Multiple vulnerabilities have been found in LibreOffice, the worst of which could result in user-assisted code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 24.2.7.2-r1 | >= 24.2.7.2-r1 |
| app-office/libreoffice-bin | * | < 24.8.4 | >= 24.8.4 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
Multiple vulnerabilities have been discovered in LibreOffice. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All LibreOffice binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-24.8.4"
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-24.2.7.2-r1"
Multiple vulnerabilities have been found in LibreOffice, the worst of which could result in user-assisted code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 7.5.9.2 | >= 7.5.9.2 |
| app-office/libreoffice-bin | * | < 7.5.9.2 | >= 7.5.9.2 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
Multiple vulnerabilities have been discovered in LibreOffice. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All LibreOffice binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-7.5.9.2"
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-7.5.9.2"
Multiple vulnerabilities have been discovered in LibreOffice, the worst of which could lead to code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 7.5.3.2 | >= 7.5.3.2 |
| app-office/libreoffice-bin | * | < 7.5.3.2 | >= 7.5.3.2 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
Multiple vulnerabilities have been discovered in LibreOffice. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All LibreOffice binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-7.5.3.2"
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-7.5.3.2"
A vulnerability has been discovered in LibreOffice which could result in arbitrary script execution via crafted links.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 7.3.6.2 | >= 7.3.6.2 |
| app-office/libreoffice-bin | * | < 7.3.6.2 | >= 7.3.6.2 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
LibreOffice links using the vnd.libreoffice.command scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning.
An attacker able to coerce a victim into opening a crafted LibreOffice document and execute certain actions with it could achieve remote code execution.
There is no known workaround at this time.
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-7.3.6.2"
All LibreOffice binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-7.3.6.2"
Multiple vulnerabilities have been found in LibreOffice, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 6.2.5.2 | >= 6.2.5.2 |
| app-office/libreoffice-bin | * | < 6.2.5.2 | >= 6.2.5.2 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
Multiple vulnerabilities have been discovered in LibreOffice. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-6.2.5.2"
All LibreOffice binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-6.2.5.2"
A vulnerability in LibreOffice might allow remote attackers to read arbitrary files.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 5.4.5.1 | >= 5.4.5.1 |
| app-office/libreoffice-bin | * | < 5.4.5.1 | >= 5.4.5.1 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
It was discovered that missing restrictions in the implementation of the WEBSERVICE function in LibreOffice could result in the disclosure of arbitrary files.
A remote attacker could entice a user to open a specially crafted document using LibreOffice, possibly resulting in the disclosure of arbitrary files readable by the victim.
There is no known workaround at this time.
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-5.4.5.1"
All LibreOffice binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-5.4.5.1"
Multiple vulnerabilities have been found in LibreOffice, the worst of which allows for the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 5.2.7.2 | >= 5.2.7.2 |
| app-office/libreoffice-bin | * | < 5.2.7.2 | >= 5.2.7.2 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
Multiple vulnerabilities have been discovered in LibreOffice. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted file using LibreOffice, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-5.2.7.2"
All LibreOffice binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-5.2.7.2"
Multiple vulnerabilities have been found in both LibreOffice and OpenOffice, the worst of which allows for the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 5.1.4.2 | >= 5.1.4.2 |
| app-office/libreoffice-bin | * | < 5.1.4.2 | >= 5.1.4.2 |
| app-office/openoffice-bin | * | < 4.1.2 | >= 4.1.2 |
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
Apache OpenOffice is the leading open-source office software suite for word processing, spreadsheets, presentations, graphics, databases and more.
Multiple vulnerabilities have been found in both LibreOffice and OpenOffice. Please review the referenced CVE’s for specific information regarding each.
Remote attackers could obtain sensitive information, cause a Denial of Service condition, or execute arbitrary code.
There is no known work around at this time.
All LibreOffice users should upgrade their respective packages to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-5.1.4.2" # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-debug-5.1.4.2"
All OpenOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/openoffice-bin-4.1.2"
Multiple vulnerabilities have been found in both LibreOffice and OpenOffice allowing remote attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 4.4.2 | >= 4.4.2 |
| app-office/libreoffice-bin | * | < 4.4.2 | >= 4.4.2 |
| app-office/libreoffice-bin-debug | * | < 4.4.2 | >= 4.4.2 |
| app-office/openoffice-bin | * | < 4.1.2 | >= 4.1.2 |
Apache OpenOffice is the leading open-source office software suite for word processing, spreadsheets, presentations, graphics, databases and more.
LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity.
Multiple vulnerabilities were found in both LibreOffice and OpenOffice that allow the remote execution of arbitrary code and potential Denial of Service. These vulnerabilities may be exploited through multiple vectors including crafted documents, link handling, printer setup in ODF document types, DOC file formats, and Calc spreadsheets. Please review the referenced CVE’s for specific information regarding each.
A remote attacker could entice a user to open a specially crafted file using the LibreOffice or OpenOffice suite of software. Execution of these attacks could possibly result in the execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known work around at this time.
All LibreOffice users should upgrade their respective packages to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-4.4.2" # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-4.4.2"# emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-debug-4.4.2"
All OpenOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/openoffice-bin-4.1.2"
Multiple vulnerabilities have been found in OpenOffice and LibreOffice, the worst of which may result in execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 4.2.5.2 | >= 4.2.5.2 |
| app-office/libreoffice-bin | * | < 4.2.5.2 | >= 4.2.5.2 |
| app-office/openoffice | * | <= 3.5.5.3 | — |
| app-office/openoffice-bin | * | < 3.5.5.3 | >= 3.5.5.3 |
OpenOffice is the open source version of StarOffice, a full office productivity suite. LibreOffice is a fork of OpenOffice.
Multiple vulnerabilities have been discovered in OpenOffice and Libreoffice. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted file using OpenOffice, possibly resulting in execution of arbitrary code with the privileges of the process, a Denial of Service condition, execution of arbitrary Python code, authentication bypass, or reading and writing of arbitrary files.
There is no known workaround at this time.
All OpenOffice (binary) users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/openoffice-bin-3.5.5.3"
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-4.2.5.2"
All LibreOffice (binary) users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-4.2.5.2"
We recommend that users unmerge OpenOffice:
# emerge --unmerge "app-office/openoffice"
Multiple vulnerabilities have been found in LibreOffice, allowing remote attackers to execute arbitrary code or cause a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-office/libreoffice | * | < 3.5.5.3 | >= 3.5.5.3 |
| app-office/libreoffice-bin | * | < 3.5.5.3 | >= 3.5.5.3 |
LibreOffice is a full office productivity suite.
Multiple vulnerabilities have been found in LibreOffice:
A remote attacker could entice a user to open a specially crafted document file using LibreOffice, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All LibreOffice users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-3.5.5.3"
All users of the LibreOffice binary package should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/libreoffice-bin-3.5.5.3"