Ubuntu alert USN-8340-1 (libreoffice)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8340-1] LibreOffice vulnerability
Date:
             
 
Thu, 28 May 2026 18:32:15 +0000
Message-ID:
             
 
<E1wSfWh-0005R1-JZ@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8340-1
May 28, 2026

libreoffice vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

LibreOffice could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- libreoffice: Office productivity suite

Details:

Duc Anh Nguyen discovered that LibreOffice incorrectly handled mismatched
encryption salt parameters in crafted OOXML documents. An attacker could
use this issue to cause LibreOffice to crash, resulting in a denial of
service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libreoffice                     4:24.2.7-0ubuntu0.24.04.5

Ubuntu 22.04 LTS
  libreoffice                     1:7.3.7-0ubuntu0.22.04.11

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8340-1
  CVE-2026-4430

Package Information:
  https://launchpad.net/ubuntu/+source/libreoffice/4:24.2.7...
  https://launchpad.net/ubuntu/+source/libreoffice/1:7.3.7-...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=83xs
-----END PGP SIGNATURE-----