*** This bug is a security vulnerability *** Public security bug reported:
https://www.libreoffice.org/security Addressed in LibreOffice 26.2.5.2/26.8.0.2 CVE-2026-63272 Heap buffer overflow in WMF text record import - https://gerrit.libreoffice.org/c/core/+/207656 CVE-2026-63273 Heap buffer overflow in PDF import encryption handling - https://gerrit.libreoffice.org/c/core/+/207659 CVE-2026-63274 Heap buffer overflow in PDF import stream handling - https://gerrit.libreoffice.org/c/core/+/207660 CVE-2026-63275 Stack buffer overflow in CFF font hint handling - https://gerrit.libreoffice.org/c/core/+/207658 CVE-2026-63276 Stack buffer overflow in CFF to Type 1 font conversion - https://gerrit.libreoffice.org/c/core/+/207718 CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables - https://gerrit.libreoffice.org/c/core/+/206681 CVE-2026-63279 Out of bounds read in PICT image import - https://gerrit.libreoffice.org/c/core/+/206612 * Stonking 26.10: Fix is included in 26.8.0 - no action required * Resolute 26.04: Fix is included in 26.2.5/26.2.6 SRU - no-change rebuild for security pocket required - https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/resolute-26.2 * Noble 24.04: Backport of patches to 24.2.7 required - https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/noble-24.2 - ... * Jammy 22.04: Backport of patches to 7.3.7 required - https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/jammy-7.3 - ... ** Affects: libreoffice (Ubuntu) Importance: Undecided Status: New ** Affects: libreoffice (Ubuntu Jammy) Importance: Undecided Status: New ** Affects: libreoffice (Ubuntu Noble) Importance: Undecided Status: New ** Affects: libreoffice (Ubuntu Resolute) Importance: Undecided Status: New ** Affects: libreoffice (Ubuntu Stonking) Importance: Undecided Status: New ** Also affects: libreoffice (Ubuntu Resolute) Importance: Undecided Status: New ** Also affects: libreoffice (Ubuntu Stonking) Importance: Undecided Status: New ** Also affects: libreoffice (Ubuntu Jammy) Importance: Undecided Status: New ** Also affects: libreoffice (Ubuntu Noble) Importance: Undecided Status: New ** CVE added: https://cve.org/CVERecord?id=CVE-2026-63272 ** CVE added: https://cve.org/CVERecord?id=CVE-2026-63273 ** CVE added: https://cve.org/CVERecord?id=CVE-2026-63274 ** CVE added: https://cve.org/CVERecord?id=CVE-2026-63275 ** CVE added: https://cve.org/CVERecord?id=CVE-2026-63276 ** CVE added: https://cve.org/CVERecord?id=CVE-2026-63278 ** CVE added: https://cve.org/CVERecord?id=CVE-2026-63279 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2168720 Title: CVE-2026-* (September 21th 2026) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2168720/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
