File _patchinfo of Package patchinfo.8650

<patchinfo incident="8650">
  <issue tracker="bnc" id="1092699">libreoffice on xfce installation (patterns-xfce-xfce_office?) does not install libreoffice-gtk2/3</issue>
  <issue tracker="bnc" id="1094359">LO Writer: Text in boxes not visible</issue>
  <issue tracker="bnc" id="1091772">[staging] FTBFS: libreoffice fails to build against icu 61.1</issue>
  <issue tracker="bnc" id="1050305">Libreoffice extension 'Language Tool' fails after Tumbleweed update</issue>
  <issue tracker="bnc" id="1088262">Table borders appear black in LibreOffice (while white in PowerPoint)</issue>
  <issue tracker="bnc" id="1096673">File conflict when zypper up: libreoffice-gtk2 conflict with libreoffice-gnome</issue>
  <issue tracker="cve" id="2018-10583"></issue>
  <issue tracker="bnc" id="1091606">VUL-1: CVE-2018-10583: libreoffice: Information disclosure by automatically processing SMB connections embedded in a malicious file</issue>

  <category>security</category>
  <rating>moderate</rating>
  <packager>scarabeus_iv</packager>
  <description>This update for libreoffice to 6.0.5.2 fixes the following issues:

Security issues fixed:

- CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606)

Non security issues fixed:

- Bugfix: Table borders appear black in LibreOffice (while white in PowerPoint) (bsc#1088262)
- Bugfix: LibreOffice extension 'Language Tool' fails after Tumbleweed update (bsc#1050305)
- Bugfix: libreoffice-gnome can no longer be installed in parallel to libreoffice-gtk3 as there
  is a potential file conflict (bsc#1096673)
- Bugfix: LibreOffice Writer: Text in boxes were not visible (bsc#1094359)
- Use libreoffice-gtk3 if xfce is present (bsc#1092699)
- Various other bug fixes

This update was imported fromm the SUSE:SLE-15:Update update project.  
</description>
  <summary>Security update for libreoffice</summary>
</patchinfo>