{"schemaVersion":3,"id":"SUSE-SU-2026:3140-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for libreoffice\n\nThis update for libreoffice fixes the following issues:\n\nUpdate to LibreOffice 26.2.5.1.\n\nSecurity issues fixed:\n\n- CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt parameters\n  (bsc#1264357).\n- CVE-2026-6039: denial of service via specially crafted DXF polyline import (bsc#1268494).\n- CVE-2026-6040: heap use-after-free when importing the blank-width characters of an ODF number format (bsc#1268527).\n- CVE-2026-6045: heap buffer overflow via crafted EMF+ graphics import (bsc#1268497).\n- CVE-2026-6047: denial of service via heap buffer overflow in OOXML document processing (bsc#1268504).\n- CVE-2026-8356: denial of service via a specially crafted PPT file (bsc#1268522).\n- CVE-2026-8357: heap buffer overflow in Calc formula compilation (bsc#1268528).\n- CVE-2026-8358: heap buffer overflow in spreadsheet tracked-changes import (bsc#1268529).\n- CVE-2026-50593: graphite2: out-of-bounds write via Graphite actions (bsc#1267735).\n\nOther updates and bugfixes:\n\n- Update to LibreOffice 26.2.5.1.\n  - Update bundled dependencies:\n    * `fontconfig` 2.17.1 -> 2.18.0\n    * `graphite2-minimal` 1.3.14 -> 1.3.15\n    * `libcmis` 0.6.2 -> 0.6.3\n    * `libgpg-error` 1.59 -> 1.61\n    * `lxml` 6.1.0 -> 6.1.1\n    * `md4c` 0.5.2 -> 0.5.3\n    * `poppler` 26.04.0 -> 26.06.0\n    * `sqlite-amalgamation` 3530000 -> 3530100\n    * `xmlsec1` 1.3.9 -> 1.3.11\n- Update to LibreOffice 26.2.3.2 (PED-16098).\n  - Upgraded dependencies:\n    * `boost`: 1_88_0 -> 1_89_0\n    * `freetype`: 2.14.1 -> 2.14.3\n    * `harfbuzz`: 12.3.0 -> 12.3.2\n    * `icu4c`: 77_1 -> 78.3\n    * `libgpg-error`: 1.56 -> 1.59\n    * `liborcus`: 0.20.1 -> 0.21.0\n    * `pdfium`: 7012 -> 7471\n    * `poppler`: 25.12.0 -> 26.04.0\n    * `skia`: m136 -> m142\n  - New bundled sources:\n    * `afdko` 4.0.3\n    * `antlr4-cpp-runtime` 4.13.2\n    * `fast_float` 8.2.2\n    * `libffi` 3.5.2\n    * `lxml` 6.1.0\n    * `md4c` 0.5.2\n    * `meson` 1.8.3\n    * `Python` 3.12.13\n    * `sqlite` 3530000\n    * `xmlsec1` 1.3.9\n    * `xz` 5.8.3\n- Add `patch`, required to build the bundled Python on all architectures.\n- Bundling a specific Python is now required as the one we ship (3.6) is too old to build `harfbuzz`.","dates":{"published":"2026-07-20T18:01:16.000Z","modified":"2026-07-21T09:45:06.737Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"libreoffice&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","name":"libreoffice","label":"libreoffice&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libreoffice&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","purlType":"rpm","versions":[{"text":"< 26.2.5.1-150500.20.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.2.5.1-150500.20.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libreoffice&distro=SUSE Linux Enterprise Workstation Extension 15 SP7","name":"libreoffice","label":"libreoffice&distro=SUSE Linux Enterprise Workstation Extension 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libreoffice&distro=SUSE Linux Enterprise Workstation Extension 15 SP7","purlType":"rpm","versions":[{"text":"< 26.2.5.1-150500.20.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.2.5.1-150500.20.37.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263140-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20263140-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1264357","label":"bugzilla.suse.com/1264357","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267735","label":"bugzilla.suse.com/1267735","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268494","label":"bugzilla.suse.com/1268494","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268497","label":"bugzilla.suse.com/1268497","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268504","label":"bugzilla.suse.com/1268504","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268522","label":"bugzilla.suse.com/1268522","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268527","label":"bugzilla.suse.com/1268527","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268528","label":"bugzilla.suse.com/1268528","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268529","label":"bugzilla.suse.com/1268529","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4430","label":"www.suse.com/security/cve/CVE-2026-4430","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50593","label":"www.suse.com/security/cve/CVE-2026-50593","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6039","label":"www.suse.com/security/cve/CVE-2026-6039","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6040","label":"www.suse.com/security/cve/CVE-2026-6040","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6045","label":"www.suse.com/security/cve/CVE-2026-6045","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6047","label":"www.suse.com/security/cve/CVE-2026-6047","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8356","label":"www.suse.com/security/cve/CVE-2026-8356","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8357","label":"www.suse.com/security/cve/CVE-2026-8357","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8358","label":"www.suse.com/security/cve/CVE-2026-8358","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-4430","CVE-2026-50593","CVE-2026-6039","CVE-2026-6040","CVE-2026-6045","CVE-2026-6047","CVE-2026-8356","CVE-2026-8357","CVE-2026-8358"],"downstream":[],"duplicates":[],"related":["CVE-2026-4430","CVE-2026-50593","CVE-2026-6039","CVE-2026-6040","CVE-2026-6045","CVE-2026-6047","CVE-2026-8356","CVE-2026-8357","CVE-2026-8358"]},"timeline":[{"kind":"published","date":"2026-07-20T18:01:16.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-21T09:45:06.737Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T04:58:12.363Z","stale":false,"partial":false}}