{"guid":"f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","title":"Improvements in LibreOffice security","subtitle":null,"slug":"clt24-311-improvements-in-libreoffice-security","link":"https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/311","description":"This talk provides an update on recent \u0026 upcoming improvements in LibreOffice, for an even safer operation.\n\nAs an office suite with a lot of functionality, as well as lots of ways to throw 'active content' aka macros at it, LibreOffice, just like its commercial brethren, provides a rather large attack surface.\n\nTo mitigate that, the German Federal Agency for Computer Security (BSI) has published a best practice handbook for secure deployments of LibreOffice, as well as funded a number of additional improvements. This talk will showcase the most important ones, as well as provide suggestions for further development and security-hardened deployments:\n\n* fully automatic background updates under Windows\n* bulk disabling of active content\n* non-overridable admin configurations for all of LibreOffice\n* better password security, including much-improved ODF document encryption\n* disabling and removal of unsafe network protocols\n\nAlongside of the above, the talk will suggest a number of additional best practices - for deploying LibreOffice configured as securely as possible.","original_language":"deu","persons":["Thorsten Behrens"],"tags":["clt24","127","2024","Vortrag"],"view_count":142,"promoted":false,"date":"2024-03-16T09:00:00.000+01:00","release_date":"2024-03-16T00:00:00.000+01:00","updated_at":"2026-04-09T21:30:07.267+02:00","length":3065,"duration":3065,"thumb_url":"https://static.media.ccc.de/media/events/clt/2024/127-f3fb926b-7f4d-5e13-8d14-d2c01a7ad349.jpg","poster_url":"https://static.media.ccc.de/media/events/clt/2024/127-f3fb926b-7f4d-5e13-8d14-d2c01a7ad349_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/clt/2024/127-f3fb926b-7f4d-5e13-8d14-d2c01a7ad349.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/clt/2024/127-f3fb926b-7f4d-5e13-8d14-d2c01a7ad349.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/clt24-311-improvements-in-libreoffice-security","url":"https://api.media.ccc.de/public/events/f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","conference_title":"Chemnitzer Linux-Tage 2024","conference_url":"https://api.media.ccc.de/public/conferences/clt24","related":[],"recordings":[{"size":248,"length":3065,"mime_type":"video/webm","language":"deu","filename":"clt24-127-deu-Improvements_in_LibreOffice_security_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-03-16T15:55:57.755+01:00","recording_url":"https://cdn.media.ccc.de/events/clt/2024/webm-hd/clt24-127-deu-Improvements_in_LibreOffice_security_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/75450","event_url":"https://api.media.ccc.de/public/events/f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","conference_url":"https://api.media.ccc.de/public/conferences/clt24"},{"size":119,"length":3065,"mime_type":"video/webm","language":"deu","filename":"clt24-127-deu-Improvements_in_LibreOffice_security_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-03-16T12:05:11.782+01:00","recording_url":"https://cdn.media.ccc.de/events/clt/2024/webm-sd/clt24-127-deu-Improvements_in_LibreOffice_security_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/75369","event_url":"https://api.media.ccc.de/public/events/f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","conference_url":"https://api.media.ccc.de/public/conferences/clt24"},{"size":97,"length":3065,"mime_type":"video/mp4","language":"deu","filename":"clt24-127-deu-Improvements_in_LibreOffice_security_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-03-16T11:39:17.974+01:00","recording_url":"https://cdn.media.ccc.de/events/clt/2024/h264-sd/clt24-127-deu-Improvements_in_LibreOffice_security_sd.mp4","url":"https://api.media.ccc.de/public/recordings/75366","event_url":"https://api.media.ccc.de/public/events/f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","conference_url":"https://api.media.ccc.de/public/conferences/clt24"},{"size":46,"length":3065,"mime_type":"audio/mpeg","language":"deu","filename":"clt24-127-deu-Improvements_in_LibreOffice_security_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2024-03-16T11:36:04.925+01:00","recording_url":"https://cdn.media.ccc.de/events/clt/2024/mp3/clt24-127-deu-Improvements_in_LibreOffice_security_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/75364","event_url":"https://api.media.ccc.de/public/events/f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","conference_url":"https://api.media.ccc.de/public/conferences/clt24"},{"size":36,"length":3065,"mime_type":"audio/opus","language":"deu","filename":"clt24-127-deu-Improvements_in_LibreOffice_security_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2024-03-16T11:35:48.226+01:00","recording_url":"https://cdn.media.ccc.de/events/clt/2024/opus/clt24-127-deu-Improvements_in_LibreOffice_security_opus.opus","url":"https://api.media.ccc.de/public/recordings/75363","event_url":"https://api.media.ccc.de/public/events/f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","conference_url":"https://api.media.ccc.de/public/conferences/clt24"},{"size":223,"length":3065,"mime_type":"video/mp4","language":"deu","filename":"clt24-127-deu-Improvements_in_LibreOffice_security_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-03-16T11:35:44.954+01:00","recording_url":"https://cdn.media.ccc.de/events/clt/2024/h264-hd/clt24-127-deu-Improvements_in_LibreOffice_security_hd.mp4","url":"https://api.media.ccc.de/public/recordings/75362","event_url":"https://api.media.ccc.de/public/events/f3fb926b-7f4d-5e13-8d14-d2c01a7ad349","conference_url":"https://api.media.ccc.de/public/conferences/clt24"}]}