Description
Certificate Validation user interface in LibreOffice allows potential vulnerability.
Signed macros are scripts that have been digitally signed by the
developer using a cryptographic signature. When a document with a signed
macro is opened a warning is displayed by LibreOffice before the macro
is executed.
Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway.
This issue affects LibreOffice: from 24.2 before 24.2.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Document Foundation | LibreOffice | 24.2 – < 24.2.5 | 24.2.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libreoffice | 4:24.2.5-1 | — |
| Debian 13 | libreoffice | 4:24.2.5-1 | — |
| Debian 12 | libreoffice | 4:7.4.7-1+deb12u4 | DSA-5737-1 |
| Debian 11 | libreoffice | 1:7.0.4-4+deb11u10 | DSA-5737-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | libreoffice | 4:24.2.5-0ubuntu0.24.04.2 | USN-6962-1 |
| Ubuntu 22.04 LTS | libreoffice | 1:7.3.7-0ubuntu0.22.04.6 | USN-6962-1 |
| Ubuntu 20.04 LTS | libreoffice | 1:6.4.7-0ubuntu0.20.04.11 | USN-6962-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | autocorr-af +178 | 1:7.1.8.1-14.el9_4 | RHSA-2024:5583 |
| RHEL 8 | autocorr-af +171 | 1:6.4.7.2-18.el8_10 | RHSA-2024:5598 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | autocorr-af +178 | 1:7.1.8.1-13.el9_2 | RHSA-2024:5607 |
| RHEL 9.0 E4S | autocorr-af +176 | 1:7.1.8.1-13.el9_0 | RHSA-2024:5584 |
| RHEL 8.8 EUS | autocorr-af +171 | 1:6.4.7.2-17.el8_8 | RHSA-2024:5608 |
| RHEL 8.6 TUS | autocorr-af +21 | 1:6.4.7.2-17.el8_6 | RHSA-2024:5599 |
| RHEL 8.6 E4S | autocorr-af +169 | 1:6.4.7.2-17.el8_6 | RHSA-2024:5599 |
| RHEL 8.6 AUS | autocorr-af +169 | 1:6.4.7.2-17.el8_6 | RHSA-2024:5599 |
| RHEL 8.4 TUS | autocorr-af +21 | 1:6.4.7.2-17.el8_4 | RHSA-2024:5601 |
| RHEL 8.4 E4S | autocorr-af +169 | 1:6.4.7.2-17.el8_4 | RHSA-2024:5601 |
| RHEL 8.4 AUS | autocorr-af +169 | 1:6.4.7.2-17.el8_4 | RHSA-2024:5601 |
| RHEL 8.2 AUS | autocorr-af +170 | 1:6.0.6.1-22.el8_2 | RHSA-2024:5886 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | autocorr-af +178 | 1:7.1.8.1-14.el9_4.alma.1 | ALSA-2024:5583 |
| AlmaLinux 8 | autocorr-af +171 | 1:6.4.7.2-18.el8_10.alma.1 | ALSA-2024:5598 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | libreoffice | 1:6.4.7.2-18.el8_10 | RLSA-2024:5598 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | autocorr-af +178 | 1:7.1.8.1-14.0.1.el9_4 | ELSA-2024-5583 |
| Oracle Linux 8 | autocorr-af +171 | 1:6.4.7.2-18.0.1.el8_10 | ELSA-2024-5598 |
Advisories 16
- ALSA-2024:5583 Moderate: libreoffice security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5598 Moderate: libreoffice security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:5608 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:5607 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:5583 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:5598 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-6962-1 libreoffice vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- RHSA-2024:5886 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:5599 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:5584 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:5601 Red Hat Security Advisory: libreoffice security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- DSA-5737-1 libreoffice - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2024:5598 Moderate: libreoffice security update Rocky Linux Security Advisories · Oct 9, 2025
- WID-SEC-2024-1764 LibreOffice: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 3, 2024
- ELSA-2024-5598 Moderate: libreoffice security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 20, 2024
- ELSA-2024-5583 Moderate: libreoffice security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 20, 2024