Moderate Buffer Overflow Vulnerability in LibreOffice on SL6 Platforms

Date: Tue, 15 Dec 2015 21:36:20 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Connie Sieh 
Subject: Security ERRATA Moderate: libreoffice on SL6.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20151215213620.25662.51405@slpackages.fnal.gov>

Synopsis: Moderate: libreoffice security update
Advisory ID: SLSA-2015:2619-1
Issue Date: 2015-12-14
CVE Numbers: CVE-2015-4551
 CVE-2015-5212
 CVE-2015-5213
 CVE-2015-5214
--

It was discovered that LibreOffice did not properly restrict automatic
link updates. By tricking a victim into opening specially crafted
documents, an attacker could possibly use this flaw to disclose contents
of files accessible by the victim. (CVE-2015-4551)

An integer underflow flaw leading to a heap-based buffer overflow when
parsing PrinterSetup data was discovered. By tricking a user into opening
a specially crafted document, an attacker could possibly exploit this flaw
to execute arbitrary code with the privileges of the user opening the
file. (CVE-2015-5212)

An integer overflow flaw, leading to a heap-based buffer overflow, was
found in the way LibreOffice processed certain Microsoft Word.doc files.
By tricking a user into opening a specially crafted Microsoft Word.doc
document, an attacker could possibly use this flaw to execute arbitrary
code with the privileges of the user opening the file. (CVE-2015-5213)

It was discovered that LibreOffice did not properly sanity check bookmark
indexes. By tricking a user into opening a specially crafted document, an
attacker could possibly use this flaw to execute arbitrary code with the
privileges of the user opening the file. (CVE-2015-5214)
--

SL6
 x86_64
 libreoffice-base-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-calc-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-core-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-debuginfo-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-draw-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-emailmerge-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-graphicfilter-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-headless-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-impress-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-af-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ar-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-as-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-bg-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-bn-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ca-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-cs-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-cy-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-da-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-de-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-dz-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-el-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-en-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-es-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-et-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-eu-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-fi-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-fr-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ga-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-gl-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-gu-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-he-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-hi-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-hr-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-hu-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-it-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ja-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-kn-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ko-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-lt-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-mai-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ml-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-mr-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ms-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-nb-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-nl-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-nn-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-nr-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-nso-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-or-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-pa-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-pl-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-pt-BR-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-pt-PT-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ro-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ru-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-sk-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-sl-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-sr-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ss-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-st-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-sv-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ta-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-te-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-th-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-tn-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-tr-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ts-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-uk-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ur-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-ve-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-xh-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-zh-Hans-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-zh-Hant-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-langpack-zu-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-math-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-ogltrans-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-pdfimport-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-pyuno-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-ure-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-wiki-publisher-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-writer-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-xsltfilter-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-bsh-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-debuginfo-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-filters-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-gdb-debug-support-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-gdb-debug-support-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-glade-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-librelogo-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-nlpsolver-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-rhino-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-sdk-4.2.8.2-11.el6_7.1.x86_64.rpm
 libreoffice-sdk-doc-4.2.8.2-11.el6_7.1.x86_64.rpm
 i386
 libreoffice-base-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-calc-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-core-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-debuginfo-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-draw-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-emailmerge-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-graphicfilter-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-headless-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-impress-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-af-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ar-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-as-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-bg-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-bn-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ca-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-cs-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-cy-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-da-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-de-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-dz-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-el-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-en-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-es-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-et-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-eu-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-fi-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-fr-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ga-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-gl-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-gu-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-he-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-hi-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-hr-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-hu-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-it-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ja-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-kn-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ko-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-lt-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-mai-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ml-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-mr-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ms-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-nb-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-nl-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-nn-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-nr-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-nso-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-or-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-pa-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-pl-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-pt-BR-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-pt-PT-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ro-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ru-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-sk-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-sl-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-sr-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ss-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-st-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-sv-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ta-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-te-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-th-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-tn-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-tr-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ts-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-uk-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ur-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-ve-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-xh-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-zh-Hans-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-zh-Hant-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-langpack-zu-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-math-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-ogltrans-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-pdfimport-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-pyuno-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-ure-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-wiki-publisher-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-writer-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-xsltfilter-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-bsh-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-filters-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-gdb-debug-support-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-glade-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-librelogo-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-nlpsolver-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-rhino-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-sdk-4.2.8.2-11.el6_7.1.i686.rpm
 libreoffice-sdk-doc-4.2.8.2-11.el6_7.1.i686.rpm
 noarch
 autocorr-af-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-bg-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-ca-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-cs-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-da-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-de-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-en-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-es-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-fa-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-fi-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-fr-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-ga-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-hr-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-hu-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-it-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-ja-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-ko-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-lb-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-lt-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-mn-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-nl-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-pl-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-pt-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-ro-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-ru-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-sk-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-sl-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-sr-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-sv-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-tr-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-vi-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-zh-4.2.8.2-11.el6_7.1.noarch.rpm
 libreoffice-opensymbol-fonts-4.2.8.2-11.el6_7.1.noarch.rpm
 autocorr-is-4.2.8.2-11.el6_7.1.noarch.rpm

- Scientific Linux Development Team