[ubuntu/trusty-security] libreoffice 1:4.2.8-0ubuntu5.3 (Accepted)

Chris Coulson chrisccoulson at ubuntu.com
Wed Feb 21 19:08:37 UTC 2018


libreoffice (1:4.2.8-0ubuntu5.3) trusty-security; urgency=medium

  * SECURITY UPDATE: remote arbitrary file disclosure vulnerability using
    WEBSERVICE
    - debian/patches/CVE-2018-6871.patch: limit WEBSERVICE to http[s]
      protocols.
    - CVE-2018-6871
  * SECURITY UPDATE: use-after-free in SwRootFrame
    - debian/patches/layout-footnote-use-after-free.diff: fix layout
      footnote use-after-free in SwRootFrame.
    - No CVE number.

Date: 2018-02-19 17:24:20.486275+00:00
Changed-By: Olivier Tilloy <olivier.tilloy at canonical.com>
Signed-By: Chris Coulson <chrisccoulson at ubuntu.com>
https://launchpad.net/ubuntu/+source/libreoffice/1:4.2.8-0ubuntu5.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the Trusty-changes mailing list