Most recent entries from all

ALSA-2022:7461 — Moderate: libreoffice security update

Affected: AlmaLinux:8: autocorr-af, AlmaLinux:8: autocorr-bg, AlmaLinux:8: autocorr-ca, AlmaLinux:8: autocorr-cs, AlmaLinux:8: autocorr-da, AlmaLinux:8: autocorr-de, AlmaLinux:8: autocorr-en, AlmaLinux:8: autocorr-es, AlmaLinux:8: autocorr-fa, AlmaLinux:8: autocorr-fi and 161 more

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo children (CVE-2021-25636)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-02189

cnvd-2022-55626

EUVD-2026-24825

fkie_cve-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both "X509Data" and "KeyValue" children of the "KeyInfo" tag, which when opened caused LibreOffice to verify using the "KeyValue" but to report verification with the unrelated "X509Data" value. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.5.

GHSA-3cgr-wxhv-h7xw

gsd-2021-25636

openSUSE-SU-2022:0886-1 — Security update for libreoffice

Security update for libreoffice

RHSA-2022:7461 — Red Hat Security Advisory: libreoffice security update

libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo children

SUSE-SU-2022:0886-1 — Security update for libreoffice

Security update for libreoffice

UBUNTU-CVE-2021-25636

Affected: Ubuntu:18.04:LTS: libreoffice, Ubuntu:20.04:LTS: libreoffice

WID-SEC-W-2022-1990 — LibreOffice: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein lokaler Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen.