Most recent entries from all

ALSA-2022:1766 — Moderate: libreoffice security, bug fix, and enhancement update

Affected: AlmaLinux:8: autocorr-af, AlmaLinux:8: autocorr-bg, AlmaLinux:8: autocorr-ca, AlmaLinux:8: autocorr-cs, AlmaLinux:8: autocorr-da, AlmaLinux:8: autocorr-de, AlmaLinux:8: autocorr-en, AlmaLinux:8: autocorr-es, AlmaLinux:8: autocorr-fa, AlmaLinux:8: autocorr-fi and 161 more

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Content Manipulation with Double Certificate Attack (CVE-2021-25633)

* libreoffice: Timestamp Manipulation with Signature Wrapping (CVE-2021-25634)

* libreoffice: Content Manipulation with Certificate Validation Attack (CVE-2021-25635)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-04999

EUVD-2026-224274

fkie_cve-2021-25635

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid (or unknown to LibreOffice) algorithm and LibreOffice would incorrectly present such a signature with an unknown algorithm as a valid signature issued by a trusted person

This issue affects LibreOffice: from 7.0 before 7.0.5, from 7.1 before 7.1.1.

GHSA-r73f-2rxh-prfm

This issue affects LibreOffice: from 7.0 before 7.0.5, from 7.1 before 7.1.1.

gsd-2021-25635

RHSA-2022:1766 — Red Hat Security Advisory: libreoffice security, bug fix, and enhancement update

libreoffice: Content Manipulation with Double Certificate Attack libreoffice: Timestamp Manipulation with Signature Wrapping libreoffice: Content Manipulation with Certificate Validation Attack

Withdrawn: UBUNTU-CVE-2021-25635

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: libreoffice