The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3577-1 advisory.

    libreoffice was updated to version 24.8.1.2 (jsc#PED-10362):

    - Release notes:

      * https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and
      * https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and
      * https://wiki.documentfoundation.org/Releases/24.8.0/RC3

    - Security issues fixed:

      * CVE-2024-526: Fixed TLS certificates are not properly verified when utilizing LibreOfficeKit     (bsc#1226975)

    - Other bugs fixed:

      * Use system curl instead of the bundled one on systems greater than or equal to SLE15 (bsc#1229589)
      * Use the new clucene function, which makes index files reproducible (bsc#1047218)
      * Support firebird database with new package `libreoffice-base-drivers-firebird` in Package Hub and         openSUSE Leap (bsc#1225597)

    - Update bundled dependencies:

      * Java-Websocket updated from 1.5.4 to 1.5.6
      * boost updated from 1.82.0 to 1.85.0
      * curl updated from 8.7.1 to 8.9.1
      * fontconfig updated from 2.14.2 to 2.15.0
      * freetype updated from 2.13.0 to 2.13.2
      * harfbuzz updated from 8.2.2 to 8.5.0
      * icu4c-data updated from 73.2 to 74.2
      * icu4c-src updated from 73.2 to 74.2
      * libassuan updated from 2.5.7 to 3.0.1
      * libcmis updated from 0.6.1 to 0.6.2
      * libgpg-error updated from 1.48 to 1.50
      * pdfium updated from 6179 to 6425
      * poppler updated from 23.09.0 to 24.08.0
      * tiff updated from 4.6.0 to 4.6.0t

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLED15: libreoffice / libreoffice-base / libreoffice-base-drivers-firebird / etc (SUSE-SU-2024:3577-1)

critical Nessus Plugin ID 208721

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Jun 26, 2026, 4:08 PM CVSS metrics ("Cvssv4 supplemental" set to "CVSS:4.0/U:Clear") Plugin metadata Plugin Feed: 202606261608
Version 1.2 Dec 24, 2025, 7:16 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202512240716
Version 1.1 Oct 11, 2024, 10:59 AM New Plugin Feed: 202410111059