** Description changed:
https://www.libreoffice.org/security
Addressed in LibreOffice 26.2.5.2/26.8.0.2
CVE-2026-63272 Heap buffer overflow in WMF text record import
- https://gerrit.libreoffice.org/c/core/+/207656
CVE-2026-63273 Heap buffer overflow in PDF import encryption handling
- https://gerrit.libreoffice.org/c/core/+/207659
CVE-2026-63274 Heap buffer overflow in PDF import stream handling
- https://gerrit.libreoffice.org/c/core/+/207660
CVE-2026-63275 Stack buffer overflow in CFF font hint handling
- https://gerrit.libreoffice.org/c/core/+/207658
CVE-2026-63276 Stack buffer overflow in CFF to Type 1 font conversion
- https://gerrit.libreoffice.org/c/core/+/207718
CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file
values and environment variables
- https://gerrit.libreoffice.org/c/core/+/206681
- CVE-2026-63279 Out of bounds read in PICT image import
+ CVE-2026-63279 Out of bounds read in PICT image import
- https://gerrit.libreoffice.org/c/core/+/206612
-
* Stonking 26.10: Fix is included in 26.8.0
- - no action required
+ - no action required
* Resolute 26.04: Fix is included in 26.2.5/26.2.6 SRU
- - no-change rebuild for security pocket required
- -
https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/resolute-26.2
+ - no-change rebuild for security pocket required
+ -
https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/resolute-26.2
* Noble 24.04: Backport of patches to 24.2.7 required
- -
https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/noble-24.2
- - ...
+ -
https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/noble-24.2
+ -
https://launchpad.net/~ricotz/+archive/ubuntu/ppa/+sourcepub/18803410/+listing-archive-extra
* Jammy 22.04: Backport of patches to 7.3.7 required
- -
https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/jammy-7.3
- - ...
+ -
https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/jammy-7.3
+ - ...
** Changed in: libreoffice (Ubuntu Stonking)
Status: New => In Progress
** Changed in: libreoffice (Ubuntu Stonking)
Importance: Undecided => High
** Changed in: libreoffice (Ubuntu Stonking)
Assignee: (unassigned) => Rico Tzschichholz (ricotz)
** Changed in: libreoffice (Ubuntu Stonking)
Status: In Progress => Fix Released
** Changed in: libreoffice (Ubuntu Resolute)
Status: New => In Progress
** Changed in: libreoffice (Ubuntu Resolute)
Importance: Undecided => High
** Changed in: libreoffice (Ubuntu Resolute)
Assignee: (unassigned) => Rico Tzschichholz (ricotz)
** Changed in: libreoffice (Ubuntu Noble)
Status: New => In Progress
** Changed in: libreoffice (Ubuntu Noble)
Importance: Undecided => High
** Changed in: libreoffice (Ubuntu Noble)
Assignee: (unassigned) => Rico Tzschichholz (ricotz)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2168720
Title:
CVE-2026-* (September 21th 2026)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2168720/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
