Skip to content
OpenAdvisories
Unscored USN-5330-1 1 CVE

libreoffice vulnerability

Published Mar 15, 2022 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LibreOffice incorrectly handled digital signatures.
An attacker could possibly use this issue to create a specially crafted
document that would display a validly signed indicator, contrary to
expectations.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS libreoffice 1:6.0.7-0ubuntu0.18.04.11
Ubuntu · 20.04 LTS 20.04:LTS libreoffice 1:6.4.7-0ubuntu0.20.04.4

Vulnerabilities 1

  • Unscored —
    CVE-2021-25636

    Incorrect trust validation of signature with ambiguous KeyInfo children

    LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability i…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2021-25636