Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification
LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents.
LibreOffice internally makes use of "curl" to fetch remote resources such as images hosted on webservers.
In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl's TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false)
In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.
This issue affects LibreOffice before version 24.2.4.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libreoffice | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade libreoffice-l10n-satUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-ca_valenciaUpgrade libreoffice-l10n-svUpgrade libreoffice-branding-upstreamUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-dgoUpgrade libreoffice-qt5Upgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-guUpgrade libreofficekit-develUpgrade libreoffice-l10n-nbUpgrade libreoffice-l10n-etUpgrade libreoffice-mailmergeUpgrade libreoffice-l10n-fiUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-mniUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-gugUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-veUpgrade libreoffice-base-drivers-firebirdUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-kmr_latnUpgrade libreofficekitUpgrade libreoffice-l10n-stUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-nnUpgrade libreoffice-l10n-ltUpgrade libreoffice-l10n-pt_BRUpgrade libreoffice-l10n-hyUpgrade libreoffice-l10n-gdUpgrade libreoffice-drawUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-viUpgrade libreoffice-l10n-sdUpgrade libreofficeUpgrade libreoffice-l10n-rwUpgrade libreoffice-l10n-kaUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-astUpgrade libreoffice-gladeUpgrade libreoffice-l10n-furUpgrade libreoffice-writerUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-isUpgrade libreoffice-l10n-pt_PTUpgrade libreoffice-l10n-kabUpgrade libreoffice-l10n-zuUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-amUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-frUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-brUpgrade libreoffice-l10n-euUpgrade libreoffice-l10n-glUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-siUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-szlUpgrade libreoffice-pyunoUpgrade libreoffice-l10n-dzUpgrade libreoffice-mathUpgrade libreoffice-l10n-zh_TWUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-hsbUpgrade libreoffice-l10n-boUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-ruUpgrade libreoffice-l10n-lvUpgrade libreoffice-l10n-tnUpgrade libreoffice-writer-extensionsUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-kmUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-brxUpgrade libreoffice-l10n-asUpgrade libreoffice-impressUpgrade libreoffice-l10n-vecUpgrade libreoffice-l10n-thUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-l10n-nsoUpgrade libreoffice-l10n-daUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-afUpgrade libreoffice-baseUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-eoUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-uzUpgrade libreoffice-l10n-taUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-paUpgrade libreoffice-filters-optionalUpgrade libreoffice-l10n-nrUpgrade libreoffice-l10n-en_zaUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-zh_CNUpgrade libreoffice-l10n-skUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-sqUpgrade libreoffice-l10n-idUpgrade libreoffice-l10n-hiUpgrade libreoffice-l10n-esUpgrade libreoffice-l10n-bgUpgrade libreoffice-gtk3Upgrade libreoffice-gnomeUpgrade libreoffice-sdk-docUpgrade libreoffice-sdkUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-mrUpgrade libreoffice-calc-extensionsUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-kkUpgrade libreoffice-calcUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-gaUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-omUpgrade libreoffice-l10n-itUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-mnUpgrade libreoffice-l10n-beUpgrade libreoffice-l10n-ar | Oct 11, 2024 | Jun 25, 2024 |
| Ubuntu | — | Upgrade libreoffice | Jul 9, 2024 | Jun 25, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub