TI-2026-67610 CVE-2026-63277 · GHSA-5jx8-5g92-5w59
Remote code execution in LibreOffice Calc via external data links
Priority LOW 39
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document.
RHSA-2026:82013
libreoffice security update
Released 2026-10-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) autocorr-af-1:7.1.8.1-15.el9_8.3, autocorr-bg-1:7.1.8.1-15.el9_8.3, autocorr-ca-1:7.1.8.1-15.el9_8.3 +47
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libreoffice-sdk-1:7.1.8.1-15.el9_8.3, libreoffice-sdk-doc-1:7.1.8.1-15.el9_8.3
Fixes 4 records
TI-2026-45133 CVE-2026-63276 · GHSA-3xpv-4h8q-pj26
Stack buffer overflow in CFF to Type 1 font conversion
Priority LOW 24
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents.
TI-2026-45132 CVE-2026-63275 · GHSA-fh9h-5g6m-wc43
Stack buffer overflow in CFF font hint handling
Priority LOW 24
LibreOffice can read CFF fonts, which may be embedded in documents.
TI-2026-45131 CVE-2026-63274 · GHSA-q9rh-47xp-mj2m
Heap buffer overflow in PDF import stream handling
Priority LOW 24
LibreOffice Draw can import PDF documents.