Approved changes feed: RSS · Atom

cpe:2.3:a:libreoffice:libreoffice:25.2.0.0:alpha1:*:*:*:*:*:*

part: a version: 25.2.0.0 update: alpha1

VendorLibreoffice (fa887e9c-4f16-516a-9e55-896c0be9530d)
ProductLibreoffice (86ee1a7e-ade3-54e7-844d-954621f783e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libreoffice purl2cpe 2026-06-01 10:13:07.603734
pkg:deb/ubuntu/libreoffice purl2cpe 2026-06-01 10:13:07.603735
pkg:github/libreoffice/core purl2cpe 2026-06-01 10:13:07.603737
pkg:libreoffice/core purl2cpe 2026-06-01 10:13:07.603738
pkg:rpm/fedora/libreoffice purl2cpe 2026-06-01 10:13:07.603740
pkg:rpm/opensuse/libreoffice purl2cpe 2026-06-01 10:13:07.603741

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2866 vulnerable 2026-06-08 07:16:58.530118 PDF signature forgery with adbe.pkcs7.sha1 SubFilter
Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2.
Published: 2025-04-27T19:04:52.226Z
Updated: 2025-11-03T19:46:42.576Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.