CVE-2018-16858

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.

Alex Infuehr discovered a directory traversal vulnerability which could result in the execution of Python script code when opening a malformed document (CVE-2018-16858).

The libreoffice package has been updated to version 6.1.5.2, fixing this issue, and including several other bug fixes and enhancements. Several supporting library packages have been updated as well.

Here's the list of improvements from 5.3 to 6.1: https://wiki.documentfoundation.org/ReleaseNotes/5.4 https://wiki.documentfoundation.org/ReleaseNotes/6.0 https://wiki.documentfoundation.org/ReleaseNotes/6.1

This update for libreoffice and libraries fixes the following issues:

LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes.

Additional bugfixes:

• If there is no firebird engine we still need java to run hsqldb (bsc#1135189)
• PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228)
• Slide deck compression doesn't, hmm, compress too much (bsc#1127760)
• Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869)
• Image from PPTX shown in a square, not a circle (bsc#1121874)

libixion was updated to 0.14.1:

• Updated for new orcus

liborcus was updated to 0.14.1:

• Boost 1.67 support
• Various cell handling issues fixed

libwps was updated to 0.4.10:

• QuattroPro: add parser of .qwp files
• all: support complex encoding

mdds was updated to 1.4.3:

• Api change to 1.4
• More multivector operations and tweaks
• Various multi vector fixes
• flat_segment_tree: add segment iterator and functions
• fix to handle out-of-range insertions on flat_segment_tree
• Another api version -> rename to mdds-1_2

myspell-dictionaries was updated to 20190423:

• Serbian dictionary updated
• Update af_ZA hunspell
• Update Spanish dictionary
• Update Slovenian dictionary
• Update Breton dictionary
• Update Galician dictionary

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libreoffice-7.1.5.2-3.13 package on the GA media of openSUSE Tumbleweed.

This update for libreoffice and libraries fixes the following issues:

LibreOffice was updated to 6.2.3.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes.

Additional bugfixes:

• If there is no firebird engine we still need java to run hsqldb (bsc#1135189)
• PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228)
• Slide deck compression doesn't, hmm, compress too much (bsc#1127760)
• Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869)
• Image from PPTX shown in a square, not a circle (bsc#1121874)

libixion was updated to 0.14.1:

• Updated for new orcus

liborcus was updated to 0.14.1:

• Boost 1.67 support
• Various cell handling issues fixed

libwps was updated to 0.4.10:

• QuattroPro: add parser of .qwp files
• all: support complex encoding

mdds was updated to 1.4.3:

• Api change to 1.4
• More multivector opreations and tweaks
• Various multi vector fixes
• flat_segment_tree: add segment iterator and functions
• fix to handle out-of-range insertions on flat_segment_tree
• Another api version -> rename to mdds-1_2

myspell-dictionaries was updated to 20190423:

• Serbian dictionary updated
• Update af_ZA hunspell
• Update Spanish dictionary
• Update Slovenian dictionary
• Update Breton dictionary
• Update Galician dictionary

This update for libreoffice and libraries fixes the following issues:

LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes.

Additional bugfixes:

• If there is no firebird engine we still need java to run hsqldb (bsc#1135189)
• PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228)
• Slide deck compression doesn't, hmm, compress too much (bsc#1127760)
• Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869)
• Image from PPTX shown in a square, not a circle (bsc#1121874)

libixion was updated to 0.14.1:

• Updated for new orcus

liborcus was updated to 0.14.1:

• Boost 1.67 support
• Various cell handling issues fixed

libwps was updated to 0.4.10:

• QuattroPro: add parser of .qwp files
• all: support complex encoding

mdds was updated to 1.4.3:

• Api change to 1.4
• More multivector operations and tweaks
• Various multi vector fixes
• flat_segment_tree: add segment iterator and functions
• fix to handle out-of-range insertions on flat_segment_tree
• Another api version -> rename to mdds-1_2

myspell-dictionaries was updated to 20190423:

• Serbian dictionary updated
• Update af_ZA hunspell
• Update Spanish dictionary
• Update Slovenian dictionary
• Update Breton dictionary
• Update Galician dictionary

This update for libreoffice fixes the following issues:

LibreOffice was updated to 6.2.5.2 (fate#327121).

Security issue fixed:

• CVE-2018-16858: LibreOffice was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location. (bsc#1124062)

Other bugfixes:

• If there is no firebird engine we still need java to run hsqldb (bsc#1135189)
• Require firebird as default driver for base if enabled
• PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc1135228)
• Slide deck compression doesn't, hmm, compress too much (bsc#1127760)
• Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869)
• Image from PPTX shown in a square, not a circle (bsc#1121874)
• Switch to the new web based help system bsc#1116451
• Enable new approach for mariadb connector again
• PPTX: SmartArt: Basic rendering of the Organizational Chart (bsc#1112114)
• PPTX: SmartArt: Basic rendering of Accent Process and Continuous Block Process (bsc#1112113)
• Saving a new document can silently overwrite an existing document (bsc#1117300)
• Install also C++ libreofficekit headers bsc#1117195
• Chart in PPTX lacks color and is too large (bsc#882383)
• PPTX: SmartArt: Basic rendering of several list types (bsc#1112112)
• PPTX: Charts having weird/darker/ugly background versus Office 365 and strange artefacts where overlapping (bsc#1110348)

It was discovered that LibreOffice incorrectly handled certain document files. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. (CVE-2018-10119, CVE-2018-10120, CVE-2018-11790)

It was discovered that LibreOffice incorrectly handled embedded SMB connections in document files. If a user were tricked in to opening a specially crafted document, a remote attacker could possibly exploit this to obtain sensitive information. (CVE-2018-10583)

Alex Inführ discovered that LibreOffice incorrectly handled embedded scripts in document files. If a user were tricked into opening a specially crafted document, a remote attacker could possibly execute arbitrary code. (CVE-2018-16858)