TI-2026-67610 CVE-2026-63277 · GHSA-5jx8-5g92-5w59
Remote code execution in LibreOffice Calc via external data links
Priority LOW 39
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document.
RHSA-2026:88164
flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update
Released 2026-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) autocorr-af-1:7.1.8.1-3.el8_10, autocorr-bg-1:7.1.8.1-3.el8_10, autocorr-ca-1:7.1.8.1-3.el8_10 +47
- Red Hat Enterprise Linux CRB (v. 8) libreoffice-sdk-1:7.1.8.1-3.el8_10, libreoffice-sdk-doc-1:7.1.8.1-3.el8_10
Fixes 4 records
TI-2026-45133 CVE-2026-63276 · GHSA-3xpv-4h8q-pj26
Stack buffer overflow in CFF to Type 1 font conversion
Priority LOW 24
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents.
TI-2026-45132 CVE-2026-63275 · GHSA-fh9h-5g6m-wc43
Stack buffer overflow in CFF font hint handling
Priority LOW 24
LibreOffice can read CFF fonts, which may be embedded in documents.
TI-2026-45131 CVE-2026-63274 · GHSA-q9rh-47xp-mj2m
Heap buffer overflow in PDF import stream handling
Priority LOW 24
LibreOffice Draw can import PDF documents.