Alibaba Cloud Linux 2.1903 Security Advisory: ALINUX2-SA-2024:0022
Issued: 2024-08-07
Updated: 2024-08-07
Summary
libreoffice security fix update
Severity
Important
Description
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities:
CVE-2023-6185:
Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins.
In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run arbitrary gstreamer plugins depending on what plugins are installed on the target system.
References
Updated Packages