Improper input validation enabling arbitrary Gstreamer pipeline injection. (CVE-2023-6185) Link targets allow arbitrary script execution. (CVE-2023-6186) References: . MGASA-2024-0116 - Updated libreoffice packages fix security vulnerabilities Publication date: 10 Apr 2024 URL: https://advisories.mageia.org/MGASA-2024-0116.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-6185, CVE-2023-6186 Improper input validation enabling arbitrary Gstreamer pipeline injection. (CVE-2023-6185) Link targets allow arbitrary script execution. (CVE-2023-6186) References: - https://bugs.mageia.org/show_bug.cgi?id=32990 - https://lwn.net/Articles/966025/ - - - https://www.cve.org/CVERecord?id=CVE-2023-6185 - https://www.cve.org/CVERecord?id=CVE-2023-6186 SRPMS: - 9/core/libreoffice-7.6.6.3-1.mga9 - 9/core/libcmis-0.6.2-1.mga9 - 9/core/frozen-1.1.1-1.mga9 - 9/core/mdds-2.1.1-1.mga9 - 9/core/libixion-0.19.0-1.mga9 - 9/core/liborcus-0.19.2-1.mga9 . Recent LibreOffice updates for Mageia address significant security vulnerabilities, specifically concerning input validation concerns and potential execution threats.. LibreOffice Security, Mageia Update, Gstreamer Injection. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.