libreoffice version upgrade with Alfresco 7.4.0

[ysumity]

We have Alfresco 7.4.0 which has LibreOffice 7.2 which has libcurl.so.4 version 7.79.1.

I need to update libcurl version to 8.4.0 as  7.79.1 has some vulnerabilities.

As far as i have checked online to upgrade libcurl i need to upgrade LibreOffice which has libcurl version 8.4.0.

I wanted to know if someone has faced same issue and done this before?

Is there any dependency of Alfresco 7.4.0 with LibreOffice version?

[AlfrescoZZZ]

If we are talking about the community version of alfresco 7.4 and we are in a docker/docker-compose environment, the only solution I can propose at the moment is to download the project https://github.com/Alfresco/alfresco-transform-core/ and update the java Libreoffice library and related linux tools, and replace the tranformer-aio container with the one compiled from you.

If you feel there is a security issue you can try opening an issue on the gihub project, usually security issues tend to be resolved.

[ysumity]

We are not using docker compose, we have used install with zip option.
https://docs.alfresco.com/content-services/community/install/zip/

[AlfrescoZZZ]

No tested then, but same concept download the project https://github.com/Alfresco/alfresco-transform-core/ and update the java Libreoffice library and related linux tools, and replace the tranformer-aio on the community zip

[ysumity]

Can you help me with LibreOffice related configurations. What i am thinking that i will be keeping latest version of Libre office in separate folder and switch the configurations and test it.