{"id":"CVE-2019-9855","aliases":["ALPINE-CVE-2019-9855","EUVD-2019-19211","GHSA-873f-q5vx-w7hm","SUSE-SU-2019:2401-1","SUSE-SU-2019:2402-1","SUSE-SU-2019:2686-1","openSUSE-SU-2019:2183-1","openSUSE-SU-2019:2361-1","openSUSE-SU-2024:10983-1"],"status":"published","title":"Windows 8.3 path equivalence handling flaw allows LibreLogo script execution","description":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02963,"percentile":0.87318,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-417"],"published":"2019-09-06T18:40:17Z","modified":"2026-11-03T06:31:39Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libreoffice","fixed_in":["6.2.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libreoffice","fixed_in":["6.3.1.2-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.2.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.1.2-r0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7.1-43.56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7.1-43.56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7.1-43.56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7.1-8.10.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7.1-3.24.4"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7.1-lp151.3.6.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.7.1-lp150.2.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.5.2-3.13"}]}],"bundled":24}],"products":[{"vendor":"document foundation","product":"libreoffice"},{"vendor":"libreoffice","product":"libreoffice"},{"vendor":"opensuse","product":"leap"},{"vendor":"the document foundation","product":"libreoffice"}],"references":[{"url":"https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9855/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9855"},{"url":"https://github.com/advisories/GHSA-873f-q5vx-w7hm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-9855","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192401-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1133534","tags":["report"]},{"url":"https://bugzilla.suse.com/1141861","tags":["report"]},{"url":"https://bugzilla.suse.com/1141862","tags":["report"]},{"url":"https://bugzilla.suse.com/1146098","tags":["report"]},{"url":"https://bugzilla.suse.com/1146105","tags":["report"]},{"url":"https://bugzilla.suse.com/1146107","tags":["report"]},{"url":"https://bugzilla.suse.com/1149943","tags":["report"]},{"url":"https://bugzilla.suse.com/1149944","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9855","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192402-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192686-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LE2HRFP753ZGBXOVVBEGY2B6NNTISZMW/#LE2HRFP753ZGBXOVVBEGY2B6NNTISZMW","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NILGYI4523RYX3XYQQ2B7BETLYBDPFCB/#NILGYI4523RYX3XYQQ2B7BETLYBDPFCB","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12803","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-9855","title":"Windows 8.3 path equivalence handling flaw allows LibreLogo script execution","description":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.","status":"published","published":"2019-09-06T18:40:17.271Z","modified":"2024-09-16T18:49:33.756Z","updated_at":"2026-11-02T14:20:20.081405Z"}],"euvd":[{"id":"EUVD-2019-19211","description":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.","status":"published","published":"2019-09-06T18:40:17Z","modified":"2024-09-16T18:49:33Z","updated_at":"2026-11-03T00:55:28.625786Z"}],"ghsa":[{"id":"GHSA-873f-q5vx-w7hm","title":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script,...","description":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.","status":"published","published":"2022-05-24T16:55:35Z","modified":"2023-01-28T05:05:29Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:44:20.965343Z"}],"nvd":[{"id":"CVE-2019-9855","description":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.","status":"published","published":"2019-09-06T19:15:12.073Z","modified":"2026-06-17T02:44:44.023Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-417"],"updated_at":"2026-11-02T14:05:25.691233Z"}],"osv":[{"id":"ALPINE-CVE-2019-9855","description":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.","status":"published","published":"2019-09-06T19:15:12.073Z","modified":"2026-11-03T06:31:39.258317275Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2019-9855","description":"LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.","status":"published","published":"2019-09-06T19:15:12.073Z","modified":"2026-10-24T10:30:31.13795075Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"openSUSE-SU-2019:2183-1","title":"Security update for libreoffice","description":"This update for libreoffice fixes the following issues:\n\nUpdated to version 6.2.7.1.\n\nSecurity issues fixed:\n\n- CVE-2019-9849: Disabled fetching remote bullet graphics in 'stealth mode' (bsc#1141861).\n- CVE-2019-9848: Fixed an arbitrary script execution via LibreLogo (bsc#1141862).\n- CVE-2019-9851: Fixed LibreLogo global-event script execution issue (bsc#1146105).\n- CVE-2019-9852: Fixed insufficient URL encoding flaw in allowed script location check (bsc#1146107).\n- CVE-2019-9850: Fixed insufficient URL validation that allowed LibreLogo script execution (bsc#1146098).\n- CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944).\n- CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943)\n\nNon-security issue fixed:\n\n- SmartArt: Basic rendering of Trapezoid List (bsc#1133534).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-09-25T04:18:05Z","modified":"2025-05-07T18:11:12.344889Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2361-1","title":"Security update for libreoffice","description":"This update for libreoffice fixes the following issues:\n\t  \nUpdated to version 6.2.7.1.\n\nSecurity issues fixed:\n\n- CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944).\n- CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-21T22:25:35Z","modified":"2025-05-07T18:11:12.464475Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10983-1","title":"libreoffice-7.1.5.2-3.13 on GA media","description":"These are all security issues fixed in the libreoffice-7.1.5.2-3.13 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:26:49.903307Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:2401-1","title":"Security update for libreoffice","description":"This update for libreoffice to version 6.2.7.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9849: Disabled fetching remote bullet graphics in 'stealth mode' (bsc#1141861).\n- CVE-2019-9848: Fixed an arbitrary script execution via LibreLogo (bsc#1141862).\n- CVE-2019-9851: Fixed LibreLogo global-event script execution issue (bsc#1146105).\n- CVE-2019-9852: Fixed insufficient URL encoding flaw in allowed script location check (bsc#1146107).\n- CVE-2019-9850: Fixed insufficient URL validation that allowed LibreLogo script execution (bsc#1146098).\n- CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944).\n- CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943)\n\nNon-security issue fixed:\n\n- SmartArt: Basic rendering of Trapezoid List (bsc#1133534)\n","status":"published","published":"2019-09-18T11:50:02Z","modified":"2026-02-04T04:11:49.73834Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2402-1","title":"Security update for libreoffice","description":"This update for libreoffice fixes the following issues:\n\nUpdated to version 6.2.7.1.\n\nSecurity issues fixed:\n\n- CVE-2019-9849: Disabled fetching remote bullet graphics in 'stealth mode' (bsc#1141861).\n- CVE-2019-9848: Fixed an arbitrary script execution via LibreLogo (bsc#1141862).\n- CVE-2019-9851: Fixed LibreLogo global-event script execution issue (bsc#1146105).\n- CVE-2019-9852: Fixed insufficient URL encoding flaw in allowed script location check (bsc#1146107).\n- CVE-2019-9850: Fixed insufficient URL validation that allowed LibreLogo script execution (bsc#1146098).\n- CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944).\n- CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943)\n\nNon-security issue fixed:\n\n- SmartArt: Basic rendering of Trapezoid List (bsc#1133534).\n","status":"published","published":"2019-09-18T11:50:17Z","modified":"2026-02-04T03:54:35.50396Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2686-1","title":"Security update for libreoffice","description":"This update for libreoffice fixes the following issues:\n\t  \nUpdated to version 6.2.7.1.\n\nSecurity issues fixed:\n\n- CVE-2019-9854: Fixed unsafe URL assembly flaw (bsc#1149944).\n- CVE-2019-9855: Fixed path equivalence handling flaw (bsc#1149943)\n","status":"published","published":"2019-10-16T13:25:00Z","modified":"2026-02-04T02:56:38.268363Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}