UbuntuUpdates.org

Package "libreoffice-script-provider-js"

Name: libreoffice-script-provider-js

Description:

JavaScript script support provider for LibreOffice scripting framework

Latest version: 1:7.3.7-0ubuntu0.22.04.7
Release: jammy (22.04)
Level: security
Repository: universe
Head package: libreoffice
Homepage: http://www.libreoffice.org

Links


Download "libreoffice-script-provider-js"


Other versions of "libreoffice-script-provider-js" in Jammy

Repository Area Version
base universe 1:7.3.2-0ubuntu2
updates universe 1:7.3.7-0ubuntu0.22.04.7
backports universe 4:24.2.6-0ubuntu0.24.04.1~bpo22.04.1
PPA: LibreOffice 4:24.8.3~rc2-0ubuntu0.22.04.1~lo1

Changelog

Version: 1:7.3.6-0ubuntu0.22.04.2 2022-10-20 15:06:33 UTC

  libreoffice (1:7.3.6-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: arbitrary script execution via Office URI Schemes
    - debian/patches/CVE-2022-3140-4.patch: check impress/calc IFrame
      FrameURL target in xmloff/source/draw/ximpshap.cxx.
    - CVE-2022-3140

 -- Marc Deslauriers <email address hidden> Tue, 18 Oct 2022 07:19:40 -0400

CVE-2022-3140 LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice



About   -   Send Feedback to @ubuntu_updates