https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:20:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04913 bdu:2024-04913 https://cve.radiocsirt.org/vuln/bdu:2024-04913 https://cve.radiocsirt.org/vuln/bell-cve-2024-5261 <p><strong>Affected:</strong> Alpaquita:23: libreoffice-headless, Alpaquita:stream: libreoffice-headless</p> <p><strong>Affected:</strong> Alpaquita:23: libreoffice-headless, Alpaquita:stream: libreoffice-headless</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-5261 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0518 certfr-2024-avi-0518 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0518 https://cve.radiocsirt.org/vuln/euvd-2026-2941 EUVD-2026-2941 https://cve.radiocsirt.org/vuln/euvd-2026-2941 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5261 <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification</p> <p>LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents.</p> <p>LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers.</p> <p>In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false)</p> <p>In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.</p> <p>This issue affects LibreOffice before version 24.2.4.</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification</p> <p>LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents.</p> <p>LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers.</p> <p>In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false)</p> <p>In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.</p> <p>This issue affects LibreOffice before version 24.2.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5261 https://cve.radiocsirt.org/vuln/ghsa-rvcj-9xfm-m9hr <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification</p> <p>LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents.</p> <p>LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers.</p> <p>In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false)</p> <p>In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.</p> <p>This issue affects LibreOffice before version 24.2.4.</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification</p> <p>LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents.</p> <p>LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers.</p> <p>In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false)</p> <p>In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.</p> <p>This issue affects LibreOffice before version 24.2.4.</p> https://cve.radiocsirt.org/vuln/ghsa-rvcj-9xfm-m9hr https://cve.radiocsirt.org/vuln/opensuse-su-2024:14186-1 <p>libreoffice-24.2.5.2-1.1 on GA media</p> <p>libreoffice-24.2.5.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14186-1 https://cve.radiocsirt.org/vuln/suse-su-2024:3576-1 <p>Security update for libreoffice</p> <p>Security update for libreoffice</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3576-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5261 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libreoffice</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents. LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers. In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false) In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true. This issue affects LibreOffice before version 24.2.4.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libreoffice</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents. LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers. In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false) In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true. This issue affects LibreOffice before version 24.2.4.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5261 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1446 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1446