openSUSE 安全性更新:LibreOffice (openSUSE-2016-871)

high Nessus Plugin ID 92310

概要

遠端 openSUSE 主機缺少安全性更新。

說明

LibreOffice 已更新至 5.1.3.2 版,提供許多新功能和錯誤修正。

已修正兩個安全性問題:

- CVE-2016-0795:LibreOffice 會允許遠端攻擊者造成拒絕服務 (記憶體損毀),或可能透過 LotusWordPro (lwp) 文件中特製的 LwpTocSuperLayout 記錄造成其他不明影響。

- CVE-2016-0794:LibreOffice 中的 lwp 篩選器會允許遠端攻擊者造成拒絕服務 (記憶體損毀),或可能透過特製的 LotusWordPro (lwp) 文件造成其他不明影響。

位於 https://wiki.documentfoundation.org/ReleaseNotes/5.1 的文件基礎知識提供此版本中新功能和改善功能的完整清單。

此更新是從 SUSE:SLE-12:Update 專案匯入。

解決方案

更新受影響的 LibreOffice 套件。

另請參閱

https://bugzilla.opensuse.org/show_bug.cgi?id=718113

https://bugzilla.opensuse.org/show_bug.cgi?id=856729

https://bugzilla.opensuse.org/show_bug.cgi?id=939998

https://bugzilla.opensuse.org/show_bug.cgi?id=945443

https://bugzilla.opensuse.org/show_bug.cgi?id=945445

https://bugzilla.opensuse.org/show_bug.cgi?id=955832

https://bugzilla.opensuse.org/show_bug.cgi?id=965294

https://bugzilla.opensuse.org/show_bug.cgi?id=965296

https://bugzilla.opensuse.org/show_bug.cgi?id=967014

https://bugzilla.opensuse.org/show_bug.cgi?id=967015

https://bugzilla.opensuse.org/show_bug.cgi?id=977784

https://features.opensuse.org/

https://wiki.documentfoundation.org/ReleaseNotes/5.1

Plugin 詳細資訊

嚴重性: High

ID: 92310

檔案名稱: openSUSE-2016-871.nasl

版本: 2.5

類型: local

代理程式: unix

已發布: 2016/7/15

已更新: 2021/1/19

支援的感應器: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

風險資訊

VPR

風險因素: Medium

分數: 5.9

CVSS v2

風險因素: High

基本分數: 9.3

媒介: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS v3

風險因素: High

基本分數: 7.8

媒介: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

弱點資訊

CPE: p-cpe:/a:novell:opensuse:cmis-client, p-cpe:/a:novell:opensuse:cmis-client-debuginfo, p-cpe:/a:novell:opensuse:cmis-client-debugsource, p-cpe:/a:novell:opensuse:hunspell, p-cpe:/a:novell:opensuse:hunspell-32bit, p-cpe:/a:novell:opensuse:hunspell-debuginfo, p-cpe:/a:novell:opensuse:hunspell-debuginfo-32bit, p-cpe:/a:novell:opensuse:hunspell-debugsource, p-cpe:/a:novell:opensuse:hunspell-devel, p-cpe:/a:novell:opensuse:hunspell-devel-32bit, p-cpe:/a:novell:opensuse:hunspell-static, p-cpe:/a:novell:opensuse:hunspell-tools, p-cpe:/a:novell:opensuse:hunspell-tools-debuginfo, p-cpe:/a:novell:opensuse:hyphen, p-cpe:/a:novell:opensuse:hyphen-debugsource, p-cpe:/a:novell:opensuse:hyphen-devel, p-cpe:/a:novell:opensuse:libcmis-0_5-5, p-cpe:/a:novell:opensuse:libcmis-0_5-5-debuginfo, p-cpe:/a:novell:opensuse:libcmis-c-0_5-5, p-cpe:/a:novell:opensuse:libcmis-c-0_5-5-debuginfo, p-cpe:/a:novell:opensuse:libcmis-c-devel, p-cpe:/a:novell:opensuse:libcmis-devel, p-cpe:/a:novell:opensuse:libetonyek-0_1-1, p-cpe:/a:novell:opensuse:libetonyek-0_1-1-debuginfo, p-cpe:/a:novell:opensuse:libetonyek-debugsource, p-cpe:/a:novell:opensuse:libetonyek-devel, p-cpe:/a:novell:opensuse:libetonyek-tools, p-cpe:/a:novell:opensuse:libetonyek-tools-debuginfo, p-cpe:/a:novell:opensuse:libhyphen0, p-cpe:/a:novell:opensuse:libhyphen0-32bit, p-cpe:/a:novell:opensuse:libhyphen0-debuginfo, p-cpe:/a:novell:opensuse:libhyphen0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libixion-0_11-0, p-cpe:/a:novell:opensuse:libixion-0_11-0-debuginfo, p-cpe:/a:novell:opensuse:libixion-debugsource, p-cpe:/a:novell:opensuse:libixion-devel, p-cpe:/a:novell:opensuse:libixion-python3, p-cpe:/a:novell:opensuse:libixion-python3-debuginfo, p-cpe:/a:novell:opensuse:libixion-tools, p-cpe:/a:novell:opensuse:libixion-tools-debuginfo, p-cpe:/a:novell:opensuse:liborcus-0_11-0, p-cpe:/a:novell:opensuse:liborcus-0_11-0-debuginfo, p-cpe:/a:novell:opensuse:liborcus-debugsource, p-cpe:/a:novell:opensuse:liborcus-devel, p-cpe:/a:novell:opensuse:liborcus-python3, p-cpe:/a:novell:opensuse:liborcus-python3-debuginfo, p-cpe:/a:novell:opensuse:liborcus-tools, p-cpe:/a:novell:opensuse:liborcus-tools-debuginfo, p-cpe:/a:novell:opensuse:libreoffice, p-cpe:/a:novell:opensuse:libreoffice-base, p-cpe:/a:novell:opensuse:libreoffice-base-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql, p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-branding-upstream, p-cpe:/a:novell:opensuse:libreoffice-calc, p-cpe:/a:novell:opensuse:libreoffice-calc-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-calc-extensions, p-cpe:/a:novell:opensuse:libreoffice-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-debugsource, p-cpe:/a:novell:opensuse:libreoffice-draw, p-cpe:/a:novell:opensuse:libreoffice-draw-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-filters-optional, p-cpe:/a:novell:opensuse:libreoffice-gdb-pretty-printers, p-cpe:/a:novell:opensuse:libreoffice-glade, p-cpe:/a:novell:opensuse:libreoffice-gnome, p-cpe:/a:novell:opensuse:libreoffice-gnome-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-gtk3, p-cpe:/a:novell:opensuse:libreoffice-gtk3-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-breeze, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-galaxy, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-hicontrast, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-oxygen, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-sifr, p-cpe:/a:novell:opensuse:libreoffice-icon-theme-tango, p-cpe:/a:novell:opensuse:libreoffice-impress, p-cpe:/a:novell:opensuse:libreoffice-impress-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-kde4, p-cpe:/a:novell:opensuse:libreoffice-kde4-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-l10n-af, p-cpe:/a:novell:opensuse:libreoffice-l10n-ar, p-cpe:/a:novell:opensuse:libreoffice-l10n-as, p-cpe:/a:novell:opensuse:libreoffice-l10n-bg, p-cpe:/a:novell:opensuse:libreoffice-l10n-bn, p-cpe:/a:novell:opensuse:libreoffice-l10n-br, p-cpe:/a:novell:opensuse:libreoffice-l10n-ca, p-cpe:/a:novell:opensuse:libreoffice-l10n-cs, p-cpe:/a:novell:opensuse:libreoffice-l10n-cy, p-cpe:/a:novell:opensuse:libreoffice-l10n-da, p-cpe:/a:novell:opensuse:libreoffice-l10n-de, p-cpe:/a:novell:opensuse:libreoffice-l10n-dz, p-cpe:/a:novell:opensuse:libreoffice-l10n-el, p-cpe:/a:novell:opensuse:libreoffice-l10n-en, p-cpe:/a:novell:opensuse:libreoffice-l10n-es, p-cpe:/a:novell:opensuse:libreoffice-l10n-et, p-cpe:/a:novell:opensuse:libreoffice-l10n-eu, p-cpe:/a:novell:opensuse:libreoffice-l10n-fa, p-cpe:/a:novell:opensuse:libreoffice-l10n-fi, p-cpe:/a:novell:opensuse:libreoffice-l10n-fr, p-cpe:/a:novell:opensuse:libreoffice-l10n-ga, p-cpe:/a:novell:opensuse:libreoffice-l10n-gl, p-cpe:/a:novell:opensuse:libreoffice-l10n-gu, p-cpe:/a:novell:opensuse:libreoffice-l10n-he, p-cpe:/a:novell:opensuse:libreoffice-l10n-hi, p-cpe:/a:novell:opensuse:libreoffice-l10n-hr, p-cpe:/a:novell:opensuse:libreoffice-l10n-hu, p-cpe:/a:novell:opensuse:libreoffice-l10n-it, p-cpe:/a:novell:opensuse:libreoffice-l10n-ja, p-cpe:/a:novell:opensuse:libreoffice-l10n-kk, p-cpe:/a:novell:opensuse:libreoffice-l10n-kn, p-cpe:/a:novell:opensuse:libreoffice-l10n-ko, p-cpe:/a:novell:opensuse:libreoffice-l10n-lt, p-cpe:/a:novell:opensuse:libreoffice-l10n-lv, p-cpe:/a:novell:opensuse:libreoffice-l10n-mai, p-cpe:/a:novell:opensuse:libreoffice-l10n-ml, p-cpe:/a:novell:opensuse:libreoffice-l10n-mr, p-cpe:/a:novell:opensuse:libreoffice-l10n-nb, p-cpe:/a:novell:opensuse:libreoffice-l10n-nl, p-cpe:/a:novell:opensuse:libreoffice-l10n-nn, p-cpe:/a:novell:opensuse:libreoffice-l10n-nr, p-cpe:/a:novell:opensuse:libreoffice-l10n-nso, p-cpe:/a:novell:opensuse:libreoffice-l10n-or, p-cpe:/a:novell:opensuse:libreoffice-l10n-pa, p-cpe:/a:novell:opensuse:libreoffice-l10n-pl, p-cpe:/a:novell:opensuse:libreoffice-l10n-pt-br, p-cpe:/a:novell:opensuse:libreoffice-l10n-pt-pt, p-cpe:/a:novell:opensuse:libreoffice-l10n-ro, p-cpe:/a:novell:opensuse:libreoffice-l10n-ru, p-cpe:/a:novell:opensuse:libreoffice-l10n-si, p-cpe:/a:novell:opensuse:libreoffice-l10n-sk, p-cpe:/a:novell:opensuse:libreoffice-l10n-sl, p-cpe:/a:novell:opensuse:libreoffice-l10n-sr, p-cpe:/a:novell:opensuse:libreoffice-l10n-ss, p-cpe:/a:novell:opensuse:libreoffice-l10n-st, p-cpe:/a:novell:opensuse:libreoffice-l10n-sv, p-cpe:/a:novell:opensuse:libreoffice-l10n-ta, p-cpe:/a:novell:opensuse:libreoffice-l10n-te, p-cpe:/a:novell:opensuse:libreoffice-l10n-th, p-cpe:/a:novell:opensuse:libreoffice-l10n-tn, p-cpe:/a:novell:opensuse:libreoffice-l10n-tr, p-cpe:/a:novell:opensuse:libreoffice-l10n-ts, p-cpe:/a:novell:opensuse:libreoffice-l10n-uk, p-cpe:/a:novell:opensuse:libreoffice-l10n-ve, p-cpe:/a:novell:opensuse:libreoffice-l10n-xh, p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-hans, p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-hant, p-cpe:/a:novell:opensuse:libreoffice-l10n-zu, p-cpe:/a:novell:opensuse:libreoffice-mailmerge, p-cpe:/a:novell:opensuse:libreoffice-math, p-cpe:/a:novell:opensuse:libreoffice-math-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-officebean, p-cpe:/a:novell:opensuse:libreoffice-officebean-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-pyuno, p-cpe:/a:novell:opensuse:libreoffice-pyuno-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-sdk, p-cpe:/a:novell:opensuse:libreoffice-sdk-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-writer, p-cpe:/a:novell:opensuse:libreoffice-writer-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-writer-extensions, p-cpe:/a:novell:opensuse:libreofficekit, p-cpe:/a:novell:opensuse:libreofficekit-devel, p-cpe:/a:novell:opensuse:libvisio-0_1-1, p-cpe:/a:novell:opensuse:libvisio-0_1-1-debuginfo, p-cpe:/a:novell:opensuse:libvisio-debugsource, p-cpe:/a:novell:opensuse:libvisio-devel, p-cpe:/a:novell:opensuse:libvisio-tools, p-cpe:/a:novell:opensuse:libvisio-tools-debuginfo, p-cpe:/a:novell:opensuse:libwps-0_4-4, p-cpe:/a:novell:opensuse:libwps-0_4-4-debuginfo, p-cpe:/a:novell:opensuse:libwps-debugsource, p-cpe:/a:novell:opensuse:libwps-devel, p-cpe:/a:novell:opensuse:libwps-tools, p-cpe:/a:novell:opensuse:libwps-tools-debuginfo, p-cpe:/a:novell:opensuse:mdds-1_0-devel, p-cpe:/a:novell:opensuse:myspell-af_na, p-cpe:/a:novell:opensuse:myspell-af_za, p-cpe:/a:novell:opensuse:myspell-an, p-cpe:/a:novell:opensuse:myspell-an_es, p-cpe:/a:novell:opensuse:myspell-ar, p-cpe:/a:novell:opensuse:myspell-ar_ae, p-cpe:/a:novell:opensuse:myspell-ar_bh, p-cpe:/a:novell:opensuse:myspell-ar_dz, p-cpe:/a:novell:opensuse:myspell-ar_eg, p-cpe:/a:novell:opensuse:myspell-ar_iq, p-cpe:/a:novell:opensuse:myspell-ar_jo, p-cpe:/a:novell:opensuse:myspell-ar_kw, p-cpe:/a:novell:opensuse:myspell-ar_lb, p-cpe:/a:novell:opensuse:myspell-ar_ly, p-cpe:/a:novell:opensuse:myspell-ar_ma, p-cpe:/a:novell:opensuse:myspell-ar_om, p-cpe:/a:novell:opensuse:myspell-ar_qa, p-cpe:/a:novell:opensuse:myspell-ar_sa, p-cpe:/a:novell:opensuse:myspell-ar_sd, p-cpe:/a:novell:opensuse:myspell-ar_sy, p-cpe:/a:novell:opensuse:myspell-ar_tn, p-cpe:/a:novell:opensuse:myspell-ar_ye, p-cpe:/a:novell:opensuse:myspell-be_by, p-cpe:/a:novell:opensuse:myspell-bg_bg, p-cpe:/a:novell:opensuse:myspell-bn_bd, p-cpe:/a:novell:opensuse:myspell-bn_in, p-cpe:/a:novell:opensuse:myspell-br_fr, p-cpe:/a:novell:opensuse:myspell-bs, p-cpe:/a:novell:opensuse:myspell-bs_ba, p-cpe:/a:novell:opensuse:myspell-ca, p-cpe:/a:novell:opensuse:myspell-ca_ad, p-cpe:/a:novell:opensuse:myspell-ca_es, p-cpe:/a:novell:opensuse:myspell-ca_es_valencia, p-cpe:/a:novell:opensuse:myspell-ca_fr, p-cpe:/a:novell:opensuse:myspell-ca_it, p-cpe:/a:novell:opensuse:myspell-cs_cz, p-cpe:/a:novell:opensuse:myspell-da_dk, p-cpe:/a:novell:opensuse:myspell-de, p-cpe:/a:novell:opensuse:myspell-de_at, p-cpe:/a:novell:opensuse:myspell-de_ch, p-cpe:/a:novell:opensuse:myspell-de_de, p-cpe:/a:novell:opensuse:myspell-dictionaries, p-cpe:/a:novell:opensuse:myspell-el_gr, p-cpe:/a:novell:opensuse:myspell-en, p-cpe:/a:novell:opensuse:myspell-en_au, p-cpe:/a:novell:opensuse:myspell-en_bs, p-cpe:/a:novell:opensuse:myspell-en_bz, p-cpe:/a:novell:opensuse:myspell-en_ca, p-cpe:/a:novell:opensuse:myspell-en_gb, p-cpe:/a:novell:opensuse:myspell-en_gh, p-cpe:/a:novell:opensuse:myspell-en_ie, p-cpe:/a:novell:opensuse:myspell-en_in, p-cpe:/a:novell:opensuse:myspell-en_jm, p-cpe:/a:novell:opensuse:myspell-en_mw, p-cpe:/a:novell:opensuse:myspell-en_na, p-cpe:/a:novell:opensuse:myspell-en_nz, p-cpe:/a:novell:opensuse:myspell-en_ph, p-cpe:/a:novell:opensuse:myspell-en_tt, p-cpe:/a:novell:opensuse:myspell-en_us, p-cpe:/a:novell:opensuse:myspell-en_za, p-cpe:/a:novell:opensuse:myspell-en_zw, p-cpe:/a:novell:opensuse:myspell-es, p-cpe:/a:novell:opensuse:myspell-es_ar, p-cpe:/a:novell:opensuse:myspell-es_bo, p-cpe:/a:novell:opensuse:myspell-es_cl, p-cpe:/a:novell:opensuse:myspell-es_co, p-cpe:/a:novell:opensuse:myspell-es_cr, p-cpe:/a:novell:opensuse:myspell-es_cu, p-cpe:/a:novell:opensuse:myspell-es_do, p-cpe:/a:novell:opensuse:myspell-es_ec, p-cpe:/a:novell:opensuse:myspell-es_es, p-cpe:/a:novell:opensuse:myspell-es_gt, p-cpe:/a:novell:opensuse:myspell-es_hn, p-cpe:/a:novell:opensuse:myspell-es_mx, p-cpe:/a:novell:opensuse:myspell-es_ni, p-cpe:/a:novell:opensuse:myspell-es_pa, p-cpe:/a:novell:opensuse:myspell-es_pe, p-cpe:/a:novell:opensuse:myspell-es_pr, p-cpe:/a:novell:opensuse:myspell-es_py, p-cpe:/a:novell:opensuse:myspell-es_sv, p-cpe:/a:novell:opensuse:myspell-es_uy, p-cpe:/a:novell:opensuse:myspell-es_ve, p-cpe:/a:novell:opensuse:myspell-et_ee, p-cpe:/a:novell:opensuse:myspell-fr_be, p-cpe:/a:novell:opensuse:myspell-fr_ca, p-cpe:/a:novell:opensuse:myspell-fr_ch, p-cpe:/a:novell:opensuse:myspell-fr_fr, p-cpe:/a:novell:opensuse:myspell-fr_lu, p-cpe:/a:novell:opensuse:myspell-fr_mc, p-cpe:/a:novell:opensuse:myspell-gd_gb, p-cpe:/a:novell:opensuse:myspell-gl, p-cpe:/a:novell:opensuse:myspell-gl_es, p-cpe:/a:novell:opensuse:myspell-gu_in, p-cpe:/a:novell:opensuse:myspell-gug, p-cpe:/a:novell:opensuse:myspell-gug_py, p-cpe:/a:novell:opensuse:myspell-he_il, p-cpe:/a:novell:opensuse:myspell-hi_in, p-cpe:/a:novell:opensuse:myspell-hr_hr, p-cpe:/a:novell:opensuse:myspell-hu_hu, p-cpe:/a:novell:opensuse:myspell-is, p-cpe:/a:novell:opensuse:myspell-is_is, p-cpe:/a:novell:opensuse:myspell-it_it, p-cpe:/a:novell:opensuse:myspell-kmr_latn, p-cpe:/a:novell:opensuse:myspell-kmr_latn_sy, p-cpe:/a:novell:opensuse:myspell-kmr_latn_tr, p-cpe:/a:novell:opensuse:myspell-lightproof-en, p-cpe:/a:novell:opensuse:myspell-lightproof-hu_hu, p-cpe:/a:novell:opensuse:myspell-lightproof-pt_br, p-cpe:/a:novell:opensuse:myspell-lightproof-ru_ru, p-cpe:/a:novell:opensuse:myspell-lo_la, p-cpe:/a:novell:opensuse:myspell-lt_lt, p-cpe:/a:novell:opensuse:myspell-lv_lv, p-cpe:/a:novell:opensuse:myspell-nb_no, p-cpe:/a:novell:opensuse:myspell-ne_np, p-cpe:/a:novell:opensuse:myspell-nl_be, p-cpe:/a:novell:opensuse:myspell-nl_nl, p-cpe:/a:novell:opensuse:myspell-nn_no, p-cpe:/a:novell:opensuse:myspell-no, p-cpe:/a:novell:opensuse:myspell-oc_fr, p-cpe:/a:novell:opensuse:myspell-pl_pl, p-cpe:/a:novell:opensuse:myspell-pt_ao, p-cpe:/a:novell:opensuse:myspell-pt_br, p-cpe:/a:novell:opensuse:myspell-pt_pt, p-cpe:/a:novell:opensuse:myspell-ro, p-cpe:/a:novell:opensuse:myspell-ro_ro, p-cpe:/a:novell:opensuse:myspell-ru_ru, p-cpe:/a:novell:opensuse:myspell-si_lk, p-cpe:/a:novell:opensuse:myspell-sk_sk, p-cpe:/a:novell:opensuse:myspell-sl_si, p-cpe:/a:novell:opensuse:myspell-sr, p-cpe:/a:novell:opensuse:myspell-sr_cs, p-cpe:/a:novell:opensuse:myspell-sr_latn_cs, p-cpe:/a:novell:opensuse:myspell-sr_latn_rs, p-cpe:/a:novell:opensuse:myspell-sr_rs, p-cpe:/a:novell:opensuse:myspell-sv_fi, p-cpe:/a:novell:opensuse:myspell-sv_se, p-cpe:/a:novell:opensuse:myspell-sw_tz, p-cpe:/a:novell:opensuse:myspell-te, p-cpe:/a:novell:opensuse:myspell-te_in, p-cpe:/a:novell:opensuse:myspell-th_th, p-cpe:/a:novell:opensuse:myspell-uk_ua, p-cpe:/a:novell:opensuse:myspell-vi, p-cpe:/a:novell:opensuse:myspell-vi_vn, p-cpe:/a:novell:opensuse:myspell-zu_za, cpe:/o:novell:opensuse:42.1

必要的 KB 項目: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

修補程式發佈日期: 2016/7/14

參考資訊

CVE: CVE-2016-0794, CVE-2016-0795