Skip to content
OpenAdvisories
Medium ELSA-2020-1598 6 CVEs

Moderate: libreoffice security and bug fix update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Ecosystem: Oracle Linux

Summary

[6.0.6.1-20.0.1.el8]
- Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile
- Build with --with-vendor='Oracle America, Inc.'

[1:6.0.6.1-20]
- Resolves: rhbz#1743958 CVE-2019-9849, etc.
- Resolves: rhbz#1648281 Junk character gets added when some emojis are inserted

Fixed packages 172

ReleasePackageFixed in
Oracle Linux · 8 autocorr-af 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-bg 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-ca 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-cs 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-da 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-de 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-en 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-es 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-fa 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-fi 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-fr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-ga 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-hr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-hu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-is 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-it 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-ja 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-ko 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-lb 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-lt 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-mn 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-nl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-pl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-pt 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-ro 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-ru 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-sk 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-sl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-sr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-sv 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-tr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-vi 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 autocorr-zh 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-base 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-calc 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-core 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-data 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-draw 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-emailmerge 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-filters 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-gdb-debug-support 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-graphicfilter 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-gtk2 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-gtk3 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-ar 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-bg 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-bn 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-ca 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-cs 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-da 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-de 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-dz 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-el 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-en 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-es 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-et 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-eu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-fi 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-fr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-gl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-gu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-he 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-hi 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-hr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-hu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-id 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-it 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-ja 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-ko 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-lt 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-lv 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-nb 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-nl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-nn 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-pl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-pt-BR 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-pt-PT 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-ro 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-ru 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-si 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-sk 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-sl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-sv 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-ta 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-tr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-uk 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-zh-Hans 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-help-zh-Hant 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-impress 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-af 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ar 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-as 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-bg 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-bn 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-br 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ca 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-cs 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-cy 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-da 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-de 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-dz 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-el 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-en 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-es 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-et 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-eu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-fa 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-fi 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-fr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ga 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-gl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-gu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-he 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-hi 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-hr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-hu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-id 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-it 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ja 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-kk 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-kn 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ko 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-lt 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-lv 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-mai 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ml 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-mr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-nb 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-nl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-nn 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-nr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-nso 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-or 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-pa 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-pl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-pt-BR 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-pt-PT 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ro 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ru 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-si 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-sk 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-sl 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-sr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ss 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-st 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-sv 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ta 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-te 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-th 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-tn 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-tr 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ts 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-uk 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-ve 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-xh 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-zh-Hans 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-zh-Hant 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-langpack-zu 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-math 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-ogltrans 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-opensymbol-fonts 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-pdfimport 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-pyuno 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-sdk 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-sdk-doc 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-ure 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-ure-common 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-wiki-publisher 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-writer 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-x11 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreoffice-xsltfilter 1:6.0.6.1-20.0.1.el8
Oracle Linux · 8 libreofficekit 1:6.0.6.1-20.0.1.el8

Vulnerabilities 6

  • Unscored —
    CVE-2019-9849 Public exploit

    LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote…

    Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9850

    Insufficient url validation allowing LibreLogo script execution

    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-ins…

    Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9851 Public exploit EPSS 78%

    LibreLogo global-event script execution

    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to block calling LibreL…

    Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9852

    Insufficient URL encoding flaw in allowed script location check

    LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python …

    Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9853

    Insufficient URL decoding flaw in categorizing macro location

    LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are blocked by default. A URL decoding flaw existed in how the urls to the macros within the document were p…

    Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu
  • Unscored —
    CVE-2019-9854

    Unsafe URL assembly flaw in allowed script location check

    LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python …

    Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine