<div dir="ltr"><div><div style="font-family:verdana,sans-serif">Hi All,</div><div style="font-family:verdana,sans-serif"><br></div><div style="font-family:verdana,sans-serif">To protect your system, LibreOffice recommends updating or<br>reinstalling the software without macros or without the LibreLogo<br>component, by following these steps: <br><br>- Open the setup to start the installation<br>- Select "Custom" installation<br>- Expand "Optional Components"<br>- Click on "LibreLogo" and select "This Feature Will Not Be Available"<br>- Click Next and then Install the software<br></div><div><div dir="ltr" class="gmail-m_-7117461960074241988gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><br class="gmail-Apple-interchange-newline"></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>Best,<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div>William Nguyen<br></div><div>Operating Systems Analyst </div><div>College of Engineering, ENG-202A</div><div><span style="font-size:12.8px">San Diego State University</span></div><div><span style="font-size:12.8px">5500 Campanile Drive</span></div><div><span style="font-size:12.8px">San Diego, CA 92182-1326</span></div><div>Tel: 619-594-1166<br></div><div>Fax: 619-594-6005</div><div>E-mail: <a href="mailto:wnguyen@sdsu.edu" target="_blank">wnguyen@sdsu.edu</a></div></div></div></div></div></div></div></div><br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">---------- Forwarded message ---------<br>From: <strong class="gmail_sendername" dir="auto">Ricardo Fitipaldi</strong> <span dir="auto"><<a href="mailto:rfitipal@sdsu.edu">rfitipal@sdsu.edu</a>></span><br>Date: Mon, Jul 29, 2019 at 7:53 AM<br>Subject: Informational, Just Opening a Document in LibreOffice Can Hack Your Computer (Unpatched)<br>To: Christopher Leong <<a href="mailto:cleong@sdsu.edu">cleong@sdsu.edu</a>>, William Nguyen <<a href="mailto:wnguyen@sdsu.edu">wnguyen@sdsu.edu</a>><br></div><br><br><div dir="ltr"><div style="font-family:verdana,sans-serif;font-size:small">FYI,</div><div style="font-family:verdana,sans-serif;font-size:small"><br></div><div style="font-family:verdana,sans-serif;font-size:small">You know of faculty using LibreOffice.</div><div style="font-family:verdana,sans-serif;font-size:small"><br></div><div style="font-family:verdana,sans-serif;font-size:small"><br></div><div style="font-family:verdana,sans-serif;font-size:small">Just Opening a Document in LibreOffice Can Hack Your Computer (Unpatched) <br>
<a href="https://thehackernews.com/2019/07/libreoffice-vulnerability.html" rel="noreferrer" target="_blank">https://thehackernews.com/2019/07/libreoffice-vulnerability.html</a><br>
<br>Earlier this month, LibreOffice released a patch to fix two severe<br>vulnerabilities (CVE-2019-9848 and CVE-2019-9849), but according to<br>security researcher Alex Infuhr, the patch to the former<br>vulnerability can be bypassed, opening LibreOffice up to a severe<br>code execution vulnerability. The vulnerability can be used to sneak<br>malware into your system when you open a malicious document file. <br>
<br>While Ifuhr has not disclosed the details of his patch bypass, he<br>says that it works much in the way the previous critical flaws<br>worked. CVE-2019-9848 resides in LibreLogo, which allows users to<br>specify pre-installed scripts in a document. The flaw allows<br>attackers "to craft a malicious document that can silently execute<br>arbitrary python commands without displaying any waring to a targeted<br>user." <br>
<br>To protect your system, LibreOffice recommends updating or<br>reinstalling the software without macros or without the LibreLogo<br>component, by following these steps: <br>
<br>- Open the setup to start the installation<br>- Select "Custom" installation<br>- Expand "Optional Components"<br>- Click on "LibreLogo" and select "This Feature Will Not Be Available"<br>- Click Next and then Install the software<br>
</div><div><div dir="ltr" class="m_-7117461960074241988gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(0,0,0)"><font size="2"><span style="font-family:verdana,sans-serif"><span style="text-align:center"><br></span></span></font></span></div><div dir="ltr"><span style="color:rgb(0,0,0)"><font size="2"><span style="font-family:verdana,sans-serif"><span style="text-align:center">Sincerely,</span></span></font></span></div><div><span style="color:rgb(0,0,0)"><font size="2"><span style="font-family:verdana,sans-serif"><span style="text-align:center"></span>Ricardo Fitipaldi<br><span style="text-align:center"></span></span></font></span><span style="color:rgb(0,0,0)"><font size="2"><span style="font-family:verdana,sans-serif"><span><span><font size="2"><span style="font-family:verdana,sans-serif"><span style="color:rgb(68,68,68)"><span style="color:rgb(0,0,0)">IT Security Office | </span></span></span></font></span></span>Interim Information Security Officer</span></font></span><br><font size="2"><span style="font-family:verdana,sans-serif"><span style="color:rgb(68,68,68)"><span><span><div><font size="2"><span style="font-family:verdana,sans-serif"><span style="color:rgb(89,89,89)"><font color="#000000"><a style="color:rgb(34,34,34)"><b>San Diego State University </b>| </a><a href="https://www.sdsu.edu/" style="color:rgb(153,0,0)" target="_blank">sdsu.edu</a></font></span></span></font></div></span></span></span></span></font></div><div><font size="2"><span style="font-family:verdana,sans-serif"><span style="color:rgb(68,68,68)"><span style="color:rgb(0,0,0)">(619)-594-0099</span><br></span></span></font></div><div><font size="2"><span style="font-family:verdana,sans-serif"><span style="color:rgb(89,89,89)"><br></span></span></font></div></div></div></div></div></div></div></div></div></div></div></div></div></div></span></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div>