Advisories » MGASA-2026-0514

Updated libreoffice package fixes security vulnerabilities

Publication date: 17 Oct 2026
Modification date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-63266 , CVE-2026-63267 , CVE-2026-63268 , CVE-2026-63269 , CVE-2026-63270 , CVE-2026-63272 , CVE-2026-63273 , CVE-2026-63274 , CVE-2026-63275 , CVE-2026-63276 , CVE-2026-63277 , CVE-2026-63278 , CVE-2026-63279

Description

Arbitrary file write via calcext:data-mappings, sql provider and
Firebird backup functionality. (CVE-2026-63266)
LFI and GET SSRF via calcext:data-mappings and csv provider.
(CVE-2026-63267)
LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db
href. (CVE-2026-63268)
LFI and GET SSRF via GStreamer and HLS playlists. (CVE-2026-63269)
Environment/ini-file leaks. (CVE-2026-63270)
Heap buffer overflow in WMF text record import. (CVE-2026-63272)
Heap buffer overflow in PDF import encryption handling. (CVE-2026-63273)
Heap buffer overflow in PDF import stream handling. (CVE-2026-63274)
Stack buffer overflow in CFF font hint handling. (CVE-2026-63275)
Stack buffer overflow in CFF to Type 1 font conversion. (CVE-2026-63276)
RCE via calcext:data-mappings, sql provider and jdbc connector.
(CVE-2026-63277)
Package URLs can be used to exfiltrate arbitrary INI file values and
environment variables. (CVE-2026-63278)
Out of bounds read in PICT image import. (CVE-2026-63279)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36383
• https://lists.debian.org/debian-security-announce/2026/msg00424.html
• https://www.libreoffice.org/security/#cve-2026-63272
• https://www.libreoffice.org/security/#cve-2026-63273
• https://www.libreoffice.org/security/#cve-2026-63274
• https://www.libreoffice.org/security/#cve-2026-63275
• https://www.libreoffice.org/security/#cve-2026-63276
• https://www.libreoffice.org/security/#cve-2026-63277
• https://www.libreoffice.org/security/#cve-2026-63278
• https://www.libreoffice.org/security/#cve-2026-63279
• https://lists.debian.org/debian-security-announce/2026/msg00457.html
• https://www.libreoffice.org/security/#cve-2026-63266
• https://www.libreoffice.org/security/#cve-2026-63267
• https://www.libreoffice.org/security/#cve-2026-63268
• https://www.libreoffice.org/security/#cve-2026-63269
• https://www.libreoffice.org/security/#cve-2026-63270
• https://ubuntu.com/security/notices/USN-8868-1
• https://www.cve.org/CVERecord?id=CVE-2026-63266
• https://www.cve.org/CVERecord?id=CVE-2026-63267
• https://www.cve.org/CVERecord?id=CVE-2026-63268
• https://www.cve.org/CVERecord?id=CVE-2026-63269
• https://www.cve.org/CVERecord?id=CVE-2026-63270
• https://www.cve.org/CVERecord?id=CVE-2026-63272
• https://www.cve.org/CVERecord?id=CVE-2026-63273
• https://www.cve.org/CVERecord?id=CVE-2026-63274
• https://www.cve.org/CVERecord?id=CVE-2026-63275
• https://www.cve.org/CVERecord?id=CVE-2026-63276
• https://www.cve.org/CVERecord?id=CVE-2026-63277
• https://www.cve.org/CVERecord?id=CVE-2026-63278
• https://www.cve.org/CVERecord?id=CVE-2026-63279

SRPMS

10/core

• libreoffice-26.2.6.3-1.mga10