ALSA-2023:6508

Dashboard / Vulnerabilities / ALSA-2023:6508

ALSA-2023:6508

Summary: Moderate: libreoffice security update

Details: LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: Empty entry in Java class path (CVE-2022-38745) * libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950) * libreoffice: Arbitrary file write (CVE-2023-1183) * libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References: https://access.redhat.com/errata/RHSA-2023:6508, https://access.redhat.com/security/cve/CVE-2022-38745, https://access.redhat.com/security/cve/CVE-2023-0950, https://access.redhat.com/security/cve/CVE-2023-1183, https://access.redhat.com/security/cve/CVE-2023-2255, https://bugzilla.redhat.com/2182044, https://bugzilla.redhat.com/2208506, https://bugzilla.redhat.com/2210185, https://bugzilla.redhat.com/2210186, https://errata.almalinux.org/9/ALSA-2023-6508.html