[USN-6877-1] LibreOffice vulnerability

-----BEGIN PGP SIGNATURE-----
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=EoNy
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6877-1
July 04, 2024

libreoffice vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 23.10

Summary:

LibreOffice could be made to expose sensitive information.

Software Description:
- libreoffice: Office productivity suite

Details:

It was discovered that LibreOffice incorrectly performed TLS certificate
verification when the LibreOfficeKit library is being used by third-party
components. A remote attacker could possibly use this issue to obtain
sensitive information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
libreoffice 4:24.2.4-0ubuntu0.24.04.2

Ubuntu 23.10
libreoffice 4:7.6.7-0ubuntu0.23.10.3

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6877-1
CVE-2024-5261

Package Information:
https://launchpad.net/ubuntu/+source/libreoffice/4:24.2.4-0ubuntu0.24.04.2
https://launchpad.net/ubuntu/+source/libreoffice/4:7.6.7-0ubuntu0.23.10.3