RHSA-2026:88164HighCVSS 7.8

Red Hat Security Advisory: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

Published
October 22, 2026
Last Modified
October 22, 2026

🔗 CVE IDs covered (4)

CVE-2026-63274 →CVE-2026-63275 →CVE-2026-63276 →CVE-2026-63277 →

📋 Description

CVE-2026-63274 — libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63275 — libreoffice: stack buffer overflow in CFF font hint handling CVE-2026-63276 — libreoffice: stack buffer overflow in CFF to Type 1 font conversion CVE-2026-63277 — libreoffice: libreoffice: Arbitrary code execution via remote Java database driver

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux CRB (v. 8)
  • autocorr-af-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-bg-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-ca-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-cs-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-da-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-de-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-el-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-en-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-es-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-fa-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-fi-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-fr-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-ga-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-hr-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-hu-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-is-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-it-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-ja-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-ko-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-lb-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-lt-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-mn-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-nl-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-pl-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-pt-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-ro-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-ru-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • autocorr-sk-1:7.1.8.1-3.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Do not import PDF documents from unknown or untrusted sources with LibreOffice Draw. Workaround: Do not open documents from unknown or untrusted sources with LibreOffice. Workaround: Do not export documents from unknown or untrusted sources to PDF with LibreOffice. Workaround: Restricting the LibreOffice Java class path settings to local file system schemes (file:// URLs) prevents the execution of untrusted code from remote network locations. Alternatively, disabling the Java Runtime Environment (JRE) in LibreOffice options (Tools -> Options -> LibreOffice -> Advanced) eliminates the attack vector.

🔗 References (19)