Ubuntu alert USN-8534-1 (libreoffice)
| From: | noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-8534-1] LibreOffice vulnerabilities | |
| Date: | Mon, 13 Jul 2026 20:45:49 +0000 | |
| Message-ID: | <E1wjNXB-0000Ts-0H@lists.ubuntu.com> | |
| Cc: | noreply+usn-bot@canonical.com |
========================================================================== Ubuntu Security Notice USN-8534-1 July 13, 2026 libreoffice vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in LibreOffice. Software Description: - libreoffice: Office productivity suite Details: It was discovered that LibreOffice incorrectly handled importing DXF drawings. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-6039) It was discovered that LibreOffice incorrectly handled certain ODF number formats. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-6040) It was discovered that LibreOffice incorrectly handled importing EMF+ graphics. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-6045) It was discovered that LibreOffice incorrectly handled importing PPT presentations. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-8356) It was discovered that LibreOffice Calc incorrectly handled compiling certain formulas. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possily execute arbitrary code. (CVE-2026-8357) It was discovered that LibreOffice Calc incorrectly handled importing spreadsheet tracked changes. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-8358) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libreoffice 4:26.2.4.2-0ubuntu0.26.04.2 Ubuntu 24.04 LTS libreoffice 4:24.2.7-0ubuntu0.24.04.6 Ubuntu 22.04 LTS libreoffice 1:7.3.7-0ubuntu0.22.04.12 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8534-1 CVE-2026-6039, CVE-2026-6040, CVE-2026-6045, CVE-2026-8356, CVE-2026-8357, CVE-2026-8358 Package Information: https://launchpad.net/ubuntu/+source/libreoffice/4:26.2.4... https://launchpad.net/ubuntu/+source/libreoffice/4:24.2.7... https://launchpad.net/ubuntu/+source/libreoffice/1:7.3.7-...
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmpVTZ4ACgkQcpJm3tlz hgFOzg/+Ouc7Nh/l9weeEA8j6+VR9UCJ153l7QxlVFJRhD3FwppMHjTW/PEV6EvL xth63a+sTIktyq86W5D7G8WWa0g+02sBNdISiFyDRCEWkT4Z1h6hyDLSZ04NVfT3 WwUeLgT00Ujv+i8ZUlwArf4FJ/mfgQP5GfiVFhhX2D6Tk6ZZ9p6/We87DyBWvul+ gehWQcS4y1f1bcaBAUeGpXImOOhmVi6CT5z+wio3gWTLRNYVMROatQktWF14dKPa P8MFX8WD72B4yl9xbZvcZF3oKQZJqJHq4MlLsbcrGFBrRXkipsB5plMMDiqfCMzD hZDna+EL0xlGJD4WIL6OfDA9N0Dai5kA9crH7nPc3vLYpyBVEX3wBvK/lcd3qMXL C4mGqy7TUBkAYpXDLJleSY0huU6k/uE7gTthrscVKry8oiqQOEHsO/RaB8Yhbh5U 32uPkezG9yCLZnqT5PzPPvb8yuk1AeFGsksxsIuyIv4xQiHsk+QW5fLyvB+fi0Vv poajeyz0So1UL1YQVTglhydlNxpYxSpyNd131pHjGsOI66dqGa8nXqVM1hZ2Epb9 mPP2S/1uTNW8t1P7hzdQRplM5rLdQujxSaOvG6hxMS02Z0jzu6rFPJzLWfzI6mnu 4xPYSeHpZKbiCkU4nOhgefCpl6K2b8ZVCD/hDtikH4DnXEkQRQk= =tsyV -----END PGP SIGNATURE-----