{"id":"MGASA-2021-0471","summary":"Updated libreoffice packages fix security vulnerability","details":"LibreOffice supports digital signatures of ODF documents and macros within\ndocuments, presenting visual aids that no alteration of the document\noccurred since the last signing and that the signature is valid.\n\nAn Improper Certificate Validation vulnerability in LibreOffice allowed an\nattacker to self sign an ODF document, with a signature untrusted by the\ntarget, then modify it to change the signature algorithm to an invalid\n(or unknown to LibreOffice) algorithm and LibreOffice would incorrectly\npresent such a signature with an unknown algorithm as a valid signature\nissued by a trusted person.\n\nThis updates to version 7.2.2.2 which includes the fix as well as other\nbugfixes.\n","modified":"2026-04-16T04:42:05.052547479Z","published":"2021-10-12T06:56:11Z","upstream":["CVE-2021-25632","CVE-2021-25633","CVE-2021-25634","CVE-2021-25635"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2021-0471.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=29542"},{"type":"ADVISORY","url":"https://www.libreoffice.org/about-us/security/advisories/cve-2021-25635/"},{"type":"WEB","url":"https://wiki.documentfoundation.org/ReleaseNotes/7.1"},{"type":"WEB","url":"https://wiki.documentfoundation.org/ReleaseNotes/7.2"}],"affected":[{"package":{"name":"libreoffice","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/libreoffice?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.2.2-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0471.json"}},{"package":{"name":"libneon","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/libneon?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.2-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0471.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}