USN-7504-1: LibreOffice vulnerability

USN-7504-1: LibreOffice vulnerability
8 May 2025

• LibreOffice could accept fraudulent digital signatures.

Releases

• Ubuntu 24.10
• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 20.04 ESM

Packages
libreoffice - Office productivity suite

Details
Juraj Šarinay discovered that LibreOffice incorrectly handled verifying
PDF signatures. A remote attacker could possibly use this issue to
generate PDF files that appear to have a valid signature.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.10

• libreoffice - 4:24.8.6-0ubuntu0.24.10.2
  Ubuntu 24.04
• libreoffice - 4:24.2.7-0ubuntu0.24.04.4
  Ubuntu 22.04
• libreoffice - 1:7.3.7-0ubuntu0.22.04.10
  Ubuntu 20.04
• libreoffice - 1:6.4.7-0ubuntu0.20.04.15
  In general, a standard system update will make all the necessary changes.