Overview
LibreOffice has released an update to address a vulnerability in their products. Users of affected versions are advised to update to the latest version.
Affected Products
CVE-2024-5261
- LibreOffice versions: ~ 24.2.4 (excluded)
Resolved Vulnerabilities
Improper certificate validation vulnerability due to TLS certificates not being properly validated when using LibreOfficeKit (CVE-2024-5261)
Vulnerability Patches
Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-5261
- LibreOffice version: 24.2.4
Referenced Sites
[1] CVE-2024-5261 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-5261
[2] TLS certificate are not properly verified when utilizing LibreOfficeKit
https://www.libreoffice.org/about-us/security/advisories/cve-2024-5261
Article Link: LibreOffice Security Update Advisory (CVE-2024-5261) – ASEC