{"affected":[{"ecosystem_specific":{"binaries":[{"libreoffice":"6.0.4.2-43.33.1","libreoffice-base":"6.0.4.2-43.33.1","libreoffice-base-drivers-mysql":"6.0.4.2-43.33.1","libreoffice-base-drivers-postgresql":"6.0.4.2-43.33.1","libreoffice-branding-upstream":"6.0.4.2-43.33.1","libreoffice-calc":"6.0.4.2-43.33.1","libreoffice-calc-extensions":"6.0.4.2-43.33.1","libreoffice-draw":"6.0.4.2-43.33.1","libreoffice-filters-optional":"6.0.4.2-43.33.1","libreoffice-gnome":"6.0.4.2-43.33.1","libreoffice-gtk2":"6.0.4.2-43.33.1","libreoffice-icon-themes":"6.0.4.2-43.33.1","libreoffice-impress":"6.0.4.2-43.33.1","libreoffice-l10n-af":"6.0.4.2-43.33.1","libreoffice-l10n-ar":"6.0.4.2-43.33.1","libreoffice-l10n-ca":"6.0.4.2-43.33.1","libreoffice-l10n-cs":"6.0.4.2-43.33.1","libreoffice-l10n-da":"6.0.4.2-43.33.1","libreoffice-l10n-de":"6.0.4.2-43.33.1","libreoffice-l10n-en":"6.0.4.2-43.33.1","libreoffice-l10n-es":"6.0.4.2-43.33.1","libreoffice-l10n-fi":"6.0.4.2-43.33.1","libreoffice-l10n-fr":"6.0.4.2-43.33.1","libreoffice-l10n-gu":"6.0.4.2-43.33.1","libreoffice-l10n-hi":"6.0.4.2-43.33.1","libreoffice-l10n-hu":"6.0.4.2-43.33.1","libreoffice-l10n-it":"6.0.4.2-43.33.1","libreoffice-l10n-ja":"6.0.4.2-43.33.1","libreoffice-l10n-ko":"6.0.4.2-43.33.1","libreoffice-l10n-nb":"6.0.4.2-43.33.1","libreoffice-l10n-nl":"6.0.4.2-43.33.1","libreoffice-l10n-nn":"6.0.4.2-43.33.1","libreoffice-l10n-pl":"6.0.4.2-43.33.1","libreoffice-l10n-pt_BR":"6.0.4.2-43.33.1","libreoffice-l10n-pt_PT":"6.0.4.2-43.33.1","libreoffice-l10n-ro":"6.0.4.2-43.33.1","libreoffice-l10n-ru":"6.0.4.2-43.33.1","libreoffice-l10n-sk":"6.0.4.2-43.33.1","libreoffice-l10n-sv":"6.0.4.2-43.33.1","libreoffice-l10n-xh":"6.0.4.2-43.33.1","libreoffice-l10n-zh_CN":"6.0.4.2-43.33.1","libreoffice-l10n-zh_TW":"6.0.4.2-43.33.1","libreoffice-l10n-zu":"6.0.4.2-43.33.1","libreoffice-mailmerge":"6.0.4.2-43.33.1","libreoffice-math":"6.0.4.2-43.33.1","libreoffice-officebean":"6.0.4.2-43.33.1","libreoffice-pyuno":"6.0.4.2-43.33.1","libreoffice-writer":"6.0.4.2-43.33.1","libreoffice-writer-extensions":"6.0.4.2-43.33.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","name":"libreoffice","purl":"pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.0.4.2-43.33.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libreoffice-sdk":"6.0.4.2-43.33.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","name":"libreoffice","purl":"pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.0.4.2-43.33.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libreoffice":"6.0.4.2-43.33.1","libreoffice-base":"6.0.4.2-43.33.1","libreoffice-base-drivers-mysql":"6.0.4.2-43.33.1","libreoffice-base-drivers-postgresql":"6.0.4.2-43.33.1","libreoffice-branding-upstream":"6.0.4.2-43.33.1","libreoffice-calc":"6.0.4.2-43.33.1","libreoffice-calc-extensions":"6.0.4.2-43.33.1","libreoffice-draw":"6.0.4.2-43.33.1","libreoffice-filters-optional":"6.0.4.2-43.33.1","libreoffice-gnome":"6.0.4.2-43.33.1","libreoffice-gtk2":"6.0.4.2-43.33.1","libreoffice-icon-themes":"6.0.4.2-43.33.1","libreoffice-impress":"6.0.4.2-43.33.1","libreoffice-l10n-af":"6.0.4.2-43.33.1","libreoffice-l10n-ar":"6.0.4.2-43.33.1","libreoffice-l10n-bg":"6.0.4.2-43.33.1","libreoffice-l10n-ca":"6.0.4.2-43.33.1","libreoffice-l10n-cs":"6.0.4.2-43.33.1","libreoffice-l10n-da":"6.0.4.2-43.33.1","libreoffice-l10n-de":"6.0.4.2-43.33.1","libreoffice-l10n-en":"6.0.4.2-43.33.1","libreoffice-l10n-es":"6.0.4.2-43.33.1","libreoffice-l10n-fi":"6.0.4.2-43.33.1","libreoffice-l10n-fr":"6.0.4.2-43.33.1","libreoffice-l10n-gu":"6.0.4.2-43.33.1","libreoffice-l10n-hi":"6.0.4.2-43.33.1","libreoffice-l10n-hr":"6.0.4.2-43.33.1","libreoffice-l10n-hu":"6.0.4.2-43.33.1","libreoffice-l10n-it":"6.0.4.2-43.33.1","libreoffice-l10n-ja":"6.0.4.2-43.33.1","libreoffice-l10n-ko":"6.0.4.2-43.33.1","libreoffice-l10n-lt":"6.0.4.2-43.33.1","libreoffice-l10n-nb":"6.0.4.2-43.33.1","libreoffice-l10n-nl":"6.0.4.2-43.33.1","libreoffice-l10n-nn":"6.0.4.2-43.33.1","libreoffice-l10n-pl":"6.0.4.2-43.33.1","libreoffice-l10n-pt_BR":"6.0.4.2-43.33.1","libreoffice-l10n-pt_PT":"6.0.4.2-43.33.1","libreoffice-l10n-ro":"6.0.4.2-43.33.1","libreoffice-l10n-ru":"6.0.4.2-43.33.1","libreoffice-l10n-sk":"6.0.4.2-43.33.1","libreoffice-l10n-sv":"6.0.4.2-43.33.1","libreoffice-l10n-uk":"6.0.4.2-43.33.1","libreoffice-l10n-xh":"6.0.4.2-43.33.1","libreoffice-l10n-zh_CN":"6.0.4.2-43.33.1","libreoffice-l10n-zh_TW":"6.0.4.2-43.33.1","libreoffice-l10n-zu":"6.0.4.2-43.33.1","libreoffice-mailmerge":"6.0.4.2-43.33.1","libreoffice-math":"6.0.4.2-43.33.1","libreoffice-officebean":"6.0.4.2-43.33.1","libreoffice-pyuno":"6.0.4.2-43.33.1","libreoffice-writer":"6.0.4.2-43.33.1","libreoffice-writer-extensions":"6.0.4.2-43.33.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","name":"libreoffice","purl":"pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.0.4.2-43.33.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\n\nThis update for libreoffice to 6.0.4.2 fixes lots of bugs and also the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10120: The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx did not validate a customizations index, which allowed remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record. (bsc#1089706)\n- CVE-2018-10119: sot/source/sdstor/stgstrms.cxx used an incorrect integer data type in the StgSmallStrm class, which allowed remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.  (bsc#1089705)\n\nOther issues fixed:\n\n- DOCX import: missing table background color\n- Bring back offline help per popular demand as lto saves space\n  we could use with it bsc#915996\n\n","id":"SUSE-SU-2018:1296-1","modified":"2018-05-15T13:05:48Z","published":"2018-05-15T13:05:48Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181296-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1089705"},{"type":"REPORT","url":"https://bugzilla.suse.com/1089706"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090737"},{"type":"REPORT","url":"https://bugzilla.suse.com/1091772"},{"type":"REPORT","url":"https://bugzilla.suse.com/915996"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-10119"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-10120"}],"related":["CVE-2018-10119","CVE-2018-10120"],"summary":"Security update for libreoffice","upstream":["CVE-2018-10119","CVE-2018-10120"]}