Mageia alert MGASA-2026-0259 (libreoffice)

From:
             
 
Mageia Updates <updates-announce@ml.mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2026-0259: Updated libreoffice packages fix security vulnerabilities
Date:
             
 
Sat, 18 Jul 2026 07:49:08 +0200
Message-ID:
             
 
<20260718054908.D42F39F988@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2026-0259 - Updated libreoffice packages fix security vulnerabilities

Publication date: 18 Jul 2026
URL: https://advisories.mageia.org/MGASA-2026-0259.html
Type: security
Affected Mageia releases: 10, 9
CVE: CVE-2026-6039,
     CVE-2026-6040,
     CVE-2026-6045,
     CVE-2026-8356,
     CVE-2026-8357,
     CVE-2026-8358

Description:
The updated packages fix security vulnerabilities:
Heap buffer overflow in DXF polyline import. (CVE-2026-6039)
Heap use-after-free in ODF number-format blank-width parsing.
(CVE-2026-6040)
Heap buffer overflow in EMF+ gradient brush import. (CVE-2026-6045)
Stack buffer overflow in PPT presentation import. (CVE-2026-8356)
Heap buffer overflow in Calc formula compilation. (CVE-2026-8357)
Heap buffer overflow in spreadsheet tracked-changes import.
(CVE-2026-8358)

References:
- https://bugs.mageia.org/show_bug.cgi?id=35709
- https://lists.debian.org/debian-security-announce/2026/ms...
- https://www.libreoffice.org/security/
- https://www.cve.org/CVERecord?id=CVE-2026-6039
- https://www.cve.org/CVERecord?id=CVE-2026-6040
- https://www.cve.org/CVERecord?id=CVE-2026-6045
- https://www.cve.org/CVERecord?id=CVE-2026-8356
- https://www.cve.org/CVERecord?id=CVE-2026-8357
- https://www.cve.org/CVERecord?id=CVE-2026-8358

SRPMS:
- 10/core/libreoffice-26.2.4.2-1.mga10
- 9/core/libreoffice-24.2.7.2-1.5.mga9