TI-2022-09689 CVE-2022-26307 · GHSA-7p78-g262-f9rp
Weak Master Keys
Priority MEDIUM 41
LibreOffice supports the storage of passwords for web connections in the user’s configuration database.
RHSA-2023:0089
libreoffice security update
Released 2023-01-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libreoffice-sdk-1:6.4.7.2-12.el8_7, libreoffice-sdk-doc-1:6.4.7.2-12.el8_7
- Red Hat Enterprise Linux AppStream (v. 8) autocorr-af-1:6.4.7.2-12.el8_7, autocorr-bg-1:6.4.7.2-12.el8_7, autocorr-ca-1:6.4.7.2-12.el8_7 +47
Fixes 4 records
TI-2022-02899 CVE-2022-3140 · GHSA-6ggr-6xf8-p64w
Macro URL arbitrary script execution
Priority LOW 38
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server.
TI-2022-09688 CVE-2022-26306 · GHSA-v7pr-9gfg-7hpc
Execution of Untrusted Macros Due to Improper Certificate Validation
Priority LOW 35
LibreOffice supports the storage of passwords for web connections in the user’s configuration database.
TI-2022-09687 CVE-2022-26305 · GHSA-fm9c-xcj2-2j5g
Execution of Untrusted Macros Due to Improper Certificate Validation
Priority LOW 35
An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate wi…