Detections
Analytics

MiracleLinux 7 : libcmis-0.5.1-2.el7, libpagemaker-0.0.3-1.el7, mdds-0.12.1-1.el7, libreoffice-5.0.6.2-3.el7 (AXSA:2016-852:01)

high Nessus Plugin ID 289856

Synopsis

The remote MiracleLinux host is missing one or more security updates.

Description

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-852:01 advisory.

 libcmis LibCMIS is a C client library for working with CM (content management) interfaces. The primary supported interface (which gave the library its name) is CMIS, which allows applications to connect to any ECM behaving as a CMIS server (Alfresco or Nuxeo are examples of open source ones).
 Another supported interface is Google Drive.
 libpagemaker libpagemaker is library providing ability to interpret and import Adobe PageMaker documents into various applications.
 libreoffice LibreOffice is an Open Source, community-developed, office productivity suite.
 It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites. Sophisticated and flexible, LibreOffice also works transparently with a variety of file formats, including Microsoft Office File Formats.
 mdds mdds is a collection of multi-dimensional data structures and indexing algorithms.
 Security issues fixed with this release:
 CVE-2016-0794 The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.
 CVE-2016-0795 LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document.
 The following packages have been upgraded to a newer upstream version: libreoffice (5.0.6.2).
 Additional Changes:
 - The status bar and various sidebar decks have been improved
 - Various toolbars and context menus have been cleaned up or rearranged for better usability.
 - The color selector has been reworked.
 - New templates have been created.
 - Templates now appear directly in the Start Center and can be picked from there.
 - libreoffice now displays an information bar to indicate visibly when a document is being opened in read- only mode.
 - The possibility to embed libreoffice in certain web browsers by using the deprecated NPAPI has been removed.
 - It is possible to connect to SharePoint 2010 and 2013 and OneDrive directly from libreoffice.
 - Support for converting formulas into direct values, Master Document templates, reading Adobe Swatch Exchange color palettes in the .ase format, importing Adobe PageMaker documents, and for exporting digitally signed PDF files.
 - It is now possible to specify references to entire columns or rows using the A:A or 1:1 notation.
 - Interoperability with Microsoft Office document formats has been improved.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://tsn.miraclelinux.com/en/node/7284

Plugin Details

Severity: High

ID: 289856

File Name: miracle_linux_AXSA-2016-852.nasl

Version: 1.1

Type: local

Published: 1/16/2026

Updated: 1/16/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

Vendor

Vendor Severity: Moderate

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2016-0795

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:miracle:linux:libreoffice-langpack-st, p-cpe:/a:miracle:linux:libreoffice-langpack-ko, p-cpe:/a:miracle:linux:autocorr-pl, p-cpe:/a:miracle:linux:libreoffice-ogltrans, p-cpe:/a:miracle:linux:autocorr-sk, p-cpe:/a:miracle:linux:autocorr-hr, p-cpe:/a:miracle:linux:autocorr-lb, p-cpe:/a:miracle:linux:libreoffice-langpack-lv, p-cpe:/a:miracle:linux:libreoffice-langpack-el, p-cpe:/a:miracle:linux:libreoffice-librelogo, p-cpe:/a:miracle:linux:libreoffice-langpack-mr, p-cpe:/a:miracle:linux:libreoffice-writer, p-cpe:/a:miracle:linux:libreoffice-langpack-ta, p-cpe:/a:miracle:linux:libreoffice-langpack-ts, p-cpe:/a:miracle:linux:libreoffice-langpack-th, p-cpe:/a:miracle:linux:libreoffice-emailmerge, p-cpe:/a:miracle:linux:libreoffice-langpack-nso, p-cpe:/a:miracle:linux:libreoffice-langpack-da, p-cpe:/a:miracle:linux:libreoffice-langpack-pt-br, p-cpe:/a:miracle:linux:libreoffice-postgresql, p-cpe:/a:miracle:linux:libreoffice-langpack-si, p-cpe:/a:miracle:linux:autocorr-tr, p-cpe:/a:miracle:linux:libcmis, p-cpe:/a:miracle:linux:libreoffice-pyuno, p-cpe:/a:miracle:linux:libreoffice-sdk, p-cpe:/a:miracle:linux:libreoffice-langpack-af, p-cpe:/a:miracle:linux:libreoffice-pdfimport, p-cpe:/a:miracle:linux:mdds-devel, p-cpe:/a:miracle:linux:libreoffice-langpack-nb, p-cpe:/a:miracle:linux:libreoffice-langpack-lt, p-cpe:/a:miracle:linux:libreoffice-langpack-dz, p-cpe:/a:miracle:linux:libreoffice-langpack-sr, p-cpe:/a:miracle:linux:libreoffice-rhino, p-cpe:/a:miracle:linux:autocorr-fi, p-cpe:/a:miracle:linux:autocorr-cs, p-cpe:/a:miracle:linux:libreoffice-langpack-pt-pt, p-cpe:/a:miracle:linux:libreoffice-langpack-ml, p-cpe:/a:miracle:linux:libpagemaker, p-cpe:/a:miracle:linux:libreoffice-langpack-he, p-cpe:/a:miracle:linux:autocorr-ga, p-cpe:/a:miracle:linux:libreoffice-langpack-zh-hans, p-cpe:/a:miracle:linux:autocorr-en, p-cpe:/a:miracle:linux:libreoffice-langpack-sl, p-cpe:/a:miracle:linux:libreoffice-math, p-cpe:/a:miracle:linux:libreoffice-langpack-gl, p-cpe:/a:miracle:linux:libreoffice-langpack-or, p-cpe:/a:miracle:linux:libreoffice-langpack-es, p-cpe:/a:miracle:linux:autocorr-mn, p-cpe:/a:miracle:linux:libreoffice-langpack-eu, p-cpe:/a:miracle:linux:libreoffice-xsltfilter, p-cpe:/a:miracle:linux:autocorr-hu, p-cpe:/a:miracle:linux:libreoffice-ure, p-cpe:/a:miracle:linux:autocorr-lt, p-cpe:/a:miracle:linux:libreoffice-langpack-tr, p-cpe:/a:miracle:linux:libreoffice-langpack-zh-hant, p-cpe:/a:miracle:linux:libreoffice-langpack-ga, p-cpe:/a:miracle:linux:libreoffice-langpack-en, p-cpe:/a:miracle:linux:libreoffice-langpack-nn, p-cpe:/a:miracle:linux:libreoffice-wiki-publisher, p-cpe:/a:miracle:linux:autocorr-pt, p-cpe:/a:miracle:linux:libreoffice-langpack-ro, p-cpe:/a:miracle:linux:autocorr-da, p-cpe:/a:miracle:linux:libreoffice-calc, p-cpe:/a:miracle:linux:autocorr-ru, p-cpe:/a:miracle:linux:autocorr-is, p-cpe:/a:miracle:linux:libreoffice-glade, p-cpe:/a:miracle:linux:libreoffice-langpack-hr, p-cpe:/a:miracle:linux:libreoffice-langpack-hi, p-cpe:/a:miracle:linux:libreoffice-langpack-ru, p-cpe:/a:miracle:linux:libreoffice-nlpsolver, p-cpe:/a:miracle:linux:autocorr-it, p-cpe:/a:miracle:linux:autocorr-sr, p-cpe:/a:miracle:linux:libreoffice-opensymbol-fonts, p-cpe:/a:miracle:linux:libreoffice-langpack-br, p-cpe:/a:miracle:linux:libreoffice-langpack-pa, p-cpe:/a:miracle:linux:autocorr-fa, p-cpe:/a:miracle:linux:libreoffice-langpack-nr, p-cpe:/a:miracle:linux:libreoffice-langpack-bn, p-cpe:/a:miracle:linux:libreoffice, p-cpe:/a:miracle:linux:autocorr-ro, p-cpe:/a:miracle:linux:libreoffice-langpack-et, p-cpe:/a:miracle:linux:libreoffice-langpack-ja, p-cpe:/a:miracle:linux:libreoffice-langpack-ss, p-cpe:/a:miracle:linux:libreoffice-langpack-cy, cpe:/o:miracle:linux:7, p-cpe:/a:miracle:linux:autocorr-es, p-cpe:/a:miracle:linux:libreoffice-langpack-tn, p-cpe:/a:miracle:linux:libreoffice-langpack-zu, p-cpe:/a:miracle:linux:autocorr-bg, p-cpe:/a:miracle:linux:libreoffice-langpack-as, p-cpe:/a:miracle:linux:libreoffice-langpack-mai, p-cpe:/a:miracle:linux:libreoffice-langpack-fa, p-cpe:/a:miracle:linux:libreoffice-langpack-gu, p-cpe:/a:miracle:linux:autocorr-zh, p-cpe:/a:miracle:linux:autocorr-ca, p-cpe:/a:miracle:linux:autocorr-de, p-cpe:/a:miracle:linux:libreoffice-langpack-it, p-cpe:/a:miracle:linux:autocorr-ko, p-cpe:/a:miracle:linux:libreoffice-impress, p-cpe:/a:miracle:linux:autocorr-fr, p-cpe:/a:miracle:linux:libreoffice-gdb-debug-support, p-cpe:/a:miracle:linux:autocorr-sl, p-cpe:/a:miracle:linux:libreoffice-langpack-te, p-cpe:/a:miracle:linux:libreoffice-core, p-cpe:/a:miracle:linux:autocorr-af, p-cpe:/a:miracle:linux:libreoffice-officebean, p-cpe:/a:miracle:linux:libreoffice-filters, p-cpe:/a:miracle:linux:libreoffice-langpack-ca, p-cpe:/a:miracle:linux:libreoffice-base, p-cpe:/a:miracle:linux:libreoffice-langpack-ar, p-cpe:/a:miracle:linux:autocorr-sv, p-cpe:/a:miracle:linux:libreoffice-langpack-pl, p-cpe:/a:miracle:linux:libreoffice-langpack-xh, p-cpe:/a:miracle:linux:libreoffice-langpack-sv, p-cpe:/a:miracle:linux:libreoffice-langpack-cs, p-cpe:/a:miracle:linux:autocorr-nl, p-cpe:/a:miracle:linux:libreoffice-langpack-sk, p-cpe:/a:miracle:linux:libreoffice-draw, p-cpe:/a:miracle:linux:libreoffice-bsh, p-cpe:/a:miracle:linux:libreoffice-langpack-nl, p-cpe:/a:miracle:linux:libreoffice-langpack-fi, p-cpe:/a:miracle:linux:autocorr-ja, p-cpe:/a:miracle:linux:autocorr-vi, p-cpe:/a:miracle:linux:libreoffice-graphicfilter, p-cpe:/a:miracle:linux:libreoffice-langpack-de, p-cpe:/a:miracle:linux:libreoffice-langpack-kn, p-cpe:/a:miracle:linux:libreoffice-langpack-uk, p-cpe:/a:miracle:linux:libreoffice-langpack-hu, p-cpe:/a:miracle:linux:libreoffice-langpack-kk, p-cpe:/a:miracle:linux:libreoffice-langpack-ve, p-cpe:/a:miracle:linux:libreoffice-sdk-doc, p-cpe:/a:miracle:linux:libreoffice-langpack-bg, p-cpe:/a:miracle:linux:libreoffice-langpack-fr

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/MiracleLinux/release, Host/MiracleLinux/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 11/8/2016

Vulnerability Publication Date: 2/17/2016

Reference Information

CVE: CVE-2016-0794, CVE-2016-0795