USN-2400-1: LibreOffice vulnerability
10 November 2014
LibreOffice could be made to embed sensitive information into documents.
Releases
Packages
- libreoffice - Office productivity suite
Details
It was discovered that LibreOffice incorrectly handled OLE preview
generation. If a user were tricked into opening a crafted document, an
attacker could possibly exploit this to embed arbitrary data into
documents.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04
After a standard system update you need to restart LibreOffice to make all
the necessary changes.