Bug 1322791

Summary: libreoffice: Leakage of removed background image set in master slide
Product: [Other] Security Response Reporter: Adam Mariš <amaris>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED WONTFIX QA Contact:
Severity: low Docs Contact:
Priority: low    
Version: unspecifiedCC: caolanm, security-response-team, tjackson
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-04-13 08:16:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1326602    
Bug Blocks: 1322793    

Description Adam Mariš 2016-03-31 10:48:45 UTC
It was found that in LibreOffice Impress, the background image set on master slide is present in odp archive even after removal. This allows other users to view pictures set as background that creator has decided not to publish.

Comment 1 Adam Mariš 2016-03-31 10:48:51 UTC
Acknowledgments:

Name: Tim Jackson (Red Hat)

Comment 3 Adam Mariš 2016-04-13 08:14:31 UTC
Created libreoffice tracking bugs for this issue:

Affects: fedora-all [bug 1326602]

Comment 4 Fedora Update System 2016-05-05 14:54:13 UTC
libreoffice-5.0.6.2-3.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.

Comment 5 Fedora Update System 2016-05-07 11:39:34 UTC
libreoffice-5.1.3.1-2.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.