High severity7.8NVD Advisory· Published Oct 7, 2021· Updated Jun 17, 2026
CVE-2021-28129
CVE-2021-28129
Description
While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but instead used a userid and groupid of 500. This both caused issues with desktop integration and could allow a crafted attack on files owned by that user or group if they exist. Users who installed the Apache OpenOffice 4.1.8 DEB packaging should upgrade to the latest version of Apache OpenOffice.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:apache:openoffice:4.1.8:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:openoffice:4.1.8:*:*:*:*:*:*:*
- (no CPE)range: 4.1.8
- (no CPE)range: Apache OpenOffice 4.1.8
Patches
Vulnerability mechanics
References
3- www.openwall.com/lists/oss-security/2021/10/07/5nvdMailing ListThird Party Advisory
- lists.apache.org/thread.html/rc9090ab48b4699494b63b35cd6d7414c52d665ecae12add3cdc56c9b%40%3Cusers.openoffice.apache.org%3EnvdMailing ListVendor Advisory
- lists.apache.org/thread.html/r9e72234dd662280fa1a3cca6164d3470a1dbc0d8e53e48ba27f787ce%40%3Cannounce.apache.org%3Envd
News mentions
0No linked articles in our index yet.