USN-6546-2: LibreOffice vulnerabilities
14 December 2023
Several security issues were fixed in LibreOffice.
Releases
Packages
- libreoffice - Office productivity suite
Details
USN-6546-1 fixed vulnerabilities in LibreOffice. This update provides the
corresponding updates for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
Original advisory details:
Reginaldo Silva discovered that LibreOffice incorrectly handled filenames
when passing embedded videos to GStreamer. If a user were tricked into
opening a specially crafted file, a remote attacker could possibly use this
issue to execute arbitrary GStreamer plugins. (CVE-2023-6185)
Reginaldo Silva discovered that LibreOffice incorrectly handled certain
non-typical hyperlinks. If a user were tricked into opening a specially
crafted file, a remote attacker could possibly use this issue to execute
arbitrary scripts. (CVE-2023-6186)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
Ubuntu 20.04
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6546-1: libreoffice-gtk4, libreoffice-kde4, libreoffice-help-en-gb, libreoffice-l10n-dz, libreoffice-l10n-gl, libreoffice-base-core, libreoffice-l10n-eo, libreoffice-uiconfig-math, libreoffice-draw, libreoffice-l10n-ta, libreoffice-l10n-fi, libreoffice-l10n-szl, libreoffice-l10n-ts, libreoffice-nlpsolver, libreoffice-l10n-hi, libunoil-java, libreoffice-l10n-el, libreoffice-help-om, libreoffice-help-fi, libreoffice-ogltrans, libreoffice-help-nl, libunoloader-java, libreoffice-l10n-id, libreoffice-style-galaxy, libridl-java, gir1.2-lokdocview-0.1, libreoffice-java-common, libreoffice-l10n-as, libreoffice-l10n-kmr, libreoffice-l10n-nso, libreoffice-style-colibre, libreoffice-sdbc-mysql, libreoffice-l10n-lt, libreoffice-style-karasa-jaga, ure-java, libreoffice-help-ja, libreoffice-l10n-pt-br, libreoffice-l10n-ka, libreoffice-wiki-publisher, python3-scriptforge, libreoffice-help-dz, libofficebean-java, libreoffice-librelogo, libreoffice-uiconfig-draw, libreoffice-l10n-be, libreoffice-style-elementary, libuno-sal3, libreoffice-help-et, libreoffice-dev, libreoffice-report-builder-bin-nogui, libreoffice-l10n-eu, libreoffice-officebean, python3-access2base, libreoffice-calc-nogui, python3-uno, libreoffice-script-provider-bsh, libreoffice-l10n-cs, libreoffice-l10n-nr, libreoffice-help-en-us, libreoffice-l10n-nb, libreoffice-uiconfig-writer, libreoffice-l10n-th, libreoffice-l10n-st, libreoffice-help-it, libreoffice-l10n-ru, libreoffice-l10n-nl, libreoffice-l10n-ug, libreoffice-uiconfig-calc, libreoffice-l10n-km, libreoffice-sdbc-firebird, libreoffice-l10n-br, libreoffice-l10n-sv, libreoffice-base-drivers, libreoffice-help-sl, libreoffice-kf5, libreoffice-help-eu, libreoffice-l10n-sk, libreoffice-draw-nogui, libreoffice-help-sk, libreoffice-help-zh-tw, libreoffice-l10n-ne, libreoffice-help-fr, libreoffice-l10n-mr, libreoffice-sdbc-postgresql, libreoffice-l10n-ar, libreoffice-uiconfig-impress, libreoffice-l10n-ve, libreoffice-l10n-vi, libreoffice-l10n-en-za, libreoffice-l10n-uk, libreoffice-help-el, libreoffice-l10n-pt, libjuh-java, libreoffice-core-nogui, libreoffice-l10n-oc, libreoffice-l10n-uz, libreoffice-smoketest-data, libreoffice-l10n-is, libreoffice-l10n-tn, libreoffice-l10n-ko, libreoffice-l10n-rw, libreoffice-help-ca, libreoffice-l10n-gug, libreoffice-script-provider-js, libreoffice-l10n-mn, libreoffice-uiconfig-report-builder, uno-libs-private, libreoffice-l10n-pa-in, libreoffice-l10n-zu, libreoffice-l10n-fa, libreoffice-impress-nogui, libreoffice-l10n-bn, libreoffice-uiconfig-base, libreoffice-evolution, libreoffice-help-vi, libreoffice-script-provider-python, libreoffice-l10n-zh-cn, libreoffice-l10n-fr, libreoffice-l10n-ast, libreoffice-l10n-si, libreoffice-style-sukapura, libreoffice-l10n-af, libreoffice, libreoffice-l10n-ga, libreoffice-l10n-it, libuno-cppu3, libreoffice-dev-doc, libreofficekit-dev, libreoffice-l10n-ca, libreoffice-help-sv, libreoffice-l10n-en-gb, libreoffice-l10n-mk, libreoffice-nogui, libreoffice-l10n-tr, libreoffice-help-cs, libreoffice-help-pt-br, libreoffice-help-da, libreoffice-style-tango, libreoffice-l10n-ss, libreoffice-systray, libreoffice-l10n-de, libreoffice-dev-gui, libreoffice-l10n-gu, libuno-salhelpergcc3-3, libreoffice-help-hi, libreoffice-mysql-connector, libreoffice-l10n-te, libreoffice-l10n-zh-tw, libreoffice-help-zh-cn, ure, libreoffice-common, libreoffice-help-de, libreoffice-core, libreoffice-l10n-et, libreoffice-l10n-ja, libreoffice-writer, libreoffice-help-gl, libuno-cppuhelpergcc3-3, libreoffice-l10n-ml, libreoffice-style-yaru, libreoffice-avmedia-backend-gstreamer, libreoffice-l10n-he, liblibreoffice-java, libreoffice-report-builder-bin, libreoffice-l10n-sr, libreoffice-subsequentcheckbase, libreoffice-l10n-hr, libreoffice-gtk3, libreoffice-base, libreoffice-l10n-sl, libreoffice-l10n-tg, libreoffice-qt5, libreoffice-l10n-hu, libreoffice-help-tr, libreoffice-qt6, libreoffice-l10n-bg, libreoffice-l10n-nn, libreoffice-style-sifr, libreoffice-help-ko, libreoffice-l10n-lv, libreoffice-l10n-in, libreoffice-l10n-za, libreoffice-kde5, libreoffice-gnome, libreoffice-style-hicontrast, libreoffice-calc, libreoffice-math-nogui, libreoffice-impress, libreoffice-help-pl, libreoffice-l10n-om, libreoffice-l10n-gd, libreoffice-plasma, libreoffice-style-oxygen, libreoffice-l10n-ro, libreoffice-l10n-pl, libreoffice-help-es, fonts-opensymbol, libreoffice-writer-nogui, libreoffice-l10n-cy, libreoffice-uiconfig-common, libreoffice-l10n-bs, libjurt-java, libreoffice-sdbc-hsqldb, libreoffice-l10n-am, libreoffice-style-breeze, libuno-purpenvhelpergcc3-3, libreoffice-help-common, libreoffice-help-id, libreoffice-dev-common, libreoffice-math, libreoffice-l10n-kn, libreoffice-l10n-or, libreoffice-base-nogui, libreoffice-l10n-es, libreoffice-help-ru, liblibreofficekitgtk, libreoffice-gtk2, libreoffice-help-km, libreoffice-l10n-kk, libreoffice-l10n-xh, libreoffice-report-builder, libreoffice-help-hu, libreoffice-l10n-da, libreoffice-help-pt, libreofficekit-data