Ubuntu 7337-1: LibreOffice Security Advisory Updates

ubuntu

March 10, 2025

LibreOffice could be made to run programs if it opened a specially crafted file.

Summary

LibreOffice could be made to run programs if it opened a specially crafted

file.

Software Description:

- libreoffice: Office productivity suite

Details:

It was discovered that LibreOffice incorrectly handled Office URI Schemes.

If a user or automated system were tricked into opening a specially crafted

LibreOffice file, a remote attacker could possibly use this issue to call

internal macros.

Topics Covered

security advisory remote execution ubuntu office suite libreoffice

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libreoffice                     4:24.8.5-0ubuntu0.24.10.2

Ubuntu 24.04 LTS
   libreoffice                     4:24.2.7-0ubuntu0.24.04.3

Ubuntu 22.04 LTS
   libreoffice                     1:7.3.7-0ubuntu0.22.04.9

Ubuntu 20.04 LTS
   libreoffice                     1:6.4.7-0ubuntu0.20.04.14

In general, a standard system update will make all the necessary changes.