MGASA-2026-0514: libreoffice Mageia

Vulnerability summary

MGASA-2026-0514 is a vulnerability in libreoffice Mageia with no CVSS score yet.

Timeline

1. 17-10-2026
   PublishedVulnerability first disclosed.
2. 17-10-2026
   Last modifiedVulnerability information updated.

Description

Updated libreoffice package fixes security vulnerabilities Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. (CVE-2026-63266) LFI and GET SSRF via calcext:data-mappings and csv provider. (CVE-2026-63267) LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. (CVE-2026-63268) LFI and GET SSRF via GStreamer and HLS playlists. (CVE-2026-63269) Environment/ini-file leaks. (CVE-2026-63270) Heap buffer overflow in WMF text record import. (CVE-2026-63272) Heap buffer overflow in PDF import encryption handling. (CVE-2026-63273) Heap buffer overflow in PDF import stream handling. (CVE-2026-63274) Stack buffer overflow in CFF font hint handling. (CVE-2026-63275) Stack buffer overflow in CFF to Type 1 font conversion. (CVE-2026-63276) RCE via calcext:data-mappings, sql provider and jdbc connector. (CVE-2026-63277) Package URLs can be used to exfiltrate arbitrary INI file values and environment variables. (CVE-2026-63278) Out of bounds read in PICT image import. (CVE-2026-63279)

No weakness data has been published for this record.