The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3915 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3915-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     October 12, 2024                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libreoffice     Version        : 1:7.0.4-4+deb11u11     CVE ID         : CVE-2024-7788

    Various file formats are based on the zip file format. In cases of     corruption of the underlying zip's central directory,     LibreOffice offers a repair mode which will attempt to     recover the zip file structure by scanning for secondary local     file headers in the zip to reconstruct the document.

    Prior to this fix, in the case of digitally signed zip files,     an attacker could construct a document which, when repaired,     reported a signature status not valid for the recovered file.

    Previously if verification failed the user could choose     to ignore the failure and enable the macros anyway.

    Repair document mode has to be inherently tolerant,     so now in fixed versions all signatures are implied to     be invalid in recovery mode.

    For Debian 11 bullseye, this problem has been fixed in version     1:7.0.4-4+deb11u11.

    We recommend that you upgrade your libreoffice packages.

    For the detailed security status of libreoffice please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libreoffice

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3915 : fonts-opensymbol - security update

high Nessus Plugin ID 208783

Version 1.1