Ubuntu 24.04 LTS USN-6789-1 Severe: LibreOffice Graphic Binding Threat

ubuntu

May 28, 2024

LibreOffice could be made to run programs when clicking a graphic.

Summary

LibreOffice could be made to run programs when clicking a graphic.

Software Description:

- libreoffice: Office productivity suite

Details:

Amel Bouziane-Leblond discovered that LibreOffice incorrectly handled

graphic on-click bindings. If a user were tricked into clicking a graphic

in a specially crafted document, a remote attacker could possibly run

arbitrary script.

Topics Covered

security advisory software update remote execution ubuntu severe libreoffice graphic issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   libreoffice                     4:24.2.3-0ubuntu0.24.04.2

Ubuntu 23.10
   libreoffice                     4:7.6.7-0ubuntu0.23.10.2

Ubuntu 22.04 LTS
   libreoffice                     1:7.3.7-0ubuntu0.22.04.5

Ubuntu 20.04 LTS
   libreoffice                     1:6.4.7-0ubuntu0.20.04.10

In general, a standard system update will make all the necessary changes.