LibreOffice was updated to version 5.3.3.2, bringing new features and enhancements: Writer :

  - New 'Go to Page' dialog for quickly jumping to another     page.

  - Support for 'Table Styles'.

  - New drawing tools were added.

  - Improvements in the toolbar.

  - Borderless padding is displayed. Calc :

  - New drawing tools were added.

  - In new installations the default setting for new     documents is now 'Enable wildcards in formulas' instead     of regular expressions.

  - Improved compatibility with ODF 1.2 Impress :

  - Images inserted via 'Photo Album' can now be linked     instead of embedded in the document.

  - When launching Impress, a Template Selector allows you     to choose a Template to start with.

  - Two new default templates: Vivid and Pencil.

  - All existing templates have been improved. Draw :

  - New arrow endings, including Crow's foot notation's     ones. Base :

  - Firebird has been upgraded to version 3.0.0. It is     unable to read back Firebird 2.5 data, so embedded     Firebird odb files created in LibreOffice version up to     5.2 cannot be opened with LibreOffice 5.3. Some security     issues have also been fixed :

  - CVE-2017-7870: An out-of-bounds write caused by a     heap-based buffer overflow related to the     tools::Polygon::Insert function.

  - CVE-2017-7882: An out-of-bounds write related to the     HWPFile::TagsRead function.

  - CVE-2017-8358: an out-of-bounds write caused by a     heap-based buffer overflow related to the ReadJPEG     function.

  - CVE-2016-10327: An out-of-bounds write caused by a     heap-based buffer overflow related to the     EnhWMFReader::ReadEnhWMF function.

  - CVE-2017-9433: An out-of-bounds write caused by a     heap-based buffer overflow related to the     MsWrd1Parser::readFootnoteCorrespondance function in     libmwaw. A comprehensive list of new features and     changes in this release is available at:
    https://wiki.documentfoundation.org/ReleaseNotes/5.3

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2017:1821-1)

critical Nessus Plugin ID 101353

No changelogs found