SUSE-SU-2018:2485-2

Dashboard / Vulnerabilities / SUSE-SU-2018:2485-2

SUSE-SU-2018:2485-2

Summary: Security update for libreoffice

Details: This update for libreoffice to 6.0.5.2 fixes the following issues: Security issues fixed: - CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606) Non security issues fixed: - Bugfix: Table borders appear black in LibreOffice (while white in PowerPoint) (bsc#1088262) - Bugfix: LibreOffice extension 'Language Tool' fails after Tumbleweed update (bsc#1050305) - Bugfix: libreoffice-gnome can no longer be installed in parallel to libreoffice-gtk3 as there is a potential file conflict (bsc#1096673) - Bugfix: LibreOffice Writer: Text in boxes were not visible (bsc#1094359) - Use libreoffice-gtk3 if xfce is present (bsc#1092699) - Various other bug fixes - Exporting to PPTX results in vertical labels being shown horizontally (bsc#1095639) - Table in PPTX misplaced and partly blue (bsc#1098891) - Labels in chart change (from white and other colors) to black when saving as PPTX (bsc#1088263) - Exporting to PPTX shifts arrow shapes quite a bit bsc#1095601

References: https://www.suse.com/support/update/announcement/2018/suse-su-20182485-2/, https://bugzilla.suse.com/1050305, https://bugzilla.suse.com/1088262, https://bugzilla.suse.com/1088263, https://bugzilla.suse.com/1091606, https://bugzilla.suse.com/1091772, https://bugzilla.suse.com/1092699, https://bugzilla.suse.com/1094359, https://bugzilla.suse.com/1095601, https://bugzilla.suse.com/1095639, https://bugzilla.suse.com/1096673, https://bugzilla.suse.com/1098891, https://www.suse.com/security/cve/CVE-2018-10583