https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:43:27 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:1766 <p><strong>Affected:</strong> AlmaLinux:8: autocorr-af, AlmaLinux:8: autocorr-bg, AlmaLinux:8: autocorr-ca, AlmaLinux:8: autocorr-cs, AlmaLinux:8: autocorr-da, AlmaLinux:8: autocorr-de, AlmaLinux:8: autocorr-en, AlmaLinux:8: autocorr-es, AlmaLinux:8: autocorr-fa, AlmaLinux:8: autocorr-fi and 161 more</p> <p>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.</p> <p>Security Fix(es):</p> <p>* libreoffice: Content Manipulation with Double Certificate Attack (CVE-2021-25633)</p> <p>* libreoffice: Timestamp Manipulation with Signature Wrapping (CVE-2021-25634)</p> <p>* libreoffice: Content Manipulation with Certificate Validation Attack (CVE-2021-25635)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: autocorr-af, AlmaLinux:8: autocorr-bg, AlmaLinux:8: autocorr-ca, AlmaLinux:8: autocorr-cs, AlmaLinux:8: autocorr-da, AlmaLinux:8: autocorr-de, AlmaLinux:8: autocorr-en, AlmaLinux:8: autocorr-es, AlmaLinux:8: autocorr-fa, AlmaLinux:8: autocorr-fi and 161 more</p> <p>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.</p> <p>Security Fix(es):</p> <p>* libreoffice: Content Manipulation with Double Certificate Attack (CVE-2021-25633)</p> <p>* libreoffice: Timestamp Manipulation with Signature Wrapping (CVE-2021-25634)</p> <p>* libreoffice: Content Manipulation with Certificate Validation Attack (CVE-2021-25635)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:1766 https://cve.radiocsirt.org/vuln/bdu:2022-05923 bdu:2022-05923 https://cve.radiocsirt.org/vuln/bdu:2022-05923 https://cve.radiocsirt.org/vuln/euvd-2026-178684 EUVD-2026-178684 https://cve.radiocsirt.org/vuln/euvd-2026-178684 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25634 <p>LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.</p> <p>LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25634 https://cve.radiocsirt.org/vuln/ghsa-v4mw-2fgp-8j6c <p>LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.</p> <p>LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.</p> https://cve.radiocsirt.org/vuln/ghsa-v4mw-2fgp-8j6c https://cve.radiocsirt.org/vuln/gsd-2021-25634 gsd-2021-25634 https://cve.radiocsirt.org/vuln/gsd-2021-25634 https://cve.radiocsirt.org/vuln/rhsa-2022:1766 <p>libreoffice: Content Manipulation with Double Certificate Attack libreoffice: Timestamp Manipulation with Signature Wrapping libreoffice: Content Manipulation with Certificate Validation Attack</p> <p>libreoffice: Content Manipulation with Double Certificate Attack libreoffice: Timestamp Manipulation with Signature Wrapping libreoffice: Content Manipulation with Certificate Validation Attack</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1766 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-25634 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libreoffice</p> <p>LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libreoffice</p> <p>LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-25634