UbuntuUpdates.org

Bugs fixes in "libreoffice"

Origin Bug number Title Date fixed
CVE CVE-2026-63279 LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour pale 2026-10-07
CVE CVE-2026-63278 URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remo 2026-10-07
CVE CVE-2026-63275 LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of 2026-10-07
CVE CVE-2026-63274 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the 2026-10-07
CVE CVE-2026-63273 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was 2026-10-07
CVE CVE-2026-63272 LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its 2026-10-07
CVE CVE-2026-50593 Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset 2026-10-07
CVE CVE-2026-63279 LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour pale 2026-10-07
CVE CVE-2026-63278 URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remo 2026-10-07
CVE CVE-2026-63275 LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of 2026-10-07
CVE CVE-2026-63274 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the 2026-10-07
CVE CVE-2026-63273 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was 2026-10-07
CVE CVE-2026-63272 LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its 2026-10-07
CVE CVE-2026-50593 Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset 2026-10-07
CVE CVE-2026-63279 LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour pale 2026-10-07
CVE CVE-2026-63278 URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remo 2026-10-07
CVE CVE-2026-63275 LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of 2026-10-07
CVE CVE-2026-63274 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the 2026-10-07
CVE CVE-2026-63273 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was 2026-10-07
CVE CVE-2026-63272 LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its 2026-10-07



About   -   Send Feedback to @ubuntu_updates