[SECURITY] Fedora 29 Update: libreoffice-6.1.6.3-3.fc29
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-2fe22a3a2c
2019-08-25 03:02:58.349965
--------------------------------------------------------------------------------
Name : libreoffice
Product : Fedora 29
Version : 6.1.6.3
Release : 3.fc29
URL : http://www.libreoffice.org/
Summary : Free Software Productivity Suite
Description :
LibreOffice is an Open Source, community-developed, office productivity suite.
It includes the key desktop applications, such as a word processor,
spreadsheet, presentation manager, formula editor and drawing program, with a
user interface and feature set similar to other office suites. Sophisticated
and flexible, LibreOffice also works transparently with a variety of file
formats, including Microsoft Office File Formats.
--------------------------------------------------------------------------------
Update Information:
* CVE-2019-9850 Insufficient url validation allowing LibreLogo script execution
* CVE-2019-9851 LibreLogo global-event script execution * CVE-2019-9852
Insufficient URL encoding flaw in allowed script location check ---- -
CVE-2019-9848 LibreLogo arbitrary script execution - CVE-2019-9849 remote bullet
graphics retrieved in 'stealth mode'
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 15 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.6.3-3
- CVE-2019-9850 + CVE-2019-9851 + CVE-2019-9852
* Tue Jul 16 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.6.3-2
- CVE-2019-9848 + CVE-2019-9849
* Wed May 8 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.6.3-1
- last stable 6.1.6 release
* Fri Apr 12 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.5.2-5
- Resolves: rhbz#1699347 __glibcxx_requires_subscript-enabled
* Wed Mar 20 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.5.2-4
- Resolves: rhbz#1690645 null deref of GetCurEntry
* Wed Mar 20 2019 Stephan Bergmann <sbergman(a)redhat.com> - 1:6.1.5.2-3
- Resolves: rhbz#1687589 KDE4 gpoll_wrapper can be called with SolarMutex locked
* Tue Feb 19 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.5.2-2
- tdf#121721 speed up gradient drawing
* Thu Feb 7 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.5.2-1
- latest 6.1 release
* Fri Feb 1 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.4.2-2
- Resolves: rhbz#1671340 extended tooltips not working in impress
* Mon Jan 7 2019 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.4.2-1
- latest version
- Resolves: rhbz#1662616 crash in macro dialog editor
- Resolves: rhbz#1662512 a11y freeze in calc
* Tue Dec 4 2018 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.2.1-4
- Resolves: rhbz#1639174 desire to block en-help install
* Fri Nov 9 2018 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.2.1-3
- Related: rhbz#1645905 oom with threaded calculation
* Tue Oct 30 2018 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.2.1-2
- Related: rhbz#1644128 gtk tooltip problems
* Wed Oct 10 2018 Caol��n McNamara <caolanm(a)redhat.com> - 1:6.1.2.1-1
- latest version
- rhbz#1637848 keep Supplements but not Recommends
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-2fe22a3a2c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------