[USN-6546-1] LibreOffice vulnerabilities

-----BEGIN PGP SIGNATURE-----
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=eqAK
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6546-1
December 11, 2023

libreoffice vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.10
- Ubuntu 23.04

Summary:

Several security issues were fixed in LibreOffice.

Software Description:
- libreoffice: Office productivity suite

Details:

Reginaldo Silva discovered that LibreOffice incorrectly handled filenames
when passing embedded videos to GStreamer. If a user were tricked into
opening a specially crafted file, a remote attacker could possibly use this
issue to execute arbitrary GStreamer plugins. (CVE-2023-6185)

Reginaldo Silva discovered that LibreOffice incorrectly handled certain
non-typical hyperlinks. If a user were tricked into opening a specially
crafted file, a remote attacker could possibly use this issue to execute
arbitrary scripts. (CVE-2023-6186)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
libreoffice 4:7.6.4-0ubuntu0.23.10.1

Ubuntu 23.04:
libreoffice 4:7.5.9-0ubuntu0.23.04.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6546-1
CVE-2023-6185, CVE-2023-6186

Package Information:
https://launchpad.net/ubuntu/+source/libreoffice/4:7.6.4-0ubuntu0.23.10.1
https://launchpad.net/ubuntu/+source/libreoffice/4:7.5.9-0ubuntu0.23.04.1