皆様 TDFのdiscussメーリングリストにて、以下のとおり脆弱性修正についてのお知らせがありました。 # discussにはすでにお知らせしていますが、念のために一番購読者数の多いこのMLにもお知らせします。 LibreOffice 7.0であれば7.0.6へ、7.1であれば7.1.2以降へ、または7.2.0以降にアップグレードする必要があります 詳細は各CVEのページをご覧ください https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25633 https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25634 https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25635 ---------- Forwarded message --------- From: Caolán McNamara <caolanm@redhat.com> Date: 2021年10月11日(月) 21:58 Subject: [tdf-discuss] security related information, CVE-2021-25633, CVE-2021-25634, CVE-2021-25635 To: <discuss@documentfoundation.org> tl:dr upgrade to LibreOffice 7-0 to 7.0.6, libreoffice 7-1 to 7.1.2 (or libreoffice 7.2.0) LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. The Network and Data Security group at Ruhr University Bochum reported a number of flaws with the implementation of this. CVE-2021-25633 Content Manipulation with Double Certificate Attack https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25633 Fixed in 7.0.6 and 7.1.2 CVE-2021-25634 Timestamp Manipulation with Signature Wrapping https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25634 Fixed in 7.0.6 and 7.1.2 CVE-2021-25635 Content Manipulation with Certificate Validation Attack https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25635 Fixed in 7.0.5 and 7.1.1 -- To unsubscribe e-mail to: discuss+unsubscribe@documentfoundation.org Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.documentfoundation.org/www/discuss/ Privacy Policy: https://www.documentfoundation.org/privacy -- Shinji Enoki shinji.enoki@gmail.com -- Unsubscribe instructions: E-mail to users+unsubscribe@ja.libreoffice.org Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette List archive: https://listarchives.libreoffice.org/ja/users/ Privacy Policy: https://www.documentfoundation.org/privacy