Advisories » MGASA-2026-0259

Updated libreoffice packages fix security vulnerabilities

Publication date: 18 Jul 2026
Modification date: 18 Jul 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-6039 , CVE-2026-6040 , CVE-2026-6045 , CVE-2026-8356 , CVE-2026-8357 , CVE-2026-8358

Description

The updated packages fix security vulnerabilities:
Heap buffer overflow in DXF polyline import. (CVE-2026-6039)
Heap use-after-free in ODF number-format blank-width parsing.
(CVE-2026-6040)
Heap buffer overflow in EMF+ gradient brush import. (CVE-2026-6045)
Stack buffer overflow in PPT presentation import. (CVE-2026-8356)
Heap buffer overflow in Calc formula compilation. (CVE-2026-8357)
Heap buffer overflow in spreadsheet tracked-changes import.
(CVE-2026-8358)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35709
• https://lists.debian.org/debian-security-announce/2026/msg00257.html
• https://www.libreoffice.org/security/
• https://www.cve.org/CVERecord?id=CVE-2026-6039
• https://www.cve.org/CVERecord?id=CVE-2026-6040
• https://www.cve.org/CVERecord?id=CVE-2026-6045
• https://www.cve.org/CVERecord?id=CVE-2026-8356
• https://www.cve.org/CVERecord?id=CVE-2026-8357
• https://www.cve.org/CVERecord?id=CVE-2026-8358

SRPMS

10/core

• libreoffice-26.2.4.2-1.mga10

9/core

• libreoffice-24.2.7.2-1.5.mga9