[USN-7504-1] LibreOffice vulnerability

-----BEGIN PGP SIGNATURE-----
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=veXL
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7504-1
May 08, 2025

libreoffice vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

LibreOffice could accept fraudulent digital signatures.

Software Description:
- libreoffice: Office productivity suite

Details:

Juraj Šarinay discovered that LibreOffice incorrectly handled verifying
PDF signatures. A remote attacker could possibly use this issue to
generate PDF files that appear to have a valid signature.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
libreoffice 4:24.8.6-0ubuntu0.24.10.2

Ubuntu 24.04 LTS
libreoffice 4:24.2.7-0ubuntu0.24.04.4

Ubuntu 22.04 LTS
libreoffice 1:7.3.7-0ubuntu0.22.04.10

Ubuntu 20.04 LTS
libreoffice 1:6.4.7-0ubuntu0.20.04.15

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7504-1
CVE-2025-2866

Package Information:
https://launchpad.net/ubuntu/+source/libreoffice/4:24.8.6-0ubuntu0.24.10.2
https://launchpad.net/ubuntu/+source/libreoffice/4:24.2.7-0ubuntu0.24.04.4
https://launchpad.net/ubuntu/+source/libreoffice/1:7.3.7-0ubuntu0.22.04.10
https://launchpad.net/ubuntu/+source/libreoffice/1:6.4.7-0ubuntu0.20.04.15