Skip to content
OpenAdvisories
High DLA-4205-1 2 CVEs

libreoffice - security update

Published Jun 1, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 libreoffice 1:7.0.4-4+deb11u13

Vulnerabilities 2

  • High 7.2
    CVE-2025-1080

    Macro URL arbitrary script execution

    LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu
  • Low 2.4
    CVE-2025-2866

    PDF signature forgery with adbe.pkcs7.sha1 SubFilter

    Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid sign…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu