< back to search

shield Security update for libreoffice
SUSE-SLE-SDK-12-SP3-2018-913

This update for libreoffice to 6.0.4.2 fixes lots of bugs and also the following issues: Security issues fixed: - CVE-2018-10120: The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx did not validate a customizations index, which allowed remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record. (bsc#1089706) - CVE-2018-10119: sot/source/sdstor/stgstrms.cxx used an incorrect integer data type in the StgSmallStrm class, which allowed remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format. (bsc#1089705) Other issues fixed: - DOCX import: missing table background color - Bring back offline help per popular demand as lto saves space we could use with it bsc#915996

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64
  • Packages
    libreoffice
    A Free Office Suite (Framework)
    6.0.4.2-43.33.1
    lock src
    libreoffice-sdk
    LibreOffice SDK
    6.0.4.2-43.33.1
    lock rpm
SUSE Linux Enterprise Software Development Kit 12.3 x86_64
  • Packages
    libreoffice
    A Free Office Suite (Framework)
    6.0.4.2-43.33.1
    lock src
    libreoffice-sdk
    LibreOffice SDK
    6.0.4.2-43.33.1
    lock rpm