LibreOffice could be made to run programs when clicking a graphic.. ========================================================================== Ubuntu Security Notice USN-6789-1 May 28, 2024 libreoffice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: LibreOffice could be made to run programs when clicking a graphic. Software Description: - libreoffice: Office productivity suite Details: Amel Bouziane-Leblond discovered that LibreOffice incorrectly handled graphic on-click bindings. If a user were tricked into clicking a graphic in a specially crafted document, a remote attacker could possibly run arbitrary script. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libreoffice 4:24.2.3-0ubuntu0.24.04.2 Ubuntu 23.10 libreoffice 4:7.6.7-0ubuntu0.23.10.2 Ubuntu 22.04 LTS libreoffice 1:7.3.7-0ubuntu0.22.04.5 Ubuntu 20.04 LTS libreoffice 1:6.4.7-0ubuntu0.20.04.10 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6789-1 CVE-2024-3044 Package Information: https://launchpad.net/ubuntu/+source/libreoffice/4:24.2.3-0ubuntu0.24.04.2 https://launchpad.net/ubuntu/+source/libreoffice/4:7.6.7-0ubuntu0.23.10.2 https://launchpad.net/ubuntu/+source/libreoffice/1:7.3.7-0ubuntu0.22.04.5 https://launchpad.net/ubuntu/+source/libreoffice/1:6.4.7-0ubuntu0.20.04.10 . Ubuntu 9810-2: Critical LibreOffice security patch targeting graphic elements. Ensure your devices are updated to block harmful code execution.. LibreOffice Security Updates, Ubuntu Patch Instructions, Remote Execution Threats, Software VulnerabilityResolution, Graphic Handling Issue. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.