https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:28:10 +0000 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5261 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libreoffice</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents. LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers. In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false) In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true. This issue affects LibreOffice before version 24.2.4.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libreoffice</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents. LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers. In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false) In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true. This issue affects LibreOffice before version 24.2.4.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5261