Synopsis:          Moderate: libreoffice security and bug fix update
Advisory ID:       SLSA-2020:1151-1
Issue Date:        2020-04-07
CVE Numbers:       CVE-2019-9848
                   CVE-2019-9850
                   CVE-2019-9851
                   CVE-2019-9852
                   CVE-2019-9853
                   CVE-2019-9854
                   CVE-2019-9849
--

* libreoffice: LibreLogo script can be manipulated into executing arbitrary
    python commands
    
* libreoffice: Insufficient URL validation allowing LibreLogo script
    execution
    
* libreoffice: LibreLogo global-event script execution
    
* libreoffice: Insufficient URL encoding flaw in allowed script location
    check
    
* libreoffice: Insufficient URL decoding flaw in categorizing macro
    location
    
* libreoffice: Unsafe URL assembly flaw in allowed script location check
    
* libreoffice: Remote resources protection module not applied to bullet
    graphics
--

SL7
  x86_64
    libreoffice-base-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-calc-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-core-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-debuginfo-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-draw-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-emailmerge-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-filters-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-graphicfilter-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-gtk2-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-gtk3-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-impress-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-af-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ar-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-as-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-bg-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-bn-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-br-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ca-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-cs-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-cy-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-da-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-de-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-dz-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-el-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-en-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-es-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-et-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-eu-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-fa-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-fi-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-fr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ga-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-gl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-gu-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-he-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-hi-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-hr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-hu-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-id-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-it-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ja-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-kk-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-kn-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ko-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-lt-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-lv-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-mai-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ml-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-mr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-nb-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-nl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-nn-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-nr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-nso-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-or-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-pa-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-pl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-pt-BR-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-pt-PT-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ro-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ru-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-si-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-sk-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-sl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-sr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ss-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-st-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-sv-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ta-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-te-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-th-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-tn-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-tr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ts-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-uk-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-ve-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-xh-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-zh-Hans-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-zh-Hant-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-langpack-zu-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-math-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-ogltrans-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-pdfimport-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-pyuno-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-ure-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-wiki-publisher-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-writer-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-x11-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-xsltfilter-5.3.6.1-24.el7.x86_64.rpm
    libreofficekit-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-bsh-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-gdb-debug-support-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-glade-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-ar-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-bg-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-bn-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-ca-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-cs-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-da-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-de-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-dz-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-el-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-es-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-et-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-eu-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-fi-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-fr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-gl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-gu-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-he-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-hi-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-hr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-hu-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-id-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-it-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-ja-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-ko-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-lt-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-lv-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-nb-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-nl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-nn-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-pl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-pt-BR-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-pt-PT-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-ro-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-ru-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-si-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-sk-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-sl-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-sv-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-ta-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-tr-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-uk-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-zh-Hans-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-help-zh-Hant-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-librelogo-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-nlpsolver-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-officebean-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-postgresql-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-rhino-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-sdk-5.3.6.1-24.el7.x86_64.rpm
    libreoffice-sdk-doc-5.3.6.1-24.el7.x86_64.rpm
    libreofficekit-devel-5.3.6.1-24.el7.x86_64.rpm
  noarch
    autocorr-af-5.3.6.1-24.el7.noarch.rpm
    autocorr-bg-5.3.6.1-24.el7.noarch.rpm
    autocorr-ca-5.3.6.1-24.el7.noarch.rpm
    autocorr-cs-5.3.6.1-24.el7.noarch.rpm
    autocorr-da-5.3.6.1-24.el7.noarch.rpm
    autocorr-de-5.3.6.1-24.el7.noarch.rpm
    autocorr-en-5.3.6.1-24.el7.noarch.rpm
    autocorr-es-5.3.6.1-24.el7.noarch.rpm
    autocorr-fa-5.3.6.1-24.el7.noarch.rpm
    autocorr-fi-5.3.6.1-24.el7.noarch.rpm
    autocorr-fr-5.3.6.1-24.el7.noarch.rpm
    autocorr-ga-5.3.6.1-24.el7.noarch.rpm
    autocorr-hr-5.3.6.1-24.el7.noarch.rpm
    autocorr-hu-5.3.6.1-24.el7.noarch.rpm
    autocorr-is-5.3.6.1-24.el7.noarch.rpm
    autocorr-it-5.3.6.1-24.el7.noarch.rpm
    autocorr-ja-5.3.6.1-24.el7.noarch.rpm
    autocorr-ko-5.3.6.1-24.el7.noarch.rpm
    autocorr-lb-5.3.6.1-24.el7.noarch.rpm
    autocorr-lt-5.3.6.1-24.el7.noarch.rpm
    autocorr-mn-5.3.6.1-24.el7.noarch.rpm
    autocorr-nl-5.3.6.1-24.el7.noarch.rpm
    autocorr-pl-5.3.6.1-24.el7.noarch.rpm
    autocorr-pt-5.3.6.1-24.el7.noarch.rpm
    autocorr-ro-5.3.6.1-24.el7.noarch.rpm
    autocorr-ru-5.3.6.1-24.el7.noarch.rpm
    autocorr-sk-5.3.6.1-24.el7.noarch.rpm
    autocorr-sl-5.3.6.1-24.el7.noarch.rpm
    autocorr-sr-5.3.6.1-24.el7.noarch.rpm
    autocorr-sv-5.3.6.1-24.el7.noarch.rpm
    autocorr-tr-5.3.6.1-24.el7.noarch.rpm
    autocorr-vi-5.3.6.1-24.el7.noarch.rpm
    autocorr-zh-5.3.6.1-24.el7.noarch.rpm
    libreoffice-data-5.3.6.1-24.el7.noarch.rpm
    libreoffice-opensymbol-fonts-5.3.6.1-24.el7.noarch.rpm
    libreoffice-ure-common-5.3.6.1-24.el7.noarch.rpm
    libreoffice-officebean-common-5.3.6.1-24.el7.noarch.rpm

- Scientific Linux Development Team

SciLinux: SLSA-2020-1151-1 Moderate: libreoffice on SL7.x x86_64

libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands * libreoffice: Insufficient URL validation allowing LibreLogo script execution * libreoffi...

Summary

Moderate: libreoffice security and bug fix update



Security Fixes

Severity
Advisory ID: SLSA-2020:1151-1
Issued Date: : 2020-04-07
CVE Numbers: CVE-2019-9848
CVE-2019-9850
CVE-2019-9851

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved