Red Hat Security Advisory: libreoffice security update
A security vulnerability (CVE-2025-1080) affecting LibreOffice was addressed by Red Hat in an important security update. The issue involves arbitrary script execution via macro URLs. This vulnerability affects LibreOffice packages distributed with Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. Red Hat has released updated packages to fix this issue. Users of affected Red Hat Enterprise Linux 9.2 versions should apply the provided updates to mitigate the risk.
AI Analysis
Technical Summary
Red Hat Product Security issued an advisory (RHSA-2025:3549) for a security vulnerability in LibreOffice identified as CVE-2025-1080. The vulnerability allows arbitrary script execution through macro URLs. The advisory covers Red Hat Enterprise Linux 9.2 Extended Update Support and related variants across multiple architectures (x86_64, s390x, ppc64le, aarch64). Red Hat has released updated LibreOffice packages (version 7.1.8.1-14.el9_2) to address this issue. The advisory rates the impact as Important (high severity) but does not provide a CVSS score. No known exploits in the wild have been reported at the time of the advisory.
Potential Impact
The vulnerability allows an attacker to execute arbitrary scripts via specially crafted macro URLs in LibreOffice documents. This could lead to unauthorized code execution on affected systems running vulnerable LibreOffice versions. The impact is rated as Important by Red Hat, indicating a significant security risk if exploited.
Mitigation Recommendations
Red Hat has released updated LibreOffice packages that fix this vulnerability. Users running Red Hat Enterprise Linux 9.2 Extended Update Support and related variants should apply the available updates as described in the Red Hat advisory RHSA-2025:3549 and the linked update article (https://access.redhat.com/articles/11258). Applying these official patches is the recommended and effective mitigation. No additional vendor-recommended mitigations or workarounds are indicated.
Red Hat Security Advisory: libreoffice security update
Description
A security vulnerability (CVE-2025-1080) affecting LibreOffice was addressed by Red Hat in an important security update. The issue involves arbitrary script execution via macro URLs. This vulnerability affects LibreOffice packages distributed with Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. Red Hat has released updated packages to fix this issue. Users of affected Red Hat Enterprise Linux 9.2 versions should apply the provided updates to mitigate the risk.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Product Security issued an advisory (RHSA-2025:3549) for a security vulnerability in LibreOffice identified as CVE-2025-1080. The vulnerability allows arbitrary script execution through macro URLs. The advisory covers Red Hat Enterprise Linux 9.2 Extended Update Support and related variants across multiple architectures (x86_64, s390x, ppc64le, aarch64). Red Hat has released updated LibreOffice packages (version 7.1.8.1-14.el9_2) to address this issue. The advisory rates the impact as Important (high severity) but does not provide a CVSS score. No known exploits in the wild have been reported at the time of the advisory.
Potential Impact
The vulnerability allows an attacker to execute arbitrary scripts via specially crafted macro URLs in LibreOffice documents. This could lead to unauthorized code execution on affected systems running vulnerable LibreOffice versions. The impact is rated as Important by Red Hat, indicating a significant security risk if exploited.
Mitigation Recommendations
Red Hat has released updated LibreOffice packages that fix this vulnerability. Users running Red Hat Enterprise Linux 9.2 Extended Update Support and related variants should apply the available updates as described in the Red Hat advisory RHSA-2025:3549 and the linked update article (https://access.redhat.com/articles/11258). Applying these official patches is the recommended and effective mitigation. No additional vendor-recommended mitigations or workarounds are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:3549
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a3da1d54853345fc1826eb3
Added to database: 06/25/2026, 21:47:01 UTC
Last enriched: 06/25/2026, 22:15:13 UTC
Last updated: 07/03/2026, 08:51:20 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.