Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 533
Alerts This Week
Warning Icon 1 533

Ubuntu: 4102-1 Moderate: LibreOffice Remote Code Execution Risks

ubuntu
Calendar Grey August 19, 2019
Dist Ubuntu Esm H88
The Ubuntu Security Notice USN-4103-1 highlights several vulnerabilities in Firefox that could enable attackers to run arbitrary code.
Several security issues were fixed in LibreOffice.

Summary

Several security issues were fixed in LibreOffice.

Software Description:

- libreoffice: Office productivity suite

Details:

It was discovered that LibreOffice incorrectly handled LibreLogo scripts.

If a user were tricked into opening a specially crafted document, a remote

attacker could cause LibreOffice to execute arbitrary code. (CVE-2019-9850,

CVE-2019-9851)

It was discovered that LibreOffice incorrectly handled embedded scripts in

document files. If a user were tricked into opening a specially crafted

document, a remote attacker could possibly execute arbitrary code.

(CVE-2019-9852)

Topics%20covered

Topics Covered

security advisory remote code execution arbitrary code execution Ubuntu LibreOffice

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libreoffice-core                1:6.2.6-0ubuntu0.19.04.1

Ubuntu 18.04 LTS:
  libreoffice-core                1:6.0.7-0ubuntu0.18.04.9

Ubuntu 16.04 LTS:
  libreoffice-core                1:5.1.6~rc2-0ubuntu1~xenial9

After a standard system update you need to restart LibreOffice to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-4102-1

CVE-2019-9850, CVE-2019-9851, CVE-2019-9852

Severity
important
Lowest
Low
Medium
High
Critical

August 19, 2019

Topics%20covered

Topics Covered

security advisory remote code execution arbitrary code execution Ubuntu LibreOffice

Package Information

https://launchpad.net/ubuntu/+source/libreoffice/1:6.2.6-0ubuntu0.19.04.1
https://launchpad.net/ubuntu/+source/libreoffice/1:6.0.7-0ubuntu0.18.04.9
https://launchpad.net/ubuntu/+source/libreoffice/1:5.1.6~rc2-0ubuntu1~xenial9

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.