USN-6546-2: LibreOffice vulnerabilities

Releases

• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• libreoffice - Office productivity suite

Details

USN-6546-1 fixed vulnerabilities in LibreOffice. This update provides the
corresponding updates for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.

Original advisory details:

Reginaldo Silva discovered that LibreOffice incorrectly handled filenames
when passing embedded videos to GStreamer. If a user were tricked into
opening a specially crafted file, a remote attacker could possibly use this
issue to execute arbitrary GStreamer plugins. (CVE-2023-6185)

Reginaldo Silva discovered that LibreOffice incorrectly handled certain
non-typical hyperlinks. If a user were tricked into opening a specially
crafted file, a remote attacker could possibly use this issue to execute
arbitrary scripts. (CVE-2023-6186)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 22.04

• libreoffice - 1:7.3.7-0ubuntu0.22.04.4

Ubuntu 20.04

• libreoffice - 1:6.4.7-0ubuntu0.20.04.9

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-6186
• CVE-2023-6185

Related notices

• USN-6546-1