==========================================================================
Ubuntu Security Notice USN-2899-1
February 16, 2016
libreoffice vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 15.10
– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS
Summary:
LibreOffice could be made to crash or run programs as your login if it
opened a specially crafted file.
Software Description:
– libreoffice: Office productivity suite
Details:
It was discovered that LibreOffice incorrectly handled LWP document files.
If a user were tricked into opening a specially crafted LWP document, a
remote attacker could cause LibreOffice to crash, and possibly execute
arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 15.10:
libreoffice-core 1:5.0.5~rc2-0ubuntu2
Ubuntu 14.04 LTS:
libreoffice-core 1:4.2.8-0ubuntu4
Ubuntu 12.04 LTS:
libreoffice-core 1:3.5.7-0ubuntu10
After a standard system update you need to restart LibreOffice to make all
the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2899-1
CVE-2016-0794, CVE-2016-0795
Package Information:
https://launchpad.net/ubuntu/+source/libreoffice/1:5.0.5~rc2-0ubuntu2
https://launchpad.net/ubuntu/+source/libreoffice/1:4.2.8-0ubuntu4
https://launchpad.net/ubuntu/+source/libreoffice/1:3.5.7-0ubuntu10
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2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=NjMh
—–END PGP SIGNATURE—–
—
