Stay Secure with the Latest Linux Advisories

security advisorymoderatescript execution

SciLinux: SLSA-2020-1151-1 Moderate: LibreOffice Script Execution Flaw

libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands * libreoffice: Insufficient URL validation allowing LibreLogo script execution * libreoffice: LibreLogo global-event script execution * libreoffice: Insufficient URL encoding flaw in allowed script location check * libreoffice: Insufficient URL decoding flaw in categorizing [More...]. Synopsis: Moderate: libreoffice security and bug fix update Advisory ID: SLSA-2020:1151-1 Issue Date: 2020-04-07 CVE Numbers: CVE-2019-9848 CVE-2019-9850 CVE-2019-9851 CVE-2019-9852 CVE-2019-9853 CVE-2019-9854 CVE-2019-9849 -- * libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands * libreoffice: Insufficient URL validation allowing LibreLogo script execution * libreoffice: LibreLogo global-event script execution * libreoffice: Insufficient URL encoding flaw in allowed script location check * libreoffice: Insufficient URL decoding flaw in categorizing macro location * libreoffice: Unsafe URL assembly flaw in allowed script location check * libreoffice: Remote resources protection module not applied to bullet graphics -- SL7 x86_64 libreoffice-base-5.3.6.1-24.el7.x86_64.rpm libreoffice-calc-5.3.6.1-24.el7.x86_64.rpm libreoffice-core-5.3.6.1-24.el7.x86_64.rpm libreoffice-debuginfo-5.3.6.1-24.el7.x86_64.rpm libreoffice-draw-5.3.6.1-24.el7.x86_64.rpm libreoffice-emailmerge-5.3.6.1-24.el7.x86_64.rpm libreoffice-filters-5.3.6.1-24.el7.x86_64.rpm libreoffice-graphicfilter-5.3.6.1-24.el7.x86_64.rpm libreoffice-gtk2-5.3.6.1-24.el7.x86_64.rpm libreoffice-gtk3-5.3.6.1-24.el7.x86_64.rpm libreoffice-impress-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-af-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ar-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-as-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-bg-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-bn-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-br-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ca-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-cs-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-cy-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-da-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-de-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-dz-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-el-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-en-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-es-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-et-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-eu-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-fa-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-fi-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-fr-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ga-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-gl-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-gu-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-he-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-hi-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-hr-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-hu-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-id-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-it-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ja-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-kk-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-kn-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ko-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-lt-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-lv-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-mai-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ml-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-mr-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-nb-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-nl-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-nn-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-nr-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-nso-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-or-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-pa-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-pl-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-pt-BR-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-pt-PT-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ro-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ru-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-si-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-sk-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-sl-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-sr-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ss-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-st-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-sv-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ta-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-te-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-th-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-tn-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-tr-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ts-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-uk-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-ve-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-xh-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-zh-Hans-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-zh-Hant-5.3.6.1-24.el7.x86_64.rpm libreoffice-langpack-zu-5.3.6.1-24.el7.x86_64.rpm libreoffice-math-5.3.6.1-24.el7.x86_64.rpm libreoffice-ogltrans-5.3.6.1-24.el7.x86_64.rpm libreoffice-pdfimport-5.3.6.1-24.el7.x86_64.rpm libreoffice-pyuno-5.3.6.1-24.el7.x86_64.rpm libreoffice-ure-5.3.6.1-24.el7.x86_64.rpm libreoffice-wiki-publisher-5.3.6.1-24.el7.x86_64.rpm libreoffice-writer-5.3.6.1-24.el7.x86_64.rpm libreoffice-x11-5.3.6.1-24.el7.x86_64.rpm libreoffice-xsltfilter-5.3.6.1-24.el7.x86_64.rpm libreofficekit-5.3.6.1-24.el7.x86_64.rpm libreoffice-5.3.6.1-24.el7.x86_64.rpm libreoffice-bsh-5.3.6.1-24.el7.x86_64.rpm libreoffice-gdb-debug-support-5.3.6.1-24.el7.x86_64.rpm libreoffice-glade-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-ar-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-bg-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-bn-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-ca-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-cs-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-da-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-de-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-dz-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-el-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-es-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-et-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-eu-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-fi-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-fr-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-gl-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-gu-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-he-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-hi-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-hr-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-hu-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-id-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-it-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-ja-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-ko-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-lt-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-lv-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-nb-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-nl-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-nn-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-pl-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-pt-BR-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-pt-PT-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-ro-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-ru-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-si-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-sk-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-sl-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-sv-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-ta-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-tr-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-uk-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-zh-Hans-5.3.6.1-24.el7.x86_64.rpm libreoffice-help-zh-Hant-5.3.6.1-24.el7.x86_64.rpm libreoffice-librelogo-5.3.6.1-24.el7.x86_64.rpm libreoffice-nlpsolver-5.3.6.1-24.el7.x86_64.rpm libreoffice-officebean-5.3.6.1-24.el7.x86_64.rpm libreoffice-postgresql-5.3.6.1-24.el7.x86_64.rpm libreoffice-rhino-5.3.6.1-24.el7.x86_64.rpm libreoffice-sdk-5.3.6.1-24.el7.x86_64.rpm libreoffice-sdk-doc-5.3.6.1-24.el7.x86_64.rpm libreofficekit-devel-5.3.6.1-24.el7.x86_64.rpm noarch autocorr-af-5.3.6.1-24.el7.noarch.rpm autocorr-bg-5.3.6.1-24.el7.noarch.rpm autocorr-ca-5.3.6.1-24.el7.noarch.rpm autocorr-cs-5.3.6.1-24.el7.noarch.rpm autocorr-da-5.3.6.1-24.el7.noarch.rpm autocorr-de-5.3.6.1-24.el7.noarch.rpm autocorr-en-5.3.6.1-24.el7.noarch.rpm autocorr-es-5.3.6.1-24.el7.noarch.rpm autocorr-fa-5.3.6.1-24.el7.noarch.rpm autocorr-fi-5.3.6.1-24.el7.noarch.rpm autocorr-fr-5.3.6.1-24.el7.noarch.rpm autocorr-ga-5.3.6.1-24.el7.noarch.rpm autocorr-hr-5.3.6.1-24.el7.noarch.rpm autocorr-hu-5.3.6.1-24.el7.noarch.rpm autocorr-is-5.3.6.1-24.el7.noarch.rpm autocorr-it-5.3.6.1-24.el7.noarch.rpm autocorr-ja-5.3.6.1-24.el7.noarch.rpm autocorr-ko-5.3.6.1-24.el7.noarch.rpm autocorr-lb-5.3.6.1-24.el7.noarch.rpm autocorr-lt-5.3.6.1-24.el7.noarch.rpm autocorr-mn-5.3.6.1-24.el7.noarch.rpm autocorr-nl-5.3.6.1-24.el7.noarch.rpm autocorr-pl-5.3.6.1-24.el7.noarch.rpm autocorr-pt-5.3.6.1-24.el7.noarch.rpm autocorr-ro-5.3.6.1-24.el7.noarch.rpm autocorr-ru-5.3.6.1-24.el7.noarch.rpm autocorr-sk-5.3.6.1-24.el7.noarch.rpm autocorr-sl-5.3.6.1-24.el7.noarch.rpm autocorr-sr-5.3.6.1-24.el7.noarch.rpm autocorr-sv-5.3.6.1-24.el7.noarch.rpm autocorr-tr-5.3.6.1-24.el7.noarch.rpm autocorr-vi-5.3.6.1-24.el7.noarch.rpm autocorr-zh-5.3.6.1-24.el7.noarch.rpm libreoffice-data-5.3.6.1-24.el7.noarch.rpm libreoffice-opensymbol-fonts-5.3.6.1-24.el7.noarch.rpm libreoffice-ure-common-5.3.6.1-24.el7.noarch.rpm libreoffice-officebean-common-5.3.6.1-24.el7.noarch.rpm - Scientific Linux Development Team . Moderate advisory on libreoffice security updates addressing multiple execution flaws affecting components.. libreoffice security, script execution flaw, python command exploit, SL7 security update. . LinuxSecurity.com Team

Apr 20, 2020 Scientific Linux