{"id":"SUSE-SU-2023:4984-1","summary":"Security update for libreoffice","details":"This update for libreoffice fixes the following issues:\n\n- CVE-2023-6186: Fixed link targets allow arbitrary script execution (bsc#1217578).\n- CVE-2023-6185: Fixed Improper input validation enabling arbitrary Gstreamer pipeline injection (bsc#1217577).\n","modified":"2026-03-11T07:25:35.634695Z","published":"2023-12-28T14:38:44Z","related":["CVE-2023-6185","CVE-2023-6186"],"upstream":["CVE-2023-6185","CVE-2023-6186"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234984-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217577"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217578"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6185"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6186"}],"affected":[{"package":{"name":"libreoffice","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","purl":"pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6.2.1-48.51.4"}]}],"ecosystem_specific":{"binaries":[{"libreoffice-sdk":"7.6.2.1-48.51.4"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4984-1.json"}},{"package":{"name":"libreoffice","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","purl":"pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6.2.1-48.51.4"}]}],"ecosystem_specific":{"binaries":[{"libreoffice-branding-upstream":"7.6.2.1-48.51.4","libreoffice-calc":"7.6.2.1-48.51.4","libreoffice-l10n-af":"7.6.2.1-48.51.4","libreoffice-l10n-hr":"7.6.2.1-48.51.4","libreoffice-l10n-ja":"7.6.2.1-48.51.4","libreoffice-l10n-sk":"7.6.2.1-48.51.4","libreoffice-impress":"7.6.2.1-48.51.4","libreoffice-l10n-ca":"7.6.2.1-48.51.4","libreoffice-l10n-de":"7.6.2.1-48.51.4","libreoffice-l10n-nn":"7.6.2.1-48.51.4","libreoffice-l10n-ro":"7.6.2.1-48.51.4","libreoffice-mailmerge":"7.6.2.1-48.51.4","libreoffice-writer":"7.6.2.1-48.51.4","libreoffice-base":"7.6.2.1-48.51.4","libreoffice-calc-extensions":"7.6.2.1-48.51.4","libreoffice-gtk3":"7.6.2.1-48.51.4","libreoffice-l10n-bg":"7.6.2.1-48.51.4","libreoffice-l10n-cs":"7.6.2.1-48.51.4","libreoffice-l10n-en":"7.6.2.1-48.51.4","libreoffice-l10n-nl":"7.6.2.1-48.51.4","libreoffice-pyuno":"7.6.2.1-48.51.4","libreoffice-base-drivers-postgresql":"7.6.2.1-48.51.4","libreoffice-l10n-es":"7.6.2.1-48.51.4","libreoffice-l10n-it":"7.6.2.1-48.51.4","libreoffice-officebean":"7.6.2.1-48.51.4","libreoffice-writer-extensions":"7.6.2.1-48.51.4","libreoffice-draw":"7.6.2.1-48.51.4","libreoffice-l10n-hi":"7.6.2.1-48.51.4","libreoffice-l10n-nb":"7.6.2.1-48.51.4","libreoffice-l10n-pt_PT":"7.6.2.1-48.51.4","libreoffice-l10n-zh_CN":"7.6.2.1-48.51.4","libreoffice-l10n-zh_TW":"7.6.2.1-48.51.4","libreoffice-math":"7.6.2.1-48.51.4","libreoffice-icon-themes":"7.6.2.1-48.51.4","libreoffice-l10n-ar":"7.6.2.1-48.51.4","libreoffice-l10n-fr":"7.6.2.1-48.51.4","libreoffice-l10n-gu":"7.6.2.1-48.51.4","libreoffice-l10n-hu":"7.6.2.1-48.51.4","libreoffice-l10n-lt":"7.6.2.1-48.51.4","libreoffice-l10n-ru":"7.6.2.1-48.51.4","libreoffice-l10n-xh":"7.6.2.1-48.51.4","libreoffice-gnome":"7.6.2.1-48.51.4","libreoffice-l10n-da":"7.6.2.1-48.51.4","libreoffice-l10n-ko":"7.6.2.1-48.51.4","libreoffice-l10n-pl":"7.6.2.1-48.51.4","libreoffice-l10n-pt_BR":"7.6.2.1-48.51.4","libreoffice-l10n-uk":"7.6.2.1-48.51.4","libreoffice-l10n-zu":"7.6.2.1-48.51.4","libreoffice":"7.6.2.1-48.51.4","libreoffice-filters-optional":"7.6.2.1-48.51.4","libreoffice-l10n-fi":"7.6.2.1-48.51.4","libreoffice-l10n-sv":"7.6.2.1-48.51.4","libreoffice-librelogo":"7.6.2.1-48.51.4"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4984-1.json"}}],"schema_version":"1.7.5"}