RHSA-2018:3054 - Security Advisory

Topic

An update for libreoffice is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

• libreoffice: Use-after-free in sdstor/stgstrms.cxx:StgSmallStrm class allows for denial of service with crafted document (CVE-2018-10119)
• libreoffice: Out of bounds write in filter/ww8/ww8toolbar.cxx:SwCTBWrapper class allows for denial of service with crafted document (CVE-2018-10120)
• libreoffice: Information disclosure via SMB connection embedded in malicious file (CVE-2018-10583)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of LibreOffice applications must be restarted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le

Fixes

• BZ - 1388764 - [fix available] When editting text in LibreOffice Calc the new and old texts are shown on top of each other
• BZ - 1545262 - [fix available] ppc64le Fatal exception: Signal 6
• BZ - 1546997 - [fix available][ALL_LANG except zh,ko] Text overlap observed in libreoffice applications on search bar
• BZ - 1568579 - [fix available] LibreOffice leaves a zombie when run in daemon mode.
• BZ - 1569836 - CVE-2018-10119 libreoffice: Use-after-free in sdstor/stgstrms.cxx:StgSmallStrm class allows for denial of service with crafted document
• BZ - 1569840 - CVE-2018-10120 libreoffice: Out of bounds write in filter/ww8/ww8toolbar.cxx:SwCTBWrapper class allows for denial of service with crafted document
• BZ - 1574998 - CVE-2018-10583 libreoffice: Information disclosure via SMB connection embedded in malicious file
• BZ - 1589029 - Impress not showing text background in presentation mode
• BZ - 1610692 - [fix available] (soffice:13740): Gtk-CRITICAL **: 10:28:04.861: gtk_widget_queue_draw_area: assertion 'height >= 0' failed
• BZ - 1610904 - [fix available] rendering line cursor when moving selected text
• BZ - 1614419 - libreoffice-calc crashes in FIPS mode when handling password protected documents

CVEs

• CVE-2018-10119
• CVE-2018-10120
• CVE-2018-10583

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index