libreoffice-fresh

Link	package \| bugs open \| bugs closed \| Wiki \| GitHub \| web search
Description	LibreOffice branch which contains new features and program enhancements
Version	6.3.4-2 [extra]

Resolved

Group	Affected	Fixed	Severity	Status	Ticket
AVG-1009	6.2.4-2	6.2.5-1	High	Fixed
AVG-883	6.1.2-1	6.1.3-1	High	Fixed

Issue	Group	Severity	Remote	Type	Description
CVE-2019-9849	AVG-1009	Medium	Yes	Information disclosure	LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the...
CVE-2019-9848	AVG-1009	High	Yes	Arbitrary command execution	An issue has been found in LibreOffice before 6.2.5, where documents can specify that pre-installed scripts can be executed on various document events such...
CVE-2018-16858	AVG-883	High	No	Arbitrary code execution	It was found that libreoffice was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An...

Issue

Group

Severity

Remote

Type

Description

CVE-2019-9849

AVG-1009

Medium

Yes

Information disclosure

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the...

CVE-2019-9848

AVG-1009

High

Yes

Arbitrary command execution

An issue has been found in LibreOffice before 6.2.5, where documents can specify that pre-installed scripts can be executed on various document events such...

CVE-2018-16858

AVG-883

High

Arbitrary code execution

It was found that libreoffice was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An...