USN-7025-1: LibreOffice vulnerability
19 September 2024
LibreOffice could accept fraudulent digital signatures.
Releases
Packages
- libreoffice - Office productivity suite
Details
It was discovered that LibreOffice would incorrectly handle digital
signature verification after repairing a corrupted document. A remote
attacker could possibly use this issue to forge valid signatures.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
Ubuntu 20.04
In general, a standard system update will make all the necessary changes.