{"id":"SUSE-SU-2022:3602-1","summary":"Security update for libreoffice","details":"This update for libreoffice fixes the following issues:\n\n  \n  Updated to version 7.3.6.2 (jsc#SLE-23448):\n\n  - CVE-2022-3140: Fixed macro URL arbitrary script execution (bsc#1203209).\n  - CVE-2022-26305: Fixed execution of untrusted Macros due to improper certificate validation (bsc#1201868).\n  - CVE-2022-26307: Fixed weak Master Keys in password storage (bsc#1201872).\n\n","modified":"2026-02-04T02:31:14.199701Z","published":"2022-10-17T13:41:16Z","related":["CVE-2022-26305","CVE-2022-26307","CVE-2022-3140"],"upstream":["CVE-2022-26305","CVE-2022-26307","CVE-2022-3140"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223602-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201868"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201872"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203209"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26305"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26307"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3140"}],"affected":[{"package":{"name":"libreoffice","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","purl":"pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.6.2-48.28.1"}]}],"ecosystem_specific":{"binaries":[{"libreoffice-sdk":"7.3.6.2-48.28.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3602-1.json"}},{"package":{"name":"libreoffice","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","purl":"pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.6.2-48.28.1"}]}],"ecosystem_specific":{"binaries":[{"libreoffice-l10n-ar":"7.3.6.2-48.28.1","libreoffice-l10n-gu":"7.3.6.2-48.28.1","libreoffice-l10n-pl":"7.3.6.2-48.28.1","libreoffice-l10n-ru":"7.3.6.2-48.28.1","libreoffice-l10n-xh":"7.3.6.2-48.28.1","libreoffice-l10n-zh_CN":"7.3.6.2-48.28.1","libreoffice-mailmerge":"7.3.6.2-48.28.1","libreoffice-officebean":"7.3.6.2-48.28.1","libreoffice-l10n-ca":"7.3.6.2-48.28.1","libreoffice-l10n-fr":"7.3.6.2-48.28.1","libreoffice-librelogo":"7.3.6.2-48.28.1","libreoffice-writer":"7.3.6.2-48.28.1","libreoffice":"7.3.6.2-48.28.1","libreoffice-branding-upstream":"7.3.6.2-48.28.1","libreoffice-l10n-hr":"7.3.6.2-48.28.1","libreoffice-l10n-ko":"7.3.6.2-48.28.1","libreoffice-l10n-sk":"7.3.6.2-48.28.1","libreoffice-pyuno":"7.3.6.2-48.28.1","libreoffice-writer-extensions":"7.3.6.2-48.28.1","libreoffice-gnome":"7.3.6.2-48.28.1","libreoffice-l10n-en":"7.3.6.2-48.28.1","libreoffice-l10n-nb":"7.3.6.2-48.28.1","libreoffice-l10n-uk":"7.3.6.2-48.28.1","libreoffice-base-drivers-postgresql":"7.3.6.2-48.28.1","libreoffice-gtk3":"7.3.6.2-48.28.1","libreoffice-l10n-es":"7.3.6.2-48.28.1","libreoffice-l10n-fi":"7.3.6.2-48.28.1","libreoffice-l10n-hi":"7.3.6.2-48.28.1","libreoffice-l10n-ja":"7.3.6.2-48.28.1","libreoffice-l10n-zu":"7.3.6.2-48.28.1","libreoffice-filters-optional":"7.3.6.2-48.28.1","libreoffice-icon-themes":"7.3.6.2-48.28.1","libreoffice-l10n-hu":"7.3.6.2-48.28.1","libreoffice-l10n-lt":"7.3.6.2-48.28.1","libreoffice-l10n-pt_BR":"7.3.6.2-48.28.1","libreoffice-l10n-zh_TW":"7.3.6.2-48.28.1","libreoffice-math":"7.3.6.2-48.28.1","libreoffice-calc-extensions":"7.3.6.2-48.28.1","libreoffice-impress":"7.3.6.2-48.28.1","libreoffice-l10n-da":"7.3.6.2-48.28.1","libreoffice-l10n-de":"7.3.6.2-48.28.1","libreoffice-l10n-it":"7.3.6.2-48.28.1","libreoffice-l10n-nl":"7.3.6.2-48.28.1","libreoffice-l10n-pt_PT":"7.3.6.2-48.28.1","libreoffice-l10n-ro":"7.3.6.2-48.28.1","libreoffice-base":"7.3.6.2-48.28.1","libreoffice-calc":"7.3.6.2-48.28.1","libreoffice-draw":"7.3.6.2-48.28.1","libreoffice-l10n-af":"7.3.6.2-48.28.1","libreoffice-l10n-bg":"7.3.6.2-48.28.1","libreoffice-l10n-cs":"7.3.6.2-48.28.1","libreoffice-l10n-nn":"7.3.6.2-48.28.1","libreoffice-l10n-sv":"7.3.6.2-48.28.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3602-1.json"}}],"schema_version":"1.7.3"}