Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

SUSE Linux 11 SP3: SUSE-SU-2014:1116-1 Critical: LibreOffice Issues

suse
Calendar Grey September 11, 2014
Scroller Suse
SUSE Security Update for Apache HTTP Server tackles major vulnerabilities and supplies essential fixes for maintaining system reliability.
An update that solves two vulnerabilities and has 52 fixes An update that solves two vulnerabilities and has 52 fixes An update that solves two vulnerabilities and has 52 fixes is ...

Summary

LibreOffice was updated to version 4.0.3.3.26. (SUSE 4.0-patch26, tag suse-4.0-26, based on upstream 4.0.3.3). Two security issues have been fixed: * DOCM memory corruption vulnerability. (CVE-2013-4156, bnc#831578) * Data exposure using crafted OLE objects. (CVE-2014-3575, bnc#893141) The following non-security issues have been fixed: * chart shown flipped (bnc#834722) * chart missing dataset (bnc#839727) * import new line in text (bnc#828390) * lines running off screens (bnc#819614) * add set-all language menu (bnc#863021) * text rotation (bnc#783433, bnc#862510) * page border shadow testcase (bnc#817956) * one more clickable field fix (bnc#802888) * multilevel labels are rotated (bnc#820273) * incorrect nested table margins (bnc#816593) * use BitmapURL only if its valid (bnc#821567)

Topics%20covered

Topics Covered

security advisory memory corruption threat mitigation important fix SUSE Linux data exposure LibreOffice update

References

#382137 #593612 #654230 #753460 #757432 #779620

#779642 #780044 #783433 #802888 #816593 #817956

#819614 #819822 #819865 #820077 #820273 #820503

#820504 #820509 #820788 #820800 #820819 #820836

#821567 #821795 #822908 #823626 #823651 #823655

#823675 #823935 #825305 #825891 #825976 #828390

#828598 #829017 #830205 #831457 #831578 #834035

#834705 #834720 #834722 #835985 #837302 #839727

#862510 #863021 #864396 #870234 #878854 #893141

Cross- CVE-2013-4156 CVE-2014-3575

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP3

SUSE Linux Enterprise Desktop 11 SP3

https://www.suse.com/security/cve/CVE-2013-4156.html

https://www.suse.com/security/cve/CVE-2014-3575.html

...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:1116-1
Rating: important

Topics%20covered

Topics Covered

security advisory memory corruption threat mitigation important fix SUSE Linux data exposure LibreOffice update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.