I have received 12 of these alerts.
I opened opened OO and checked for updates.
It told me that I was on 4.1.16 and when I asked it to update I was told
I was up to date.
So is this message itself a scam?
On 03/11/2026 20:39, Arrigo Marchiori via users wrote:
Severity:
CVSS 4.0: 5.8 (medium)
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P
Affected versions:
- Apache OpenOffice through 4.1.16
Description:
A crafted DXF document causes a heap buffer overflow in Draw in Apache
OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a
corruption of memory areas.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Credit:
Trail of Bits, in collaboration with Anthropic (reporter)
References:
https://openoffice.apache.org/
https://www.cve.org/CVERecord?id=CVE-2026-59267
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
