Most recent entries from all

ALSA-2024:5583 — Moderate: libreoffice security update

2026-10-03T03:29:24.612353+00:00

Affected: AlmaLinux:9: autocorr-af, AlmaLinux:9: autocorr-bg, AlmaLinux:9: autocorr-ca, AlmaLinux:9: autocorr-cs, AlmaLinux:9: autocorr-da, AlmaLinux:9: autocorr-de, AlmaLinux:9: autocorr-dsb, AlmaLinux:9: autocorr-el, AlmaLinux:9: autocorr-en, AlmaLinux:9: autocorr-es and 169 more

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: bility to trust not validated macro signatures removed in high security mode (CVE-2024-6472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-06443

2026-10-03T03:29:24.612583+00:00

bdu:2024-06443

certfr-2024-avi-0653 — Une vulnérabilité a été découverte dans LibreOffice. Elle permet à un attaquant de provoquer un contournement de la pol…

2026-10-03T03:29:24.612603+00:00

certfr-2024-avi-0653

EUVD-2026-72782

2026-10-03T03:29:24.612619+00:00

EUVD-2026-72782

fkie_cve-2024-6472

2026-10-03T03:29:24.612630+00:00

Certificate Validation user interface in LibreOffice allows potential vulnerability.

Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice before the macro is executed.

Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway.

This issue affects LibreOffice: from 24.2 before 24.2.5.

GHSA-w6mm-86qp-2r3q

2026-10-03T03:29:24.612657+00:00

Certificate Validation user interface in LibreOffice allows potential vulnerability.

Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway.

This issue affects LibreOffice: from 24.2 before 24.2.5.

RHSA-2024:5583 — Red Hat Security Advisory: libreoffice security update

2026-10-03T03:29:24.612674+00:00

libreoffice: Ability to trust not validated macro signatures removed in high security mode

UBUNTU-CVE-2024-6472

2026-10-03T03:29:24.612692+00:00

Affected: Ubuntu:20.04:LTS: libreoffice, Ubuntu:22.04:LTS: libreoffice, Ubuntu:24.04:LTS: libreoffice

Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice before the macro is executed. Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway. This issue affects LibreOffice: from 24.2 before 24.2.5.

WID-SEC-W-2024-1764 — LibreOffice: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

2026-10-03T03:29:24.612736+00:00

Ein lokaler Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen.