========================================================================== Ubuntu Security Notice USN-8534-1 July 13, 2026
libreoffice vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in LibreOffice. Software Description: - libreoffice: Office productivity suite Details: It was discovered that LibreOffice incorrectly handled importing DXF drawings. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-6039) It was discovered that LibreOffice incorrectly handled certain ODF number formats. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-6040) It was discovered that LibreOffice incorrectly handled importing EMF+ graphics. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-6045) It was discovered that LibreOffice incorrectly handled importing PPT presentations. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-8356) It was discovered that LibreOffice Calc incorrectly handled compiling certain formulas. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possily execute arbitrary code. (CVE-2026-8357) It was discovered that LibreOffice Calc incorrectly handled importing spreadsheet tracked changes. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-8358) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libreoffice 4:26.2.4.2-0ubuntu0.26.04.2 Ubuntu 24.04 LTS libreoffice 4:24.2.7-0ubuntu0.24.04.6 Ubuntu 22.04 LTS libreoffice 1:7.3.7-0ubuntu0.22.04.12 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8534-1 CVE-2026-6039, CVE-2026-6040, CVE-2026-6045, CVE-2026-8356, CVE-2026-8357, CVE-2026-8358 Package Information: https://launchpad.net/ubuntu/+source/libreoffice/4:26.2.4.2-0ubuntu0.26.04.2 https://launchpad.net/ubuntu/+source/libreoffice/4:24.2.7-0ubuntu0.24.04.6 https://launchpad.net/ubuntu/+source/libreoffice/1:7.3.7-0ubuntu0.22.04.12
signature.asc
Description: OpenPGP digital signature
