LibreOffice Security Backgrounder

Today we are announcing the first release of a very important document that describes – in language accessible to everyone, including non-security specialists – the impressive work done by developers and quality assurance specialists in the area of LibreOffice security.

From now on, the LibreOffice Security Backgrounder will be updated on the occasion of each major release of LibreOffice, i.e. in February and August each year (as things stand). For this reason, the full name of this document is LibreOffice Security Backgrounder 2023.12.

It is important to stress that the purpose of this document is purely informational, to clarify aspects and steps in the development process that have not been sufficiently documented in the past. Software security is a fundamental aspect, but not a competitive advantage.

The security of LibreOffice and the documents it generates is very important to all of us, and especially to the users of the suite, which is why there are dozens of people with advanced computer security skills who dedicate their time to protecting and improving it.

We hope that this document, which has been produced with the help of a number of companies and individuals, some of whom are mentioned in the document itself, will help to improve knowledge of the security processes involved in the development of free and open source software.

tdf-libreofficesecurity

 

Download LibreOffice Security Backgrounder 2023.12

 

LibreOffice 7.6.4 and LibreOffice 7.5.9 available for download

Berlin, December 7, 2023 – LibreOffice 7.6.4 Community and LibreOffice 7.5.9 Community are immediately available from www.libreoffice.org/download for Windows (Intel/AMD/ARM processors), macOS (Apple Silicon and Intel processors), and Linux [1].

LibreOffice 7.6.4 Community is the most advanced version of the office suite, and offers the best in terms of productivity functions and interoperability with Microsoft Office proprietary formats.

LibreOffice 7.5.9 Community is the most thoroughly tested version of the suite, for productivity applications in the enterprise environment, but has now reached the end of its life, so users are invited to plan the upgrade to LibreOffice 7.6.4 Community, which has also been tested and sought after enough for production environments.

For enterprise-class deployments, TDF strongly recommends the LibreOffice Enterprise family of applications from ecosystem partners – for desktop, mobile and cloud – with a large number of dedicated value-added features and other benefits such as SLA (Service Level Agreements): www.libreoffice.org/download/libreoffice-in-business/.

Availability of LibreOffice 7.6.4 and LibreOffice 7.5.9

LibreOffice 7.6.4 Community and LibreOffice 7.5.9 Community are available from www.libreoffice.org/download/. Minimum requirements are Microsoft Windows 7 SP1 and Apple macOS 10.14. LibreOffice Technology-based products for Android and iOS are listed here: www.libreoffice.org/download/android-and-ios/

The Document Foundation does not provide technical support for users, although they can be helped by volunteers on user mailing lists and on the Ask LibreOffice website: ask.libreoffice.org

LibreOffice users, free software advocates and community members can support The Document Foundation with a donation at www.libreoffice.org/donate

[1] Change log pages: wiki.documentfoundation.org/Releases/7.6.4/RC1 and wiki.documentfoundation.org/Releases/7.5.9/RC1

Announcement of LibreOffice 7.6.3 Community and LibreOffice Viewer app for Android in the Google Play Store

Android logoBerlin, November 23, 2023 – LibreOffice 7.6.3 Community, the third minor release of the 7.6 family of the volunteer-supported free office suite for Windows (Intel/AMD and ARM processors), macOS (Apple and Intel processors) and Linux is now available from our download page.

At the same time, the LibreOffice Viewer app for Android is back in the Google Play Store, to view documents based on the standard Open Document Format and the proprietary Microsoft Office format. It joins the F-Droid version which has been available for some time.

LibreOffice is the only open source office suite for personal productivity which can be compared feature-by-feature with the market leader. LibreOffice offers the highest level of compatibility in the office suite market segment, with native support for the Open Document Format (ODF) – beating proprietary formats for security and robustness – to superior support for Microsoft Office files, along with filters for a large number of legacy document formats, to return ownership and control to users.

Based on the advanced features of the LibreOffice Technology platform for personal productivity on desktop, mobile and cloud, LibreOffice provides a large number of new features targeted at users sharing documents with or migrating from Microsoft Office to ensure their digital independence from the commercial strategy of vendors. These users should check new releases of LibreOffice on a regular basis, as the progress is so fast, that each new version improves dramatically over the previous one.

LibreOffice for Enterprises

For enterprise-class deployments, TDF strongly recommends the LibreOffice Enterprise family of applications from ecosystem partners – for desktop, mobile and cloud – with a number of value-added features and benefits such as SLA (Service Level Agreements): see this page.

Every line of code developed by ecosystem companies for their enterprise customers is shared with the community on the master code repository, and improves the LibreOffice Technology platform.

The Document Foundation has developed a Migration Protocol to support enterprises moving from proprietary office suites to LibreOffice, which is based on the adoption of an enterprise optimized version of LibreOffice, plus migration consultancy and training sourced from certified professionals who offer value-added solutions and services to match proprietary offerings: www.libreoffice.org/get-help/professional-support/.

Indeed, LibreOffice – thanks to its mature codebase, rich feature set, strong support for open standards, excellent compatibility and LTS options from certified partners – is the ideal solution for businesses that want to regain control of their digital independence, and free themselves from vendor lock-in.

Availability of LibreOffice 7.6.3 Community

LibreOffice 7.6.3 Community is available from: our download page. Minimum requirements for proprietary operating systems are Microsoft Windows 7 SP1 and Apple macOS 10.15. LibreOffice Technology-based products for Android and iOS are listed here: www.libreoffice.org/download/android-and-ios/.

For users who don’t need the latest features, and prefer a version that has undergone more testing and bug fixing, The Document Foundation maintains the LibreOffice 7.5 family, which includes several months of back-ported fixes. The current version is LibreOffice 7.5.8 Community.

The Document Foundation does not provide technical support for users, although they can get it from volunteers on user mailing lists and the Ask LibreOffice website: ask.libreoffice.org

LibreOffice users, free software advocates and community members can support The Document Foundation with a donation on this page.

LibreOffice 7.5.8 Community available for download

Berlin, November 2, 2023 – LibreOffice 7.5.8 Community, the last minor release of the LibreOffice 7.5 line, the volunteer-supported free office suite for desktop productivity, is available from https://www.libreoffice.org/download for Windows (Intel/AMD and ARM processors), macOS (Apple Silicon and Intel processors), and Linux [1].

With this release, the LibreOffice 7.5 line is reaching the end of its life, so users should plan the update to LibreOffice 7.6 as soon as the next minor update LibreOffice 7.6.3 will be released in mid November. At that time, LibreOffice 7.6 will have been tested and sought after enough to be ready for all production environments.

For enterprise-class deployments, TDF strongly recommends the LibreOffice Enterprise family of applications from ecosystem partners – for desktop, mobile and cloud – with a large number of dedicated value-added features and other benefits such as SLA (Service Level Agreements): https://www.libreoffice.org/download/libreoffice-in-business/

Availability of LibreOffice 7.5.8 Community

LibreOffice 7.5.8 Community is available from: https://www.libreoffice.org/download/. Minimum requirements for proprietary operating systems are Microsoft Windows 7 SP1 and Apple macOS 10.14. LibreOffice Technology-based products for Android and iOS are listed here: https://www.libreoffice.org/download/android-and-ios/

The Document Foundation does not provide technical support for users, although they can be helped by volunteers on user mailing lists and on the Ask LibreOffice website: https://ask.libreoffice.org

LibreOffice users, free software advocates and community members can support The Document Foundation with a donation at https://www.libreoffice.org/donate

[1] Change log pages: https://wiki.documentfoundation.org/Releases/7.5.8/RC1 and https://wiki.documentfoundation.org/Releases/7.5.8/RC2

Important release of LibreOffice 7.6.2 Community and LibreOffice 7.5.7 Community with key security fix

A drawing of a generic "bug" with four colours on its back: red, green, blue, yellow.Berlin, 26 September 2023 – The Document Foundation is releasing LibreOffice 7.6.2 Community and LibreOffice 7.5.7 Community ahead of schedule to address a security issue known as CVE 2023-4863, which originates in a widely used code library known as libwebp, created by Google more than a decade ago to render the then-new WebP graphics format [1].

In addition to the CVE, the two new versions fix other bugs and regressions and are available immediately from www.libreoffice.org/download [2]. All users of LibreOffice are encouraged to update their current version as soon as possible.

The minimum requirements for proprietary operating systems are Microsoft Windows 7 SP1 and Apple MacOS 10.15.

For enterprise-class deployments, TDF strongly recommends the LibreOffice Enterprise family of applications from ecosystem partners – for desktop, mobile and cloud – with a wide range of dedicated value-added features and other benefits such as SLAs: www.libreoffice.org/download/libreoffice-in-business/.

The Document Foundation does not provide technical support to users, although it is available from volunteers on user mailing lists and the Ask LibreOffice website: ask.libreoffice.org.

LibreOffice users, free software advocates and community members can support the Document Foundation by making a donation at www.libreoffice.org/donate.

[1] Details of CVE 2023-4863: nvd.nist.gov/vuln/detail/CVE-2023-4863. Bugzilla: bugs.documentfoundation.org/show_bug.cgi?id=157231.

[2] Change logs for LibreOffice 7.6.2 Community: wiki.documentfoundation.org/Releases/7.6.2/RC1 and LibreOffice 7.5.7 Community: wiki.documentfoundation.org/Releases/7.5.7/RC1.