Severity: important Affected versions:
- Apache OpenOffice through 4.1.16 Description: The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user. Users are recommended to upgrade to version 4.1.17, which fixes this issue. Credit: Edoardo Geraci and Thomas Rinsma of Codean Labs (finder) References: https://openoffice.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-90627 --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
