openSUSE Security Update : LibreOffice (openSUSE-2016-871)

high Nessus Plugin ID 92310

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

LibreOffice was updated to version 5.1.3.2, bringing many new features and bug fixes.

Two security issues have been fixed :

- CVE-2016-0795: LibreOffice allowed remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document.

- CVE-2016-0794: The lwp filter in LibreOffice allowed remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.

A comprehensive list of new features and improvements in this release is provided by the Document Foundation at https://wiki.documentfoundation.org/ReleaseNotes/5.1 .

This update was imported from the SUSE:SLE-12:Update project.

Solution

Update the affected LibreOffice packages.

Plugin Details

Severity: High

ID: 92310

File Name: openSUSE-2016-871.nasl

Version: 2.5

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 7/15/2016

Updated: 1/19/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: High

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:libreoffice-icon-theme-galaxy, p-cpe:/a:novell:opensuse:liborcus-debugsource, p-cpe:/a:novell:opensuse:myspell-ro, p-cpe:/a:novell:opensuse:libreoffice-l10n-fr, p-cpe:/a:novell:opensuse:libreoffice-kde4-debuginfo, p-cpe:/a:novell:opensuse:hyphen-devel, p-cpe:/a:novell:opensuse:libreoffice-calc, p-cpe:/a:novell:opensuse:myspell-bn_bd, p-cpe:/a:novell:opensuse:myspell-gl, p-cpe:/a:novell:opensuse:libreoffice-l10n-pa, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-tango, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql-debuginfo, p-cpe:/a:novell:opensuse:myspell-dictionaries, p-cpe:/a:novell:opensuse:myspell-ne_np, p-cpe:/a:novell:opensuse:myspell-en_ph, p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-hant, p-cpe:/a:novell:opensuse:myspell-en_jm, p-cpe:/a:novell:opensuse:myspell-ar_sd, p-cpe:/a:novell:opensuse:libvisio-0_1-1, p-cpe:/a:novell:opensuse:myspell-nl_nl, p-cpe:/a:novell:opensuse:libreoffice-math-debuginfo, p-cpe:/a:novell:opensuse:libixion-tools-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-hu, p-cpe:/a:novell:opensuse:myspell-es_pe, p-cpe:/a:novell:opensuse:libreoffice-gnome-debuginfo, p-cpe:/a:novell:opensuse:myspell-af_na, p-cpe:/a:novell:opensuse:libreoffice-l10n-ko, p-cpe:/a:novell:opensuse:myspell-es_py, p-cpe:/a:novell:opensuse:myspell-gd_gb, p-cpe:/a:novell:opensuse:libetonyek-tools, p-cpe:/a:novell:opensuse:libreoffice-l10n-ro, p-cpe:/a:novell:opensuse:libwps-0_4-4, p-cpe:/a:novell:opensuse:myspell-be_by, p-cpe:/a:novell:opensuse:myspell-ar_ae, p-cpe:/a:novell:opensuse:libreoffice-l10n-ca, p-cpe:/a:novell:opensuse:myspell-lightproof-en, p-cpe:/a:novell:opensuse:myspell-ro_ro, p-cpe:/a:novell:opensuse:libreoffice-l10n-th, p-cpe:/a:novell:opensuse:myspell-es_ec, p-cpe:/a:novell:opensuse:myspell-en_tt, p-cpe:/a:novell:opensuse:myspell-en_ie, p-cpe:/a:novell:opensuse:myspell-sr, p-cpe:/a:novell:opensuse:myspell-it_it, p-cpe:/a:novell:opensuse:myspell-et_ee, p-cpe:/a:novell:opensuse:libetonyek-tools-debuginfo, p-cpe:/a:novell:opensuse:myspell-bs_ba, p-cpe:/a:novell:opensuse:myspell-th_th, p-cpe:/a:novell:opensuse:myspell-br_fr, p-cpe:/a:novell:opensuse:libreoffice-impress, p-cpe:/a:novell:opensuse:libreoffice-l10n-el, p-cpe:/a:novell:opensuse:myspell-ar, p-cpe:/a:novell:opensuse:myspell-de_ch, p-cpe:/a:novell:opensuse:myspell-kmr_latn, p-cpe:/a:novell:opensuse:libreofficekit-devel, p-cpe:/a:novell:opensuse:libreoffice-l10n-et, p-cpe:/a:novell:opensuse:myspell-es_do, p-cpe:/a:novell:opensuse:libwps-tools, p-cpe:/a:novell:opensuse:libreoffice-l10n-fi, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-breeze, p-cpe:/a:novell:opensuse:myspell-sr_cs, p-cpe:/a:novell:opensuse:myspell-ar_kw, p-cpe:/a:novell:opensuse:myspell-es_uy, p-cpe:/a:novell:opensuse:libreoffice-debugsource, p-cpe:/a:novell:opensuse:myspell-sv_se, p-cpe:/a:novell:opensuse:liborcus-tools, p-cpe:/a:novell:opensuse:libreoffice-pyuno, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-sifr, p-cpe:/a:novell:opensuse:myspell-pt_br, p-cpe:/a:novell:opensuse:liborcus-python3-debuginfo, p-cpe:/a:novell:opensuse:libcmis-c-devel, p-cpe:/a:novell:opensuse:myspell-ar_ye, p-cpe:/a:novell:opensuse:libreoffice-l10n-he, p-cpe:/a:novell:opensuse:myspell-es_bo, p-cpe:/a:novell:opensuse:myspell-no, p-cpe:/a:novell:opensuse:myspell-es_sv, p-cpe:/a:novell:opensuse:myspell-ar_ly, p-cpe:/a:novell:opensuse:myspell-ca_it, p-cpe:/a:novell:opensuse:hyphen-debugsource, p-cpe:/a:novell:opensuse:libvisio-debugsource, p-cpe:/a:novell:opensuse:myspell-cs_cz, p-cpe:/a:novell:opensuse:myspell-ca_es, p-cpe:/a:novell:opensuse:libixion-python3-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-or, p-cpe:/a:novell:opensuse:hunspell-debuginfo, p-cpe:/a:novell:opensuse:myspell-es_gt, p-cpe:/a:novell:opensuse:libreoffice-l10n-nn, p-cpe:/a:novell:opensuse:libixion-0_11-0-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-sv, p-cpe:/a:novell:opensuse:myspell-sr_latn_rs, p-cpe:/a:novell:opensuse:libhyphen0-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-sdk, p-cpe:/a:novell:opensuse:myspell-de, cpe:/o:novell:opensuse:42.1, p-cpe:/a:novell:opensuse:myspell-ar_sa, p-cpe:/a:novell:opensuse:myspell-ar_om, p-cpe:/a:novell:opensuse:myspell-ca, p-cpe:/a:novell:opensuse:libreoffice-l10n-it, p-cpe:/a:novell:opensuse:libreoffice-kde4, p-cpe:/a:novell:opensuse:myspell-ru_ru, p-cpe:/a:novell:opensuse:myspell-ar_tn, p-cpe:/a:novell:opensuse:myspell-gl_es, p-cpe:/a:novell:opensuse:libreoffice-calc-extensions, p-cpe:/a:novell:opensuse:libvisio-tools, p-cpe:/a:novell:opensuse:myspell-lightproof-ru_ru, p-cpe:/a:novell:opensuse:libcmis-devel, p-cpe:/a:novell:opensuse:myspell-te, p-cpe:/a:novell:opensuse:libreoffice-l10n-eu, p-cpe:/a:novell:opensuse:myspell-ar_dz, p-cpe:/a:novell:opensuse:myspell-ar_lb, p-cpe:/a:novell:opensuse:libreoffice-calc-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-da, p-cpe:/a:novell:opensuse:myspell-es_hn, p-cpe:/a:novell:opensuse:libreoffice-l10n-lt, p-cpe:/a:novell:opensuse:myspell-nn_no, p-cpe:/a:novell:opensuse:libreoffice-l10n-ss, p-cpe:/a:novell:opensuse:myspell-en_bz, p-cpe:/a:novell:opensuse:libreoffice-l10n-uk, p-cpe:/a:novell:opensuse:hunspell-tools-debuginfo, p-cpe:/a:novell:opensuse:myspell-hr_hr, p-cpe:/a:novell:opensuse:libreoffice-l10n-nr, p-cpe:/a:novell:opensuse:libreoffice-draw, p-cpe:/a:novell:opensuse:myspell-hi_in, p-cpe:/a:novell:opensuse:libreoffice-l10n-kn, p-cpe:/a:novell:opensuse:myspell-es_pa, p-cpe:/a:novell:opensuse:libwps-0_4-4-debuginfo, p-cpe:/a:novell:opensuse:myspell-fr_ch, p-cpe:/a:novell:opensuse:libreoffice-l10n-ar, p-cpe:/a:novell:opensuse:myspell-bs, p-cpe:/a:novell:opensuse:libreoffice-officebean-debuginfo, p-cpe:/a:novell:opensuse:myspell-en_bs, p-cpe:/a:novell:opensuse:myspell-en_za, p-cpe:/a:novell:opensuse:myspell-sv_fi, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql, p-cpe:/a:novell:opensuse:libreoffice-writer-debuginfo, p-cpe:/a:novell:opensuse:liborcus-0_11-0-debuginfo, p-cpe:/a:novell:opensuse:myspell-es_mx, p-cpe:/a:novell:opensuse:myspell-en_nz, p-cpe:/a:novell:opensuse:myspell-lightproof-pt_br, p-cpe:/a:novell:opensuse:libreoffice-l10n-sk, p-cpe:/a:novell:opensuse:myspell-en_in, p-cpe:/a:novell:opensuse:libreoffice-filters-optional, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql-debuginfo, p-cpe:/a:novell:opensuse:myspell-oc_fr, p-cpe:/a:novell:opensuse:myspell-sr_rs, p-cpe:/a:novell:opensuse:hunspell-static, p-cpe:/a:novell:opensuse:libhyphen0-32bit, p-cpe:/a:novell:opensuse:myspell-uk_ua, p-cpe:/a:novell:opensuse:libreoffice-l10n-pt-pt, p-cpe:/a:novell:opensuse:myspell-is_is, p-cpe:/a:novell:opensuse:myspell-en_au, p-cpe:/a:novell:opensuse:libvisio-tools-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-pt-br, p-cpe:/a:novell:opensuse:cmis-client-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-nso, p-cpe:/a:novell:opensuse:mdds-1_0-devel, p-cpe:/a:novell:opensuse:libreoffice-l10n-ts, p-cpe:/a:novell:opensuse:myspell-he_il, p-cpe:/a:novell:opensuse:myspell-gug, p-cpe:/a:novell:opensuse:libreoffice-gnome, p-cpe:/a:novell:opensuse:libreoffice-l10n-hr, p-cpe:/a:novell:opensuse:myspell-pt_ao, p-cpe:/a:novell:opensuse:libvisio-devel, p-cpe:/a:novell:opensuse:myspell-si_lk, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-hicontrast, p-cpe:/a:novell:opensuse:libreoffice-writer-extensions, p-cpe:/a:novell:opensuse:myspell-es, p-cpe:/a:novell:opensuse:myspell-en, p-cpe:/a:novell:opensuse:libreoffice-l10n-cs, p-cpe:/a:novell:opensuse:myspell-ar_iq, p-cpe:/a:novell:opensuse:libcmis-0_5-5, p-cpe:/a:novell:opensuse:myspell-ar_eg, p-cpe:/a:novell:opensuse:libreoffice-l10n-ml, p-cpe:/a:novell:opensuse:libreoffice-l10n-ve, p-cpe:/a:novell:opensuse:myspell-an_es, p-cpe:/a:novell:opensuse:myspell-fr_fr, p-cpe:/a:novell:opensuse:libreoffice-l10n-gu, p-cpe:/a:novell:opensuse:libreoffice-l10n-mai, p-cpe:/a:novell:opensuse:myspell-es_cr, p-cpe:/a:novell:opensuse:libreoffice-gdb-pretty-printers, p-cpe:/a:novell:opensuse:myspell-vi, p-cpe:/a:novell:opensuse:myspell-en_ca, p-cpe:/a:novell:opensuse:libreoffice-l10n-cy, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql, p-cpe:/a:novell:opensuse:libreoffice-l10n-ga, p-cpe:/a:novell:opensuse:libreofficekit, p-cpe:/a:novell:opensuse:libreoffice-mailmerge, p-cpe:/a:novell:opensuse:myspell-en_na, p-cpe:/a:novell:opensuse:myspell-ca_fr, p-cpe:/a:novell:opensuse:libreoffice-writer, p-cpe:/a:novell:opensuse:myspell-es_co, p-cpe:/a:novell:opensuse:libetonyek-debugsource, p-cpe:/a:novell:opensuse:myspell-ar_ma, p-cpe:/a:novell:opensuse:libreoffice-draw-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-sl, p-cpe:/a:novell:opensuse:myspell-fr_ca, p-cpe:/a:novell:opensuse:libhyphen0, p-cpe:/a:novell:opensuse:myspell-pl_pl, p-cpe:/a:novell:opensuse:myspell-es_pr, p-cpe:/a:novell:opensuse:hunspell-tools, p-cpe:/a:novell:opensuse:libreoffice-l10n-fa, p-cpe:/a:novell:opensuse:myspell-fr_lu, p-cpe:/a:novell:opensuse:myspell-gu_in, p-cpe:/a:novell:opensuse:myspell-es_cl, p-cpe:/a:novell:opensuse:libreoffice-l10n-gl, p-cpe:/a:novell:opensuse:myspell-es_ar, p-cpe:/a:novell:opensuse:liborcus-devel, p-cpe:/a:novell:opensuse:libreoffice-branding-upstream, p-cpe:/a:novell:opensuse:libwps-devel, p-cpe:/a:novell:opensuse:libreoffice-glade, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-oxygen, p-cpe:/a:novell:opensuse:myspell-fr_mc, p-cpe:/a:novell:opensuse:libreoffice-l10n-tn, p-cpe:/a:novell:opensuse:libreoffice-l10n-dz, p-cpe:/a:novell:opensuse:libreoffice-sdk-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-lv, p-cpe:/a:novell:opensuse:hunspell-debugsource, p-cpe:/a:novell:opensuse:libwps-debugsource, p-cpe:/a:novell:opensuse:myspell-te_in, p-cpe:/a:novell:opensuse:myspell-es_cu, p-cpe:/a:novell:opensuse:myspell-lightproof-hu_hu, p-cpe:/a:novell:opensuse:libreoffice-l10n-nl, p-cpe:/a:novell:opensuse:libreoffice-l10n-en, p-cpe:/a:novell:opensuse:myspell-en_zw, p-cpe:/a:novell:opensuse:libreoffice-l10n-si, p-cpe:/a:novell:opensuse:myspell-af_za, p-cpe:/a:novell:opensuse:myspell-en_mw, p-cpe:/a:novell:opensuse:libreoffice-l10n-es, p-cpe:/a:novell:opensuse:myspell-is, p-cpe:/a:novell:opensuse:myspell-ca_es_valencia, p-cpe:/a:novell:opensuse:libreoffice-l10n-ru, p-cpe:/a:novell:opensuse:libreoffice-l10n-xh, p-cpe:/a:novell:opensuse:libreoffice-base-debuginfo, p-cpe:/a:novell:opensuse:myspell-es_ve, p-cpe:/a:novell:opensuse:libreoffice, p-cpe:/a:novell:opensuse:myspell-en_us, p-cpe:/a:novell:opensuse:myspell-ca_ad, p-cpe:/a:novell:opensuse:libreoffice-l10n-kk, p-cpe:/a:novell:opensuse:libetonyek-0_1-1, p-cpe:/a:novell:opensuse:myspell-lo_la, p-cpe:/a:novell:opensuse:libetonyek-devel, p-cpe:/a:novell:opensuse:libreoffice-l10n-ta, p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-hans, p-cpe:/a:novell:opensuse:libixion-0_11-0, p-cpe:/a:novell:opensuse:liborcus-0_11-0, p-cpe:/a:novell:opensuse:libreoffice-gtk3, p-cpe:/a:novell:opensuse:hunspell-devel, p-cpe:/a:novell:opensuse:liborcus-python3, p-cpe:/a:novell:opensuse:libreoffice-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-tr, p-cpe:/a:novell:opensuse:cmis-client, p-cpe:/a:novell:opensuse:libreoffice-l10n-bn, p-cpe:/a:novell:opensuse:myspell-ar_sy, p-cpe:/a:novell:opensuse:libreoffice-l10n-hi, p-cpe:/a:novell:opensuse:myspell-sl_si, p-cpe:/a:novell:opensuse:libreoffice-gtk3-debuginfo, p-cpe:/a:novell:opensuse:myspell-sw_tz, p-cpe:/a:novell:opensuse:myspell-vi_vn, p-cpe:/a:novell:opensuse:libreoffice-l10n-ja, p-cpe:/a:novell:opensuse:myspell-en_gh, p-cpe:/a:novell:opensuse:libixion-tools, p-cpe:/a:novell:opensuse:libreoffice-l10n-bg, p-cpe:/a:novell:opensuse:libhyphen0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libreoffice-officebean, p-cpe:/a:novell:opensuse:libreoffice-l10n-de, p-cpe:/a:novell:opensuse:hyphen, p-cpe:/a:novell:opensuse:libreoffice-l10n-mr, p-cpe:/a:novell:opensuse:myspell-es_ni, p-cpe:/a:novell:opensuse:myspell-sr_latn_cs, p-cpe:/a:novell:opensuse:myspell-en_gb, p-cpe:/a:novell:opensuse:myspell-ar_jo, p-cpe:/a:novell:opensuse:libixion-devel, p-cpe:/a:novell:opensuse:libixion-debugsource, p-cpe:/a:novell:opensuse:cmis-client-debugsource, p-cpe:/a:novell:opensuse:myspell-ar_bh, p-cpe:/a:novell:opensuse:libreoffice-l10n-te, p-cpe:/a:novell:opensuse:myspell-es_es, p-cpe:/a:novell:opensuse:myspell-bn_in, p-cpe:/a:novell:opensuse:myspell-an, p-cpe:/a:novell:opensuse:myspell-ar_qa, p-cpe:/a:novell:opensuse:hunspell, p-cpe:/a:novell:opensuse:libreoffice-pyuno-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-base, p-cpe:/a:novell:opensuse:myspell-kmr_latn_tr, p-cpe:/a:novell:opensuse:libreoffice-l10n-as, p-cpe:/a:novell:opensuse:hunspell-devel-32bit, p-cpe:/a:novell:opensuse:libcmis-0_5-5-debuginfo, p-cpe:/a:novell:opensuse:myspell-zu_za, p-cpe:/a:novell:opensuse:myspell-sk_sk, p-cpe:/a:novell:opensuse:hunspell-debuginfo-32bit, p-cpe:/a:novell:opensuse:myspell-de_de, p-cpe:/a:novell:opensuse:libixion-python3, p-cpe:/a:novell:opensuse:myspell-de_at, p-cpe:/a:novell:opensuse:libreoffice-l10n-nb, p-cpe:/a:novell:opensuse:myspell-da_dk, p-cpe:/a:novell:opensuse:myspell-nl_be, p-cpe:/a:novell:opensuse:libvisio-0_1-1-debuginfo, p-cpe:/a:novell:opensuse:libcmis-c-0_5-5-debuginfo, p-cpe:/a:novell:opensuse:myspell-lt_lt, p-cpe:/a:novell:opensuse:libetonyek-0_1-1-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-br, p-cpe:/a:novell:opensuse:libreoffice-math, p-cpe:/a:novell:opensuse:libreoffice-l10n-sr, p-cpe:/a:novell:opensuse:myspell-kmr_latn_sy, p-cpe:/a:novell:opensuse:myspell-lv_lv, p-cpe:/a:novell:opensuse:libcmis-c-0_5-5, p-cpe:/a:novell:opensuse:myspell-el_gr, p-cpe:/a:novell:opensuse:myspell-gug_py, p-cpe:/a:novell:opensuse:libreoffice-l10n-af, p-cpe:/a:novell:opensuse:myspell-nb_no, p-cpe:/a:novell:opensuse:libwps-tools-debuginfo, p-cpe:/a:novell:opensuse:liborcus-tools-debuginfo, p-cpe:/a:novell:opensuse:myspell-hu_hu, p-cpe:/a:novell:opensuse:myspell-fr_be, p-cpe:/a:novell:opensuse:libreoffice-l10n-pl, p-cpe:/a:novell:opensuse:libreoffice-l10n-st, p-cpe:/a:novell:opensuse:hunspell-32bit, p-cpe:/a:novell:opensuse:libreoffice-impress-debuginfo, p-cpe:/a:novell:opensuse:myspell-bg_bg, p-cpe:/a:novell:opensuse:myspell-pt_pt, p-cpe:/a:novell:opensuse:libreoffice-l10n-zu

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 7/14/2016

Reference Information

CVE: CVE-2016-0794, CVE-2016-0795

Detections

Analytics