Skip to content
OpenAdvisories
High RLSA-2025:2868 1 CVE

Important: libreoffice security update

Published May 7, 2025 · Updated Oct 9, 2025

Ecosystem: Rocky Linux

Summary

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 libreoffice 1:6.4.7.2-19.el8_10

Vulnerabilities 1

  • High 7.2
    CVE-2025-1080

    Macro URL arbitrary script execution

    LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2349906