Critical Security Update for LibreOffice - DSA-5873-1
Summary
DSA-5873-1: libreoffice - security update. Affects libreoffice versions < 4:7.4.7-1+deb12u7. Fixed in 4:7.4.7-1+deb12u7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreOffice is a powerful open-source office suite that provides a range of applications for word processing, spreadsheets, presentations, and more. It is widely used for its compatibility with various document formats and its robust feature set. However, like any software, it can be vulnerable to security issues, which can compromise user data and system integrity. The recent vulnerability identified in LibreOffice highlights the importance of keeping software up to date to mitigate potential risks.
Vulnerability Detail
The vulnerability identified as DSA-5873-1 in LibreOffice is associated with a security flaw that could potentially allow unauthorized access or manipulation of documents. This issue arises from improper handling of certain file types, which could be exploited by an attacker to execute arbitrary code or access sensitive information. The specific CVE linked to this vulnerability is CVE-2025-1080, which underscores the need for immediate attention to ensure user safety and data protection.
How To Fix
Minimum fixed version
4:7.4.7-1+deb12u7
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libreofficeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to avoid opening untrusted documents or files that may exploit this vulnerability until the update is applied. Additionally, consider using alternative office applications for sensitive tasks until the patch is installed.
Conclusion
The DSA-5873-1 vulnerability in LibreOffice poses significant risks to users, emphasizing the need for timely updates and vigilance in handling documents. By following the recommended steps to update and applying best practices, users can protect themselves from potential exploits.
See every vulnerability recorded for libreoffice →
FAQ
DSA-5873-1 is a security advisory related to a vulnerability in LibreOffice that requires immediate attention to protect user data.
You can check if your version is affected by visiting the Vulert playground at Vulert Scanner, which allows you to monitor vulnerabilities in real-time.
If you cannot update immediately, avoid opening untrusted documents and consider using alternative applications for sensitive tasks.
More information can be found in the security advisory DSA-5873-1 and the associated CVE-2025-1080 documentation.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in your software using just a manifest file. It helps ensure your applications remain secure.
Related vulnerabilities
Recent vulnerabilities recorded for libreoffice.
