Skip to content
OpenAdvisories
Critical USN-6877-1 1 CVE

libreoffice vulnerability

Published Jul 4, 2024 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LibreOffice incorrectly performed TLS certificate
verification when the LibreOfficeKit library is being used by third-party
components. A remote attacker could possibly use this issue to obtain
sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS libreoffice 4:24.2.4-0ubuntu0.24.04.2

Vulnerabilities 1

  • Critical 10.0
    CVE-2024-5261

    TLS certificate are not properly verified when utilizing LibreOfficeKit

    Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to re…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-5261