:centos:7

© SecPod Technologies