[ GLSA 201706-28 ] LibreOffice

[GLSA]

Gentoo Linux Security Advisory

Title: LibreOffice: Multiple vulnerabilities (GLSA 201706-28)
Severity: normal
Exploitable: remote
Date: 2017-06-27
Bug(s): #616472
ID: 201706-28

Synopsis

Multiple vulnerabilities have been found in LibreOffice, the worst
of which allows for the remote execution of arbitrary code.


Background

LibreOffice is a powerful office suite; its clean interface and powerful
tools let you unleash your creativity and grow your productivity.


Affected Packages

Package: app-office/libreoffice
Vulnerable: < 5.2.7.2
Unaffected: >= 5.2.7.2
Architectures: All supported architectures

Package: app-office/libreoffice-bin
Vulnerable: < 5.2.7.2
Unaffected: >= 5.2.7.2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in LibreOffice. Please
review the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to open a specially crafted file
using LibreOffice, possibly resulting in execution of arbitrary code with
the privileges of the process or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All LibreOffice users should upgrade to the latest version: