*** This bug is a duplicate of bug 1748999 *** https://bugs.launchpad.net/bugs/1748999
Worth to add: LibreOffice through 6.0.1 allows remote attackers to SEND arbitrary files to arbitrary servers via =WEBSERVICE calls in a document! Tested on Ubuntu 16.04 LTS with LibreOffice Calc version 5.1.6.2 (packet 1:5.1.6~rc2-0ubuntu1~xenial2 from main/xenial-security). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1748889 Title: [CVE-2018-6871] LibreOffice allows remote attackers to read arbitrary files To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1748889/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs