Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 876869 (CVE-2022-3140) - <app-office/libreoffice-7.3.6.2 <app-office/libreoffice-bin-7.3.6.2: arbitrary script execution via crafted link
Summary: <app-office/libreoffice-7.3.6.2 <app-office/libreoffice-bin-7.3.6.2: arbitrar...
Status: RESOLVED FIXED
Alias: CVE-2022-3140
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal major
Assignee: Gentoo Security
URL: https://www.libreoffice.org/about-us/...
Whiteboard: A2 [glsa+]
Keywords: PullRequest
Depends on: 873469 876875
Blocks:
  Show dependency tree
 
Reported: 2022-10-12 15:05 UTC by John Helmert III
Modified: 2022-12-19 02:31 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-10-12 15:05:34 UTC
CVE-2022-3140:

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6.

Please cleanup.
Comment 1 Larry the Git Cow gentoo-dev 2022-10-12 18:22:32 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4a4787e7f0c1006fe08cbd67d5a3d484b2b25f78

commit 4a4787e7f0c1006fe08cbd67d5a3d484b2b25f78
Author:     Andreas Sturmlechner <asturm@gentoo.org>
AuthorDate: 2022-10-12 17:57:22 +0000
Commit:     Andreas Sturmlechner <asturm@gentoo.org>
CommitDate: 2022-10-12 18:22:16 +0000

    app-office/libreoffice: unkeyword 7.3.4.2-r1
    
    Bug: https://bugs.gentoo.org/876869
    Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>

 app-office/libreoffice/libreoffice-7.3.4.2-r1.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-10-13 01:57:03 UTC
Thanks, I always forget to add -bin to LO summaries..
Comment 3 Larry the Git Cow gentoo-dev 2022-11-02 08:37:15 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7416889d174e561a98c2ea5a7a2a47f5c96b5bdc

commit 7416889d174e561a98c2ea5a7a2a47f5c96b5bdc
Author:     Andreas Sturmlechner <asturm@gentoo.org>
AuthorDate: 2022-11-02 07:53:00 +0000
Commit:     Andreas Sturmlechner <asturm@gentoo.org>
CommitDate: 2022-11-02 08:36:59 +0000

    app-office/libreoffice-bin: 7.3.4.2 security cleanup
    
    Bug: https://bugs.gentoo.org/876869
    Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>

 app-office/libreoffice-bin/Manifest                |   9 -
 .../libreoffice-bin/libreoffice-bin-7.3.4.2.ebuild | 257 ---------------------
 2 files changed, 266 deletions(-)
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-11-03 07:27:37 UTC
Please cleanup, thanks!
Comment 5 Larry the Git Cow gentoo-dev 2022-11-03 08:40:43 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=26ce497268a98584860d7908496b73c85cbb40fa

commit 26ce497268a98584860d7908496b73c85cbb40fa
Author:     Andreas Sturmlechner <asturm@gentoo.org>
AuthorDate: 2022-11-03 08:36:22 +0000
Commit:     Andreas Sturmlechner <asturm@gentoo.org>
CommitDate: 2022-11-03 08:39:42 +0000

    app-office/libreoffice: cleanup vulnerable 7.3.4.2-r1
    
    Bug: https://bugs.gentoo.org/876869
    Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>

 app-office/libreoffice/Manifest                    |   3 -
 ...Add-missing-nSize-set-for-Poppler-22.04.0.patch |  31 -
 ...t-FreeBSD-patch-for-Poppler-22.04.0-build.patch |  78 ---
 .../libreoffice/libreoffice-7.3.4.2-r1.ebuild      | 665 ---------------------
 4 files changed, 777 deletions(-)
Comment 6 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-11-22 18:19:30 UTC
GLSA request filed
Comment 7 Larry the Git Cow gentoo-dev 2022-12-19 02:05:27 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=d266b4cc9f82b89875aad5caa0ee17368cbcdebf

commit d266b4cc9f82b89875aad5caa0ee17368cbcdebf
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2022-12-19 02:01:40 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2022-12-19 02:04:28 +0000

    [ GLSA 202212-04 ] LibreOffice: Arbitrary Code Execution
    
    Bug: https://bugs.gentoo.org/876869
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 glsa-202212-04.xml | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 53 insertions(+)
Comment 8 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-12-19 02:31:38 UTC
GLSA released, all done.