The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1766 advisory.

  - LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual     aids that no alteration of the document occurred since the last signing and that the signature is valid.
    An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally     signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly     present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation     LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2. (CVE-2021-25634)

  - LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual     aids that no alteration of the document occurred since the last signing and that the signature is valid.
    An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally     signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the     document to combine multiple certificate data, which when opened caused LibreOffice to display a validly     signed indicator but whose content was unrelated to the signature shown. This issue affects: The Document     Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2. (CVE-2021-25633)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 8 : libreoffice (RLSA-2022:1766)

high Nessus Plugin ID 167826

Version 1.4

Version 1.3

Version 1.2

Version 1.4 Mar 21, 2023, 7:30 PM Plugin metadata Plugin Feed: 202303211930
Version 1.3 Nov 18, 2022, 1:54 PM CVSS metrics CVSSv3 score source (Changed from None to CVE-2021-25634) Plugin Feed: 202211181354
Version 1.2 Nov 18, 2022, 5:50 AM New Plugin Feed: 202211180550