Skip to content
OpenAdvisories
High ELSA-2024-3835 2 CVEs

Important: libreoffice security update (Oracle Linux 9)

Published Jun 12, 2024 · Updated Jun 12, 2024

Summary

[7.1.8.1-12.0.1]
- Replace colors with Oracle colors [Orabug: 32120093]
- Added the --with-hamcrest option to configure.

[7.1.8.1]
- Remove Red Hat branding
- Change vendor to RESF

[1:7.1.8.1-12]
- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols

[1:7.1.8.1-11]
- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write

[1:7.1.8.1-10]
- Fix erroneous libreoffice-ure dependencies

[1:7.1.8.1-9]
- Resolves: rhbz#2182392 CVE-2022-38745

[1:7.1.8.1-8]
- Resolves: rhbz#2134759 Untrusted Macros
- Resolves: rhbz#2134757 Weak Master Keys
- Resolves: rhbz#2134755 Static Initialization Vector
- Resolves: rhbz#2134761 Macro URL arbitrary script execution

Fixed packages 179

ReleasePackageFixed in
Oracle Linux · 9 autocorr-af 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-bg 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-ca 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-cs 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-da 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-de 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-dsb 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-el 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-en 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-es 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-fa 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-fi 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-fr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-ga 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-hr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-hsb 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-hu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-is 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-it 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-ja 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-ko 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-lb 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-lt 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-mn 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-nl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-pl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-pt 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-ro 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-ru 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-sk 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-sl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-sr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-sv 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-tr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-vi 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-vro 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 autocorr-zh 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-base 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-calc 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-core 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-data 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-draw 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-emailmerge 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-filters 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-gdb-debug-support 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-graphicfilter 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-gtk3 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-ar 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-bg 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-bn 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-ca 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-cs 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-da 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-de 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-dz 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-el 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-en 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-eo 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-es 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-et 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-eu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-fi 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-fr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-gl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-gu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-he 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-hi 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-hr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-hu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-id 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-it 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-ja 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-ko 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-lt 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-lv 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-nb 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-nl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-nn 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-pl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-pt-BR 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-pt-PT 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-ro 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-ru 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-si 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-sk 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-sl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-sv 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-ta 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-tr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-uk 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-zh-Hans 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-help-zh-Hant 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-impress 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-af 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ar 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-as 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-bg 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-bn 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-br 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ca 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-cs 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-cy 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-da 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-de 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-dz 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-el 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-en 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-eo 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-es 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-et 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-eu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-fa 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-fi 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-fr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-fy 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ga 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-gl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-gu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-he 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-hi 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-hr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-hu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-id 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-it 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ja 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-kk 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-kn 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ko 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-lt 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-lv 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-mai 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ml 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-mr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-nb 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-nl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-nn 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-nr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-nso 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-or 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-pa 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-pl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-pt-BR 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-pt-PT 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ro 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ru 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-si 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-sk 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-sl 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-sr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ss 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-st 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-sv 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ta 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-te 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-th 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-tn 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-tr 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ts 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-uk 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-ve 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-xh 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-zh-Hans 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-zh-Hant 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-langpack-zu 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-math 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-ogltrans 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-opensymbol-fonts 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-pdfimport 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-pyuno 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-sdk 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-sdk-doc 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-ure 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-ure-common 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-wiki-publisher 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-writer 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-x11 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreoffice-xsltfilter 1:7.1.8.1-12.0.1.el9_4
Oracle Linux · 9 libreofficekit 1:7.1.8.1-12.0.1.el9_4

Vulnerabilities 2

  • High 8.3

    Improper input validation enabling arbitrary Gstreamer pipeline injection

    Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed …

  • High 8.3

    Link targets allow arbitrary script execution

    Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be exec…