** Description changed: https://www.libreoffice.org/security Addressed in LibreOffice 26.2.5.2/26.8.0.2 CVE-2026-63272 Heap buffer overflow in WMF text record import - https://gerrit.libreoffice.org/c/core/+/207656 CVE-2026-63273 Heap buffer overflow in PDF import encryption handling - https://gerrit.libreoffice.org/c/core/+/207659 CVE-2026-63274 Heap buffer overflow in PDF import stream handling - https://gerrit.libreoffice.org/c/core/+/207660 CVE-2026-63275 Stack buffer overflow in CFF font hint handling - https://gerrit.libreoffice.org/c/core/+/207658 CVE-2026-63276 Stack buffer overflow in CFF to Type 1 font conversion - https://gerrit.libreoffice.org/c/core/+/207718 CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables - https://gerrit.libreoffice.org/c/core/+/206681 CVE-2026-63279 Out of bounds read in PICT image import - https://gerrit.libreoffice.org/c/core/+/206612 * Stonking 26.10: Fix is included in 26.8.0 - no action required * Resolute 26.04: Fix is included in 26.2.5/26.2.6 SRU - no-change rebuild for security pocket required - https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/resolute-26.2 * Noble 24.04: Backport of patches to 24.2.7 required - https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/noble-24.2 - https://launchpad.net/~ricotz/+archive/ubuntu/ppa/+sourcepub/18803410/+listing-archive-extra * Jammy 22.04: Backport of patches to 7.3.7 required - https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/log/?h=wip/jammy-7.3 - - ... + - https://launchpad.net/~ricotz/+archive/ubuntu/ppa/+sourcepub/18804798/+listing-archive-extra - - This update also includes the changes of https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2161597 + This update also includes the changes of + https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2161597
** Patch added: "libreoffice_7.3.7-0ubuntu0.22.04.13.diff" https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2168720/+attachment/6003615/+files/libreoffice_7.3.7-0ubuntu0.22.04.13.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2168720 Title: CVE-2026-* (September 21th 2026) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2168720/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
