Skip to content
OpenAdvisories
Unscored DSA-4519-1 1 CVE

libreoffice - security update

Published Sep 8, 2019 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 10 libreoffice 1:6.1.5-3+deb10u4
Debian · 9 libreoffice 1:5.2.7-1+deb9u11

Vulnerabilities 1

  • Unscored —

    Unsafe URL assembly flaw in allowed script location check

    LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python …