ALSA-2026:82013
Important: libreoffice security update
Published Oct 13, 2026 · updated Oct 15, 2026
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: heap buffer overflow in PDF import stream handling (CVE-2026-63274) * libreoffice: stack buffer overflow in CFF to Type 1 font conversion (CVE-2026-63276) * libreoffice: stack buffer overflow in CFF font hint handling (CVE-2026-63275) * libreoffice: libreoffice: Arbitrary code execution via remote Java database driver (CVE-2026-63277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · OSV.dev
Detected
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: heap buffer overflow in PDF import stream handling
Oct 15, 2026 · OSV.dev
Fix available
autocorr-af fixed in 1:7.1.8.1-15.el9_8.3.alma.1; autocorr-bg fixed in 1:7.1.8.1-15.el9_8.3.alma.1; autocorr-ca fixed in 1:7.1.8.1-15.el9_8.3.alma.1; autocorr-cs fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-af fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-bg fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-ca fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-cs fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-da fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-de fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-dsb fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-el fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-en fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-es fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-fa fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Fix available
autocorr-fi fixed in 1:7.1.8.1-15.el9_8.3.alma.1
Oct 15, 2026 · OSV.dev
Updated
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: heap buffer overflow in PDF import stream handling
Affected
- AlmaLinux:9 autocorr-af0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-bg0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-ca0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-cs0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-da0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-de0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-dsb0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-el0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-en0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-es0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-fa0 → 1:7.1.8.1-15.el9_8.3.alma.1
- AlmaLinux:9 autocorr-fi0 → 1:7.1.8.1-15.el9_8.3.alma.1