==========================================================================
Ubuntu Security Notice USN-3210-1
February 23, 2017

LibreOffice vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS

Summary:

LibreOffice could be made to disclose files if it opened a specially crafted
file.

Software Description:
– libreoffice: Office productivity suite

Details:

Ben Hayak discovered that it was possible to make LibreOffice Calc and Writer
disclose arbitrary files to an attacker if a user opened a specially crafted
file with embedded links.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libreoffice                     1:5.1.6~rc2-0ubuntu1~xenial1
  libreoffice-base                1:5.1.6~rc2-0ubuntu1~xenial1
  libreoffice-base-core           1:5.1.6~rc2-0ubuntu1~xenial1
  libreoffice-calc                1:5.1.6~rc2-0ubuntu1~xenial1
  libreoffice-common              1:5.1.6~rc2-0ubuntu1~xenial1
  libreoffice-core                1:5.1.6~rc2-0ubuntu1~xenial1
  libreoffice-math                1:5.1.6~rc2-0ubuntu1~xenial1
  libreoffice-writer              1:5.1.6~rc2-0ubuntu1~xenial1

Ubuntu 14.04 LTS:
  libreoffice                     1:4.2.8-0ubuntu5
  libreoffice-base                1:4.2.8-0ubuntu5
  libreoffice-base-core           1:4.2.8-0ubuntu5
  libreoffice-calc                1:4.2.8-0ubuntu5
  libreoffice-common              1:4.2.8-0ubuntu5
  libreoffice-core                1:4.2.8-0ubuntu5
  libreoffice-math                1:4.2.8-0ubuntu5
  libreoffice-writer              1:4.2.8-0ubuntu5

Ubuntu 12.04 LTS:
  libreoffice                     1:3.5.7-0ubuntu13
  libreoffice-base                1:3.5.7-0ubuntu13
  libreoffice-base-core           1:3.5.7-0ubuntu13
  libreoffice-calc                1:3.5.7-0ubuntu13
  libreoffice-common              1:3.5.7-0ubuntu13
  libreoffice-core                1:3.5.7-0ubuntu13
  libreoffice-math                1:3.5.7-0ubuntu13
  libreoffice-writer              1:3.5.7-0ubuntu13

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-3210-1
  CVE-2017-3157

Package Information:
  https://launchpad.net/ubuntu/+source/libreoffice/1:5.1.6~rc2-0ubuntu1~xenial1
  https://launchpad.net/ubuntu/+source/libreoffice/1:4.2.8-0ubuntu5
  https://launchpad.net/ubuntu/+source/libreoffice/1:3.5.7-0ubuntu13—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=kkH/
—–END PGP SIGNATURE—–
—