Ubuntu has released important security updates addressing vulnerabilities in both the h11 library and LibreOffice. These updates are crucial for maintaining the integrity and security of systems running Ubuntu 24.10, 24.04 LTS, and older versions.
H11 Vulnerability (USN-7503-1):
Discovered by Jeppe Bonde Weikop, this vulnerability in the python-h11 library can potentially allow a remote attacker to exploit crafted HTTP requests, leading to security control bypass and the exposure of sensitive information. Users are advised to update their systems to the latest package versions to mitigate this issue:
- Ubuntu 24.10: python3-h11 version 0.14.0-1ubuntu0.24.10.1
- Ubuntu 24.04 LTS: python3-h11 version 0.14.0-1ubuntu0.24.04.1
A standard system update will apply these changes.
LibreOffice Vulnerability (USN-7504-1):
This vulnerability, identified by Juraj Šarinay, affects the verification of PDF signatures within LibreOffice. A remote attacker could exploit this flaw to create PDF files that falsely appear to be digitally signed. The affected package versions that need updating include:
- Ubuntu 24.10: libreoffice version 4:24.8.6-0ubuntu0.24.10.2
- Ubuntu 24.04 LTS: libreoffice version 4:24.2.7-0ubuntu0.24.04.4
- Ubuntu 22.04 LTS: libreoffice version 1:7.3.7-0ubuntu0.22.04.10
- Ubuntu 20.04 LTS: libreoffice version 1:6.4.7-0ubuntu0.20.04.15
Again, a standard system update will implement the necessary corrections.
Conclusion:
Users are encouraged to regularly check for and apply security updates to safeguard their systems from potential threats. Keeping software up to date not only protects personal data but also enhances overall system stability and performance. For further details on the vulnerabilities and updates, users can refer to the provided links to the Ubuntu security notices and package information
H11 Vulnerability (USN-7503-1):
Discovered by Jeppe Bonde Weikop, this vulnerability in the python-h11 library can potentially allow a remote attacker to exploit crafted HTTP requests, leading to security control bypass and the exposure of sensitive information. Users are advised to update their systems to the latest package versions to mitigate this issue:
- Ubuntu 24.10: python3-h11 version 0.14.0-1ubuntu0.24.10.1
- Ubuntu 24.04 LTS: python3-h11 version 0.14.0-1ubuntu0.24.04.1
A standard system update will apply these changes.
LibreOffice Vulnerability (USN-7504-1):
This vulnerability, identified by Juraj Šarinay, affects the verification of PDF signatures within LibreOffice. A remote attacker could exploit this flaw to create PDF files that falsely appear to be digitally signed. The affected package versions that need updating include:
- Ubuntu 24.10: libreoffice version 4:24.8.6-0ubuntu0.24.10.2
- Ubuntu 24.04 LTS: libreoffice version 4:24.2.7-0ubuntu0.24.04.4
- Ubuntu 22.04 LTS: libreoffice version 1:7.3.7-0ubuntu0.22.04.10
- Ubuntu 20.04 LTS: libreoffice version 1:6.4.7-0ubuntu0.20.04.15
Again, a standard system update will implement the necessary corrections.
Conclusion:
Users are encouraged to regularly check for and apply security updates to safeguard their systems from potential threats. Keeping software up to date not only protects personal data but also enhances overall system stability and performance. For further details on the vulnerabilities and updates, users can refer to the provided links to the Ubuntu security notices and package information
H11 and LibreOffice updates for Ubuntu
Ubuntu Linux has received updates focused on security enhancements, addressing a h11 vulnerability as well as a vulnerability in LibreOffice:
[USN-7503-1] h11 vulnerability
[USN-7504-1] LibreOffice vulnerability
