Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:19:08 +0000 CVE-2024-5261 — TLS certificate are not properly verified when utilizing LibreOfficeKit https://vulnerability.circl.lu/vuln/cve-2024-5261 <p><strong>Affected:</strong> The Document Foundation LibreOffice, libreoffice</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification</p> <p>LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents.</p> <p>LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers.</p> <p>In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false)</p> <p>In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.</p> <p>This issue affects LibreOffice before version 24.2.4.</p> <p><strong>Affected:</strong> The Document Foundation LibreOffice, libreoffice</p> <p>Improper Certificate Validation vulnerability in LibreOffice &#34;LibreOfficeKit&#34; mode disables TLS certification verification</p> <p>LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to convert, view or otherwise interact with documents.</p> <p>LibreOffice internally makes use of &#34;curl&#34; to fetch remote resources such as images hosted on webservers.</p> <p>In affected versions of LibreOffice, when used in LibreOfficeKit mode only, then curl&#39;s TLS certification verification was disabled (CURLOPT_SSL_VERIFYPEER of false)</p> <p>In the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.</p> <p>This issue affects LibreOffice before version 24.2.4.</p> https://vulnerability.circl.lu/vuln/cve-2024-5261