CVE-2020-12803

ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)

Security Fix(es):

• libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802)

• libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)

Security Fix(es):

• libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802)

• libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

This update for libreoffice fixes the following issues:

• Update to 6.4.5.2:
  • Various fixes all around
• Remove mime-info and application-registry dirs bsc#1062631
• Fix bsc#1172053 - LO-L3: Image disappears during roundtrip 365->Impress->365
  • bsc1172053.diff
• Fix bsc#1172189 - LO-L3: Impress crashes midway opening a PPTX document
  • bsc1172189.diff
• Fix bsc#1157627 - LO-L3: Some XML-created shapes simply lost upon PPTX import (= earth loses countries)
  • bsc1157627.diff
• Fix bsc#1146025 - LO-L3: Colored textboxes in PPTX look very odd (SmartArt)
• Fix bsc#1165849 - LO-L3: Shadow size for rectangle is only a fraction of Office 365
  • bsc1165849-1.diff
  • bsc1165849-2.diff
  • bsc1165849-3.diff

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for libreoffice fixes the following issues:

• Update to 6.4.5.2:
  • Various fixes all around
• Remove mime-info and application-registry dirs bsc#1062631
• Fix bsc#1172053 - LO-L3: Image disappears during roundtrip 365->Impress->365
  • bsc1172053.diff
• Fix bsc#1172189 - LO-L3: Impress crashes midway opening a PPTX document
  • bsc1172189.diff
• Fix bsc#1157627 - LO-L3: Some XML-created shapes simply lost upon PPTX import (= earth loses countries)
  • bsc1157627.diff
• Fix bsc#1146025 - LO-L3: Colored textboxes in PPTX look very odd (SmartArt)
• Fix bsc#1165849 - LO-L3: Shadow size for rectangle is only a fraction of Office 365
  • bsc1165849-1.diff
  • bsc1165849-2.diff
  • bsc1165849-3.diff

This update was imported from the SUSE:SLE-15-SP1:Update update project.

These are all security issues fixed in the libreoffice-7.1.5.2-3.13 package on the GA media of openSUSE Tumbleweed.

This update for libreoffice fixes the following issues:

• Update to 6.4.5.2:
  • Various fixes all around
• Remove mime-info and application-registry dirs bsc#1062631
• Fix bsc#1172053 - LO-L3: Image disappears during roundtrip 365->Impress->365
  • bsc1172053.diff
• Fix bsc#1172189 - LO-L3: Impress crashes midway opening a PPTX document
  • bsc1172189.diff
• Fix bsc#1157627 - LO-L3: Some XML-created shapes simply lost upon PPTX import (= earth loses countries)
  • bsc1157627.diff
• Fix bsc#1146025 - LO-L3: Colored textboxes in PPTX look very odd (SmartArt)
• Fix bsc#1165849 - LO-L3: Shadow size for rectangle is only a fraction of Office 365
  • bsc1165849-1.diff
  • bsc1165849-2.diff
  • bsc1165849-3.diff

This update for libreoffice fixes the following issues:

• Update to 6.4.5.2:
  • Various fixes all around
• Remove mime-info and application-registry dirs bsc#1062631
• Fix bsc#1172053 - LO-L3: Image disappears during roundtrip 365->Impress->365
  • bsc1172053.diff
• Fix bsc#1172189 - LO-L3: Impress crashes midway opening a PPTX document
  • bsc1172189.diff
• Fix bsc#1157627 - LO-L3: Some XML-created shapes simply lost upon PPTX import (= earth loses countries)
  • bsc1157627.diff
• Fix bsc#1146025 - LO-L3: Colored textboxes in PPTX look very odd (SmartArt)
• Fix bsc#1165849 - LO-L3: Shadow size for rectangle is only a fraction of Office 365
  • bsc1165849-1.diff
  • bsc1165849-2.diff
  • bsc1165849-3.diff

This update for libreoffice fixes the following issues:

• Update to 6.4.5.2:
  • Various fixes all around
• Remove mime-info and application-registry dirs bsc#1062631
• Fix bsc#1172053 - LO-L3: Image disappears during roundtrip 365->Impress->365
  • bsc1172053.diff
• Fix bsc#1172189 - LO-L3: Impress crashes midway opening a PPTX document
  • bsc1172189.diff
• Fix bsc#1157627 - LO-L3: Some XML-created shapes simply lost upon PPTX import (= earth loses countries)
  • bsc1157627.diff
• Fix bsc#1146025 - LO-L3: Colored textboxes in PPTX look very odd (SmartArt)
• Fix bsc#1165849 - LO-L3: Shadow size for rectangle is only a fraction of Office 365
  • bsc1165849-1.diff
  • bsc1165849-2.diff
  • bsc1165849-3.diff

It was discovered that LibreOffice incorrectly handled links using the Office URI Schemes. If a user were tricked into opening a specially crafted document, a remote attacker could use this issue to execute arbitrary scripts. (CVE-2022-3140)

Thomas Florian discovered that LibreOffice incorrectly handled crashes when an encrypted document is open. If the document is recovered upon restarting LibreOffice, subsequent saves of the document were unencrypted. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-12801)

Jens Müller discovered that LibreOffice incorrectly handled certain documents containing forms. If a user were tricked into opening a specially crafted document, a remote attacker could overwrite arbitrary files when the form was submitted. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-12803)

It was discovered that LibreOffice incorrectly validated macro signatures. If a user were tricked into opening a specially crafted document, a remote attacker could possibly use this issue to execute arbitrary macros. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-26305)

It was discovered that Libreoffice incorrectly handled encrypting the master key provided by the user for storing passwords for web connections. A local attacker could possibly use this issue to obtain access to passwords stored in the user’s configuration data. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-26306, CVE-2022-26307)