Serious vulnerability found in webservice function:

github.com/jollheef/libreoffic

impact is that every file to which the user has read access can be silently disclosed to a webserver.

0
0
maddin
Follow

is asking all users today to upgrade to the latest version of for "for improved robustness and security":

blog.documentfoundation.org/bl

I haven't found this issue in the list of fixed bugs yet. Will test tomorrow if this has been fixed.

· Web · 0 · 0

I could validate today that the vulnerability in function 'webservice' has been fixed in version 5.4.5
YOU SHOULD UPGRADE ASAP!

0
0
Mastodon

This page describes the mastodon.social instance - wondering what Mastodon is? Check out joinmastodon.org instead! In essence, Mastodon is a decentralized, open source social network. This is just one part of the network, run by the main developers of the project 🐘 It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!

Hero image by @b_cavello