SUSE-SU-2026:3140-1

Опубликовано: 20 июл. 2026

Источник: suse-cvrf

Описание

Security update for libreoffice

This update for libreoffice fixes the following issues:

Update to LibreOffice 26.2.5.1.

Security issues fixed:

CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt parameters (bsc#1264357).
CVE-2026-6039: denial of service via specially crafted DXF polyline import (bsc#1268494).
CVE-2026-6040: heap use-after-free when importing the blank-width characters of an ODF number format (bsc#1268527).
CVE-2026-6045: heap buffer overflow via crafted EMF+ graphics import (bsc#1268497).
CVE-2026-6047: denial of service via heap buffer overflow in OOXML document processing (bsc#1268504).
CVE-2026-8356: denial of service via a specially crafted PPT file (bsc#1268522).
CVE-2026-8357: heap buffer overflow in Calc formula compilation (bsc#1268528).
CVE-2026-8358: heap buffer overflow in spreadsheet tracked-changes import (bsc#1268529).
CVE-2026-50593: graphite2: out-of-bounds write via Graphite actions (bsc#1267735).

Other updates and bugfixes:

Update to LibreOffice 26.2.5.1.
- Update bundled dependencies:
  - fontconfig 2.17.1 -> 2.18.0
  - graphite2-minimal 1.3.14 -> 1.3.15
  - libcmis 0.6.2 -> 0.6.3
  - libgpg-error 1.59 -> 1.61
  - lxml 6.1.0 -> 6.1.1
  - md4c 0.5.2 -> 0.5.3
  - poppler 26.04.0 -> 26.06.0
  - sqlite-amalgamation 3530000 -> 3530100
  - xmlsec1 1.3.9 -> 1.3.11
Update to LibreOffice 26.2.3.2 (PED-16098).
- Upgraded dependencies:
  - boost: 1_88_0 -> 1_89_0
  - freetype: 2.14.1 -> 2.14.3
  - harfbuzz: 12.3.0 -> 12.3.2
  - icu4c: 77_1 -> 78.3
  - libgpg-error: 1.56 -> 1.59
  - liborcus: 0.20.1 -> 0.21.0
  - pdfium: 7012 -> 7471
  - poppler: 25.12.0 -> 26.04.0
  - skia: m136 -> m142
- New bundled sources:
  - afdko 4.0.3
  - antlr4-cpp-runtime 4.13.2
  - fast_float 8.2.2
  - libffi 3.5.2
  - lxml 6.1.0
  - md4c 0.5.2
  - meson 1.8.3
  - Python 3.12.13
  - sqlite 3530000
  - xmlsec1 1.3.9
  - xz 5.8.3
Add patch, required to build the bundled Python on all architectures.
Bundling a specific Python is now required as the one we ship (3.6) is too old to build harfbuzz.

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7

libreoffice-26.2.5.1-150500.20.37.1

libreoffice-base-26.2.5.1-150500.20.37.1

libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

libreoffice-branding-upstream-26.2.5.1-150500.20.37.1

libreoffice-calc-26.2.5.1-150500.20.37.1

libreoffice-calc-extensions-26.2.5.1-150500.20.37.1

libreoffice-draw-26.2.5.1-150500.20.37.1

libreoffice-filters-optional-26.2.5.1-150500.20.37.1

libreoffice-gdb-pretty-printers-26.2.5.1-150500.20.37.1

libreoffice-glade-26.2.5.1-150500.20.37.1

libreoffice-gnome-26.2.5.1-150500.20.37.1

libreoffice-gtk3-26.2.5.1-150500.20.37.1

libreoffice-icon-themes-26.2.5.1-150500.20.37.1

libreoffice-impress-26.2.5.1-150500.20.37.1

libreoffice-l10n-af-26.2.5.1-150500.20.37.1

libreoffice-l10n-am-26.2.5.1-150500.20.37.1

libreoffice-l10n-ar-26.2.5.1-150500.20.37.1

libreoffice-l10n-as-26.2.5.1-150500.20.37.1

libreoffice-l10n-ast-26.2.5.1-150500.20.37.1

libreoffice-l10n-be-26.2.5.1-150500.20.37.1

libreoffice-l10n-bg-26.2.5.1-150500.20.37.1

libreoffice-l10n-bn-26.2.5.1-150500.20.37.1

libreoffice-l10n-bn_IN-26.2.5.1-150500.20.37.1

libreoffice-l10n-bo-26.2.5.1-150500.20.37.1

libreoffice-l10n-br-26.2.5.1-150500.20.37.1

libreoffice-l10n-brx-26.2.5.1-150500.20.37.1

libreoffice-l10n-bs-26.2.5.1-150500.20.37.1

libreoffice-l10n-ca-26.2.5.1-150500.20.37.1

libreoffice-l10n-ca_valencia-26.2.5.1-150500.20.37.1

libreoffice-l10n-ckb-26.2.5.1-150500.20.37.1

libreoffice-l10n-cs-26.2.5.1-150500.20.37.1

libreoffice-l10n-cy-26.2.5.1-150500.20.37.1

libreoffice-l10n-da-26.2.5.1-150500.20.37.1

libreoffice-l10n-de-26.2.5.1-150500.20.37.1

libreoffice-l10n-dgo-26.2.5.1-150500.20.37.1

libreoffice-l10n-dsb-26.2.5.1-150500.20.37.1

libreoffice-l10n-dz-26.2.5.1-150500.20.37.1

libreoffice-l10n-el-26.2.5.1-150500.20.37.1

libreoffice-l10n-en-26.2.5.1-150500.20.37.1

libreoffice-l10n-en_GB-26.2.5.1-150500.20.37.1

libreoffice-l10n-en_ZA-26.2.5.1-150500.20.37.1

libreoffice-l10n-eo-26.2.5.1-150500.20.37.1

libreoffice-l10n-es-26.2.5.1-150500.20.37.1

libreoffice-l10n-et-26.2.5.1-150500.20.37.1

libreoffice-l10n-eu-26.2.5.1-150500.20.37.1

libreoffice-l10n-fa-26.2.5.1-150500.20.37.1

libreoffice-l10n-fi-26.2.5.1-150500.20.37.1

libreoffice-l10n-fr-26.2.5.1-150500.20.37.1

libreoffice-l10n-fur-26.2.5.1-150500.20.37.1

libreoffice-l10n-fy-26.2.5.1-150500.20.37.1

libreoffice-l10n-ga-26.2.5.1-150500.20.37.1

libreoffice-l10n-gd-26.2.5.1-150500.20.37.1

libreoffice-l10n-gl-26.2.5.1-150500.20.37.1

libreoffice-l10n-gu-26.2.5.1-150500.20.37.1

libreoffice-l10n-gug-26.2.5.1-150500.20.37.1

libreoffice-l10n-he-26.2.5.1-150500.20.37.1

libreoffice-l10n-hi-26.2.5.1-150500.20.37.1

libreoffice-l10n-hr-26.2.5.1-150500.20.37.1

libreoffice-l10n-hsb-26.2.5.1-150500.20.37.1

libreoffice-l10n-hu-26.2.5.1-150500.20.37.1

libreoffice-l10n-id-26.2.5.1-150500.20.37.1

libreoffice-l10n-is-26.2.5.1-150500.20.37.1

libreoffice-l10n-it-26.2.5.1-150500.20.37.1

libreoffice-l10n-ja-26.2.5.1-150500.20.37.1

libreoffice-l10n-ka-26.2.5.1-150500.20.37.1

libreoffice-l10n-kab-26.2.5.1-150500.20.37.1

libreoffice-l10n-kk-26.2.5.1-150500.20.37.1

libreoffice-l10n-km-26.2.5.1-150500.20.37.1

libreoffice-l10n-kmr_Latn-26.2.5.1-150500.20.37.1

libreoffice-l10n-kn-26.2.5.1-150500.20.37.1

libreoffice-l10n-ko-26.2.5.1-150500.20.37.1

libreoffice-l10n-kok-26.2.5.1-150500.20.37.1

libreoffice-l10n-ks-26.2.5.1-150500.20.37.1

libreoffice-l10n-lb-26.2.5.1-150500.20.37.1

libreoffice-l10n-lo-26.2.5.1-150500.20.37.1

libreoffice-l10n-lt-26.2.5.1-150500.20.37.1

libreoffice-l10n-lv-26.2.5.1-150500.20.37.1

libreoffice-l10n-mai-26.2.5.1-150500.20.37.1

libreoffice-l10n-mk-26.2.5.1-150500.20.37.1

libreoffice-l10n-ml-26.2.5.1-150500.20.37.1

libreoffice-l10n-mn-26.2.5.1-150500.20.37.1

libreoffice-l10n-mni-26.2.5.1-150500.20.37.1

libreoffice-l10n-mr-26.2.5.1-150500.20.37.1

libreoffice-l10n-my-26.2.5.1-150500.20.37.1

libreoffice-l10n-nb-26.2.5.1-150500.20.37.1

libreoffice-l10n-ne-26.2.5.1-150500.20.37.1

libreoffice-l10n-nl-26.2.5.1-150500.20.37.1

libreoffice-l10n-nn-26.2.5.1-150500.20.37.1

libreoffice-l10n-nr-26.2.5.1-150500.20.37.1

libreoffice-l10n-nso-26.2.5.1-150500.20.37.1

libreoffice-l10n-oc-26.2.5.1-150500.20.37.1

libreoffice-l10n-om-26.2.5.1-150500.20.37.1

libreoffice-l10n-or-26.2.5.1-150500.20.37.1

libreoffice-l10n-pa-26.2.5.1-150500.20.37.1

libreoffice-l10n-pl-26.2.5.1-150500.20.37.1

libreoffice-l10n-pt_BR-26.2.5.1-150500.20.37.1

libreoffice-l10n-pt_PT-26.2.5.1-150500.20.37.1

libreoffice-l10n-ro-26.2.5.1-150500.20.37.1

libreoffice-l10n-ru-26.2.5.1-150500.20.37.1

libreoffice-l10n-rw-26.2.5.1-150500.20.37.1

libreoffice-l10n-sa_IN-26.2.5.1-150500.20.37.1

libreoffice-l10n-sat-26.2.5.1-150500.20.37.1

libreoffice-l10n-sd-26.2.5.1-150500.20.37.1

libreoffice-l10n-si-26.2.5.1-150500.20.37.1

libreoffice-l10n-sid-26.2.5.1-150500.20.37.1

libreoffice-l10n-sk-26.2.5.1-150500.20.37.1

libreoffice-l10n-sl-26.2.5.1-150500.20.37.1

libreoffice-l10n-sq-26.2.5.1-150500.20.37.1

libreoffice-l10n-sr-26.2.5.1-150500.20.37.1

libreoffice-l10n-ss-26.2.5.1-150500.20.37.1

libreoffice-l10n-st-26.2.5.1-150500.20.37.1

libreoffice-l10n-sv-26.2.5.1-150500.20.37.1

libreoffice-l10n-sw_TZ-26.2.5.1-150500.20.37.1

libreoffice-l10n-szl-26.2.5.1-150500.20.37.1

libreoffice-l10n-ta-26.2.5.1-150500.20.37.1

libreoffice-l10n-te-26.2.5.1-150500.20.37.1

libreoffice-l10n-tg-26.2.5.1-150500.20.37.1

libreoffice-l10n-th-26.2.5.1-150500.20.37.1

libreoffice-l10n-tn-26.2.5.1-150500.20.37.1

libreoffice-l10n-tr-26.2.5.1-150500.20.37.1

libreoffice-l10n-ts-26.2.5.1-150500.20.37.1

libreoffice-l10n-tt-26.2.5.1-150500.20.37.1

libreoffice-l10n-ug-26.2.5.1-150500.20.37.1

libreoffice-l10n-uk-26.2.5.1-150500.20.37.1

libreoffice-l10n-uz-26.2.5.1-150500.20.37.1

libreoffice-l10n-ve-26.2.5.1-150500.20.37.1

libreoffice-l10n-vec-26.2.5.1-150500.20.37.1

libreoffice-l10n-vi-26.2.5.1-150500.20.37.1

libreoffice-l10n-xh-26.2.5.1-150500.20.37.1

libreoffice-l10n-zh_CN-26.2.5.1-150500.20.37.1

libreoffice-l10n-zh_TW-26.2.5.1-150500.20.37.1

libreoffice-l10n-zu-26.2.5.1-150500.20.37.1

libreoffice-librelogo-26.2.5.1-150500.20.37.1

libreoffice-mailmerge-26.2.5.1-150500.20.37.1

libreoffice-math-26.2.5.1-150500.20.37.1

libreoffice-officebean-26.2.5.1-150500.20.37.1

libreoffice-pyuno-26.2.5.1-150500.20.37.1

libreoffice-qt5-26.2.5.1-150500.20.37.1

libreoffice-sdk-26.2.5.1-150500.20.37.1

libreoffice-sdk-doc-26.2.5.1-150500.20.37.1

libreoffice-writer-26.2.5.1-150500.20.37.1

libreoffice-writer-extensions-26.2.5.1-150500.20.37.1

libreofficekit-26.2.5.1-150500.20.37.1

libreofficekit-devel-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Workstation Extension 15 SP7

libreoffice-26.2.5.1-150500.20.37.1

libreoffice-base-26.2.5.1-150500.20.37.1

libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

libreoffice-branding-upstream-26.2.5.1-150500.20.37.1

libreoffice-calc-26.2.5.1-150500.20.37.1

libreoffice-calc-extensions-26.2.5.1-150500.20.37.1

libreoffice-draw-26.2.5.1-150500.20.37.1

libreoffice-filters-optional-26.2.5.1-150500.20.37.1

libreoffice-gnome-26.2.5.1-150500.20.37.1

libreoffice-gtk3-26.2.5.1-150500.20.37.1

libreoffice-icon-themes-26.2.5.1-150500.20.37.1

libreoffice-impress-26.2.5.1-150500.20.37.1

libreoffice-l10n-af-26.2.5.1-150500.20.37.1

libreoffice-l10n-ar-26.2.5.1-150500.20.37.1

libreoffice-l10n-as-26.2.5.1-150500.20.37.1

libreoffice-l10n-bg-26.2.5.1-150500.20.37.1

libreoffice-l10n-bn-26.2.5.1-150500.20.37.1

libreoffice-l10n-br-26.2.5.1-150500.20.37.1

libreoffice-l10n-ca-26.2.5.1-150500.20.37.1

libreoffice-l10n-ckb-26.2.5.1-150500.20.37.1

libreoffice-l10n-cs-26.2.5.1-150500.20.37.1

libreoffice-l10n-cy-26.2.5.1-150500.20.37.1

libreoffice-l10n-da-26.2.5.1-150500.20.37.1

libreoffice-l10n-de-26.2.5.1-150500.20.37.1

libreoffice-l10n-dz-26.2.5.1-150500.20.37.1

libreoffice-l10n-el-26.2.5.1-150500.20.37.1

libreoffice-l10n-en-26.2.5.1-150500.20.37.1

libreoffice-l10n-eo-26.2.5.1-150500.20.37.1

libreoffice-l10n-es-26.2.5.1-150500.20.37.1

libreoffice-l10n-et-26.2.5.1-150500.20.37.1

libreoffice-l10n-eu-26.2.5.1-150500.20.37.1

libreoffice-l10n-fa-26.2.5.1-150500.20.37.1

libreoffice-l10n-fi-26.2.5.1-150500.20.37.1

libreoffice-l10n-fr-26.2.5.1-150500.20.37.1

libreoffice-l10n-fur-26.2.5.1-150500.20.37.1

libreoffice-l10n-ga-26.2.5.1-150500.20.37.1

libreoffice-l10n-gl-26.2.5.1-150500.20.37.1

libreoffice-l10n-gu-26.2.5.1-150500.20.37.1

libreoffice-l10n-he-26.2.5.1-150500.20.37.1

libreoffice-l10n-hi-26.2.5.1-150500.20.37.1

libreoffice-l10n-hr-26.2.5.1-150500.20.37.1

libreoffice-l10n-hu-26.2.5.1-150500.20.37.1

libreoffice-l10n-hy-26.2.5.1-150500.20.37.1

libreoffice-l10n-it-26.2.5.1-150500.20.37.1

libreoffice-l10n-ja-26.2.5.1-150500.20.37.1

libreoffice-l10n-kk-26.2.5.1-150500.20.37.1

libreoffice-l10n-kn-26.2.5.1-150500.20.37.1

libreoffice-l10n-ko-26.2.5.1-150500.20.37.1

libreoffice-l10n-lt-26.2.5.1-150500.20.37.1

libreoffice-l10n-lv-26.2.5.1-150500.20.37.1

libreoffice-l10n-mai-26.2.5.1-150500.20.37.1

libreoffice-l10n-ml-26.2.5.1-150500.20.37.1

libreoffice-l10n-mr-26.2.5.1-150500.20.37.1

libreoffice-l10n-nb-26.2.5.1-150500.20.37.1

libreoffice-l10n-nl-26.2.5.1-150500.20.37.1

libreoffice-l10n-nn-26.2.5.1-150500.20.37.1

libreoffice-l10n-nr-26.2.5.1-150500.20.37.1

libreoffice-l10n-nso-26.2.5.1-150500.20.37.1

libreoffice-l10n-or-26.2.5.1-150500.20.37.1

libreoffice-l10n-pa-26.2.5.1-150500.20.37.1

libreoffice-l10n-pl-26.2.5.1-150500.20.37.1

libreoffice-l10n-pt_BR-26.2.5.1-150500.20.37.1

libreoffice-l10n-pt_PT-26.2.5.1-150500.20.37.1

libreoffice-l10n-ro-26.2.5.1-150500.20.37.1

libreoffice-l10n-ru-26.2.5.1-150500.20.37.1

libreoffice-l10n-si-26.2.5.1-150500.20.37.1

libreoffice-l10n-sk-26.2.5.1-150500.20.37.1

libreoffice-l10n-sl-26.2.5.1-150500.20.37.1

libreoffice-l10n-sr-26.2.5.1-150500.20.37.1

libreoffice-l10n-ss-26.2.5.1-150500.20.37.1

libreoffice-l10n-st-26.2.5.1-150500.20.37.1

libreoffice-l10n-sv-26.2.5.1-150500.20.37.1

libreoffice-l10n-ta-26.2.5.1-150500.20.37.1

libreoffice-l10n-te-26.2.5.1-150500.20.37.1

libreoffice-l10n-th-26.2.5.1-150500.20.37.1

libreoffice-l10n-tn-26.2.5.1-150500.20.37.1

libreoffice-l10n-tr-26.2.5.1-150500.20.37.1

libreoffice-l10n-ts-26.2.5.1-150500.20.37.1

libreoffice-l10n-uk-26.2.5.1-150500.20.37.1

libreoffice-l10n-ve-26.2.5.1-150500.20.37.1

libreoffice-l10n-xh-26.2.5.1-150500.20.37.1

libreoffice-l10n-zh_CN-26.2.5.1-150500.20.37.1

libreoffice-l10n-zh_TW-26.2.5.1-150500.20.37.1

libreoffice-l10n-zu-26.2.5.1-150500.20.37.1

libreoffice-mailmerge-26.2.5.1-150500.20.37.1

libreoffice-math-26.2.5.1-150500.20.37.1

libreoffice-officebean-26.2.5.1-150500.20.37.1

libreoffice-pyuno-26.2.5.1-150500.20.37.1

libreoffice-writer-26.2.5.1-150500.20.37.1

libreoffice-writer-extensions-26.2.5.1-150500.20.37.1

libreofficekit-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263140-1/
Link for SUSE-SU-2026:3140-1
https://lists.suse.com/pipermail/sle-updates/2026-July/048503.html
E-Mail link for SUSE-SU-2026:3140-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1264357
SUSE Bug 1264357
https://bugzilla.suse.com/1267735
SUSE Bug 1267735
https://bugzilla.suse.com/1268494
SUSE Bug 1268494
https://bugzilla.suse.com/1268497
SUSE Bug 1268497
https://bugzilla.suse.com/1268504
SUSE Bug 1268504
https://bugzilla.suse.com/1268522
SUSE Bug 1268522
https://bugzilla.suse.com/1268527
SUSE Bug 1268527
https://bugzilla.suse.com/1268528
SUSE Bug 1268528
https://bugzilla.suse.com/1268529
SUSE Bug 1268529
https://www.suse.com/security/cve/CVE-2026-4430/
SUSE CVE CVE-2026-4430 page
https://www.suse.com/security/cve/CVE-2026-50593/
SUSE CVE CVE-2026-50593 page
https://www.suse.com/security/cve/CVE-2026-6039/
SUSE CVE CVE-2026-6039 page
https://www.suse.com/security/cve/CVE-2026-6040/
SUSE CVE CVE-2026-6040 page
https://www.suse.com/security/cve/CVE-2026-6045/
SUSE CVE CVE-2026-6045 page
https://www.suse.com/security/cve/CVE-2026-6047/
SUSE CVE CVE-2026-6047 page
https://www.suse.com/security/cve/CVE-2026-8356/
SUSE CVE CVE-2026-8356 page
https://www.suse.com/security/cve/CVE-2026-8357/
SUSE CVE CVE-2026-8357 page

Описание

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-4430.html
CVE-2026-4430
https://bugzilla.suse.com/1264357
SUSE Bug 1264357

Описание

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-50593.html
CVE-2026-50593
https://bugzilla.suse.com/1267733
SUSE Bug 1267733

Описание

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose point count exceeded the 16-bit range was written past the end of the buffer. In fixed versions such oversized polylines are rejected.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-6039.html
CVE-2026-6039
https://bugzilla.suse.com/1268494
SUSE Bug 1268494

Описание

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memory outside that string. In fixed versions the position is bounds-checked before use.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-6040.html
CVE-2026-6040
https://bugzilla.suse.com/1268527
SUSE Bug 1268527

Описание

LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow, so a small buffer was allocated and then filled as if it were large, writing past its end. In fixed versions the blend-point count is checked against the data actually available before allocating.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-6045.html
CVE-2026-6045
https://bugzilla.suse.com/1268497
SUSE Bug 1268497

Описание

LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed past the end of the allocation. In fixed versions the type is checked before the write.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-6047.html
CVE-2026-6047
https://bugzilla.suse.com/1268504
SUSE Bug 1268504

Описание

LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose combined colour counts exceeded the table size wrote past the end of the tables on the stack. In fixed versions the unused second pass is no longer read into those tables.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-8356.html
CVE-2026-8356
https://bugzilla.suse.com/1268522
SUSE Bug 1268522

Описание

LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-8357.html
CVE-2026-8357
https://bugzilla.suse.com/1268528
SUSE Bug 1268528

Описание

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-firebird-26.2.5.1-150500.20.37.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libreoffice-base-drivers-postgresql-26.2.5.1-150500.20.37.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-8358.html
CVE-2026-8358
https://bugzilla.suse.com/1268529
SUSE Bug 1268529

SUSE-SU-2026:3140-1

Описание

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7

SUSE Linux Enterprise Workstation Extension 15 SP7

Ссылки

Уязвимость: CVE-2026-4430

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-50593

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-6039

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-6040

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-6045

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-6047

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-8356

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-8357

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-8358

Описание

Затронутые продукты

Ссылки