Alma Linux: CVE-2022-26305: Moderate: libreoffice security update (ALSA-2023-0304)
4
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
07/25/2022
01/17/2023
01/16/2023
04/26/2024
Description
An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This is not sufficient to verify that the macro was actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a serial number and an issuer string identical to a trusted certificate which LibreOffice would present as belonging to the trusted author, potentially leading to the user to execute arbitrary code contained in macros improperly trusted. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1.
Solution(s)
- alma-upgrade-autocorr-af
- alma-upgrade-autocorr-bg
- alma-upgrade-autocorr-ca
- alma-upgrade-autocorr-cs
- alma-upgrade-autocorr-da
- alma-upgrade-autocorr-de
- alma-upgrade-autocorr-dsb
- alma-upgrade-autocorr-el
- alma-upgrade-autocorr-en
- alma-upgrade-autocorr-es
- alma-upgrade-autocorr-fa
- alma-upgrade-autocorr-fi
- alma-upgrade-autocorr-fr
- alma-upgrade-autocorr-ga
- alma-upgrade-autocorr-hr
- alma-upgrade-autocorr-hsb
- alma-upgrade-autocorr-hu
- alma-upgrade-autocorr-is
- alma-upgrade-autocorr-it
- alma-upgrade-autocorr-ja
- alma-upgrade-autocorr-ko
- alma-upgrade-autocorr-lb
- alma-upgrade-autocorr-lt
- alma-upgrade-autocorr-mn
- alma-upgrade-autocorr-nl
- alma-upgrade-autocorr-pl
- alma-upgrade-autocorr-pt
- alma-upgrade-autocorr-ro
- alma-upgrade-autocorr-ru
- alma-upgrade-autocorr-sk
- alma-upgrade-autocorr-sl
- alma-upgrade-autocorr-sr
- alma-upgrade-autocorr-sv
- alma-upgrade-autocorr-tr
- alma-upgrade-autocorr-vi
- alma-upgrade-autocorr-vro
- alma-upgrade-autocorr-zh
- alma-upgrade-libreoffice-base
- alma-upgrade-libreoffice-calc
- alma-upgrade-libreoffice-core
- alma-upgrade-libreoffice-data
- alma-upgrade-libreoffice-draw
- alma-upgrade-libreoffice-emailmerge
- alma-upgrade-libreoffice-filters
- alma-upgrade-libreoffice-gdb-debug-support
- alma-upgrade-libreoffice-graphicfilter
- alma-upgrade-libreoffice-gtk3
- alma-upgrade-libreoffice-help-ar
- alma-upgrade-libreoffice-help-bg
- alma-upgrade-libreoffice-help-bn
- alma-upgrade-libreoffice-help-ca
- alma-upgrade-libreoffice-help-cs
- alma-upgrade-libreoffice-help-da
- alma-upgrade-libreoffice-help-de
- alma-upgrade-libreoffice-help-dz
- alma-upgrade-libreoffice-help-el
- alma-upgrade-libreoffice-help-en
- alma-upgrade-libreoffice-help-eo
- alma-upgrade-libreoffice-help-es
- alma-upgrade-libreoffice-help-et
- alma-upgrade-libreoffice-help-eu
- alma-upgrade-libreoffice-help-fi
- alma-upgrade-libreoffice-help-fr
- alma-upgrade-libreoffice-help-gl
- alma-upgrade-libreoffice-help-gu
- alma-upgrade-libreoffice-help-he
- alma-upgrade-libreoffice-help-hi
- alma-upgrade-libreoffice-help-hr
- alma-upgrade-libreoffice-help-hu
- alma-upgrade-libreoffice-help-id
- alma-upgrade-libreoffice-help-it
- alma-upgrade-libreoffice-help-ja
- alma-upgrade-libreoffice-help-ko
- alma-upgrade-libreoffice-help-lt
- alma-upgrade-libreoffice-help-lv
- alma-upgrade-libreoffice-help-nb
- alma-upgrade-libreoffice-help-nl
- alma-upgrade-libreoffice-help-nn
- alma-upgrade-libreoffice-help-pl
- alma-upgrade-libreoffice-help-pt-BR
- alma-upgrade-libreoffice-help-pt-PT
- alma-upgrade-libreoffice-help-ro
- alma-upgrade-libreoffice-help-ru
- alma-upgrade-libreoffice-help-si
- alma-upgrade-libreoffice-help-sk
- alma-upgrade-libreoffice-help-sl
- alma-upgrade-libreoffice-help-sv
- alma-upgrade-libreoffice-help-ta
- alma-upgrade-libreoffice-help-tr
- alma-upgrade-libreoffice-help-uk
- alma-upgrade-libreoffice-help-zh-Hans
- alma-upgrade-libreoffice-help-zh-Hant
- alma-upgrade-libreoffice-impress
- alma-upgrade-libreoffice-langpack-af
- alma-upgrade-libreoffice-langpack-ar
- alma-upgrade-libreoffice-langpack-as
- alma-upgrade-libreoffice-langpack-bg
- alma-upgrade-libreoffice-langpack-bn
- alma-upgrade-libreoffice-langpack-br
- alma-upgrade-libreoffice-langpack-ca
- alma-upgrade-libreoffice-langpack-cs
- alma-upgrade-libreoffice-langpack-cy
- alma-upgrade-libreoffice-langpack-da
- alma-upgrade-libreoffice-langpack-de
- alma-upgrade-libreoffice-langpack-dz
- alma-upgrade-libreoffice-langpack-el
- alma-upgrade-libreoffice-langpack-en
- alma-upgrade-libreoffice-langpack-eo
- alma-upgrade-libreoffice-langpack-es
- alma-upgrade-libreoffice-langpack-et
- alma-upgrade-libreoffice-langpack-eu
- alma-upgrade-libreoffice-langpack-fa
- alma-upgrade-libreoffice-langpack-fi
- alma-upgrade-libreoffice-langpack-fr
- alma-upgrade-libreoffice-langpack-fy
- alma-upgrade-libreoffice-langpack-ga
- alma-upgrade-libreoffice-langpack-gl
- alma-upgrade-libreoffice-langpack-gu
- alma-upgrade-libreoffice-langpack-he
- alma-upgrade-libreoffice-langpack-hi
- alma-upgrade-libreoffice-langpack-hr
- alma-upgrade-libreoffice-langpack-hu
- alma-upgrade-libreoffice-langpack-id
- alma-upgrade-libreoffice-langpack-it
- alma-upgrade-libreoffice-langpack-ja
- alma-upgrade-libreoffice-langpack-kk
- alma-upgrade-libreoffice-langpack-kn
- alma-upgrade-libreoffice-langpack-ko
- alma-upgrade-libreoffice-langpack-lt
- alma-upgrade-libreoffice-langpack-lv
- alma-upgrade-libreoffice-langpack-mai
- alma-upgrade-libreoffice-langpack-ml
- alma-upgrade-libreoffice-langpack-mr
- alma-upgrade-libreoffice-langpack-nb
- alma-upgrade-libreoffice-langpack-nl
- alma-upgrade-libreoffice-langpack-nn
- alma-upgrade-libreoffice-langpack-nr
- alma-upgrade-libreoffice-langpack-nso
- alma-upgrade-libreoffice-langpack-or
- alma-upgrade-libreoffice-langpack-pa
- alma-upgrade-libreoffice-langpack-pl
- alma-upgrade-libreoffice-langpack-pt-BR
- alma-upgrade-libreoffice-langpack-pt-PT
- alma-upgrade-libreoffice-langpack-ro
- alma-upgrade-libreoffice-langpack-ru
- alma-upgrade-libreoffice-langpack-si
- alma-upgrade-libreoffice-langpack-sk
- alma-upgrade-libreoffice-langpack-sl
- alma-upgrade-libreoffice-langpack-sr
- alma-upgrade-libreoffice-langpack-ss
- alma-upgrade-libreoffice-langpack-st
- alma-upgrade-libreoffice-langpack-sv
- alma-upgrade-libreoffice-langpack-ta
- alma-upgrade-libreoffice-langpack-te
- alma-upgrade-libreoffice-langpack-th
- alma-upgrade-libreoffice-langpack-tn
- alma-upgrade-libreoffice-langpack-tr
- alma-upgrade-libreoffice-langpack-ts
- alma-upgrade-libreoffice-langpack-uk
- alma-upgrade-libreoffice-langpack-ve
- alma-upgrade-libreoffice-langpack-xh
- alma-upgrade-libreoffice-langpack-zh-Hans
- alma-upgrade-libreoffice-langpack-zh-Hant
- alma-upgrade-libreoffice-langpack-zu
- alma-upgrade-libreoffice-math
- alma-upgrade-libreoffice-ogltrans
- alma-upgrade-libreoffice-opensymbol-fonts
- alma-upgrade-libreoffice-pdfimport
- alma-upgrade-libreoffice-pyuno
- alma-upgrade-libreoffice-sdk
- alma-upgrade-libreoffice-sdk-doc
- alma-upgrade-libreoffice-ure
- alma-upgrade-libreoffice-ure-common
- alma-upgrade-libreoffice-wiki-publisher
- alma-upgrade-libreoffice-writer
- alma-upgrade-libreoffice-x11
- alma-upgrade-libreoffice-xsltfilter
- alma-upgrade-libreofficekit
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center