Skip to content
OpenAdvisories
Medium RLSA-2022:1766 3 CVEs

Moderate: libreoffice security, bug fix, and enhancement update

Published May 10, 2022 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Content Manipulation with Double Certificate Attack (CVE-2021-25633)

* libreoffice: Timestamp Manipulation with Signature Wrapping (CVE-2021-25634)

* libreoffice: Content Manipulation with Certificate Validation Attack (CVE-2021-25635)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 libreoffice 1:6.4.7.2-10.el8

Vulnerabilities 3

  • Medium 5.2
    CVE-2021-25635

    Content Manipulation with Certificate Validation Attack

    An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid (or unknown to LibreOffice) algorithm an…

    The Document Foundation LibreOffice libreoffice Alpine
  • Unscored —
    CVE-2021-25633

    Content Manipulation with Double Certificate Attack

    LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability i…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-25634

    Timestamp Manipulation with Signature Wrapping

    LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability i…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1958421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1980800
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1992695
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013135
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013152