SUSE-SU-2026:3140-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-20263140-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3140-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:3140-1
Upstream
CVE (9)
  • CVE-2026-4430
  • CVE-2026-50593
  • CVE-2026-6039
  • CVE-2026-6040
  • CVE-2026-6045
  • CVE-2026-6047
  • CVE-2026-8356
  • CVE-2026-8357
  • CVE-2026-8358
Related
Published
2026-07-20T18:01:16Z
Modified
2026-07-21T09:45:06Z
Summary
Security update for libreoffice
Details

This update for libreoffice fixes the following issues:

Update to LibreOffice 26.2.5.1.

Security issues fixed:

  • CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt parameters (bsc#1264357).
  • CVE-2026-6039: denial of service via specially crafted DXF polyline import (bsc#1268494).
  • CVE-2026-6040: heap use-after-free when importing the blank-width characters of an ODF number format (bsc#1268527).
  • CVE-2026-6045: heap buffer overflow via crafted EMF+ graphics import (bsc#1268497).
  • CVE-2026-6047: denial of service via heap buffer overflow in OOXML document processing (bsc#1268504).
  • CVE-2026-8356: denial of service via a specially crafted PPT file (bsc#1268522).
  • CVE-2026-8357: heap buffer overflow in Calc formula compilation (bsc#1268528).
  • CVE-2026-8358: heap buffer overflow in spreadsheet tracked-changes import (bsc#1268529).
  • CVE-2026-50593: graphite2: out-of-bounds write via Graphite actions (bsc#1267735).

Other updates and bugfixes:

  • Update to LibreOffice 26.2.5.1.
    • Update bundled dependencies:
      • fontconfig 2.17.1 -> 2.18.0
      • graphite2-minimal 1.3.14 -> 1.3.15
      • libcmis 0.6.2 -> 0.6.3
      • libgpg-error 1.59 -> 1.61
      • lxml 6.1.0 -> 6.1.1
      • md4c 0.5.2 -> 0.5.3
      • poppler 26.04.0 -> 26.06.0
      • sqlite-amalgamation 3530000 -> 3530100
      • xmlsec1 1.3.9 -> 1.3.11
  • Update to LibreOffice 26.2.3.2 (PED-16098).
    • Upgraded dependencies:
      • boost: 1_88_0 -> 1_89_0
      • freetype: 2.14.1 -> 2.14.3
      • harfbuzz: 12.3.0 -> 12.3.2
      • icu4c: 77_1 -> 78.3
      • libgpg-error: 1.56 -> 1.59
      • liborcus: 0.20.1 -> 0.21.0
      • pdfium: 7012 -> 7471
      • poppler: 25.12.0 -> 26.04.0
      • skia: m136 -> m142
    • New bundled sources:
      • afdko 4.0.3
      • antlr4-cpp-runtime 4.13.2
      • fast_float 8.2.2
      • libffi 3.5.2
      • lxml 6.1.0
      • md4c 0.5.2
      • meson 1.8.3
      • Python 3.12.13
      • sqlite 3530000
      • xmlsec1 1.3.9
      • xz 5.8.3
  • Add patch, required to build the bundled Python on all architectures.
  • Bundling a specific Python is now required as the one we ship (3.6) is too old to build harfbuzz.
References

Affected packages

SUSE:Linux Enterprise Module for Package Hub 15 SP7
libreoffice

Package

Name
libreoffice
Purl
pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
26.2.5.1-150500.20.37.1

Ecosystem specific

{
    "binaries":  [
        {
            "libreoffice":  "26.2.5.1-150500.20.37.1",
            "libreoffice-base":  "26.2.5.1-150500.20.37.1",
            "libreoffice-base-drivers-firebird":  "26.2.5.1-150500.20.37.1",
            "libreoffice-base-drivers-postgresql":  "26.2.5.1-150500.20.37.1",
            "libreoffice-branding-upstream":  "26.2.5.1-150500.20.37.1",
            "libreoffice-calc":  "26.2.5.1-150500.20.37.1",
            "libreoffice-calc-extensions":  "26.2.5.1-150500.20.37.1",
            "libreoffice-draw":  "26.2.5.1-150500.20.37.1",
            "libreoffice-filters-optional":  "26.2.5.1-150500.20.37.1",
            "libreoffice-gdb-pretty-printers":  "26.2.5.1-150500.20.37.1",
            "libreoffice-glade":  "26.2.5.1-150500.20.37.1",
            "libreoffice-gnome":  "26.2.5.1-150500.20.37.1",
            "libreoffice-gtk3":  "26.2.5.1-150500.20.37.1",
            "libreoffice-icon-themes":  "26.2.5.1-150500.20.37.1",
            "libreoffice-impress":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-af":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-am":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ar":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-as":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ast":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-be":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-bg":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-bn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-bn_IN":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-bo":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-br":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-brx":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-bs":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ca":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ca_valencia":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ckb":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-cs":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-cy":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-da":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-de":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-dgo":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-dsb":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-dz":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-el":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-en":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-en_GB":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-en_ZA":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-eo":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-es":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-et":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-eu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fa":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fi":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fur":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fy":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ga":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-gd":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-gl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-gu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-gug":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-he":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hi":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hsb":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-id":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-is":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-it":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ja":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ka":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-kab":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-kk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-km":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-kmr_Latn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-kn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ko":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-kok":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ks":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-lb":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-lo":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-lt":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-lv":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-mai":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-mk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ml":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-mn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-mni":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-mr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-my":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nb":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ne":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nso":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-oc":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-om":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-or":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pa":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pt_BR":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pt_PT":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ro":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ru":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-rw":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sa_IN":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sat":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sd":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-si":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sid":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sq":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ss":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-st":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sv":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sw_TZ":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-szl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ta":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-te":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-tg":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-th":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-tn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-tr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ts":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-tt":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ug":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-uk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-uz":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ve":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-vec":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-vi":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-xh":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-zh_CN":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-zh_TW":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-zu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-librelogo":  "26.2.5.1-150500.20.37.1",
            "libreoffice-mailmerge":  "26.2.5.1-150500.20.37.1",
            "libreoffice-math":  "26.2.5.1-150500.20.37.1",
            "libreoffice-officebean":  "26.2.5.1-150500.20.37.1",
            "libreoffice-pyuno":  "26.2.5.1-150500.20.37.1",
            "libreoffice-qt5":  "26.2.5.1-150500.20.37.1",
            "libreoffice-sdk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-sdk-doc":  "26.2.5.1-150500.20.37.1",
            "libreoffice-writer":  "26.2.5.1-150500.20.37.1",
            "libreoffice-writer-extensions":  "26.2.5.1-150500.20.37.1",
            "libreofficekit":  "26.2.5.1-150500.20.37.1",
            "libreofficekit-devel":  "26.2.5.1-150500.20.37.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3140-1.json"
SUSE:Linux Enterprise Workstation Extension 15 SP7
libreoffice

Package

Name
libreoffice
Purl
pkg:rpm/suse/libreoffice&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
26.2.5.1-150500.20.37.1

Ecosystem specific

{
    "binaries":  [
        {
            "libreoffice":  "26.2.5.1-150500.20.37.1",
            "libreoffice-base":  "26.2.5.1-150500.20.37.1",
            "libreoffice-base-drivers-postgresql":  "26.2.5.1-150500.20.37.1",
            "libreoffice-branding-upstream":  "26.2.5.1-150500.20.37.1",
            "libreoffice-calc":  "26.2.5.1-150500.20.37.1",
            "libreoffice-calc-extensions":  "26.2.5.1-150500.20.37.1",
            "libreoffice-draw":  "26.2.5.1-150500.20.37.1",
            "libreoffice-filters-optional":  "26.2.5.1-150500.20.37.1",
            "libreoffice-gnome":  "26.2.5.1-150500.20.37.1",
            "libreoffice-gtk3":  "26.2.5.1-150500.20.37.1",
            "libreoffice-icon-themes":  "26.2.5.1-150500.20.37.1",
            "libreoffice-impress":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-af":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ar":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-as":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-bg":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-bn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-br":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ca":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ckb":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-cs":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-cy":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-da":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-de":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-dz":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-el":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-en":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-eo":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-es":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-et":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-eu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fa":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fi":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-fur":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ga":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-gl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-gu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-he":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hi":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-hy":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-it":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ja":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-kk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-kn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ko":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-lt":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-lv":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-mai":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ml":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-mr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nb":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-nso":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-or":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pa":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pt_BR":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-pt_PT":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ro":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ru":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-si":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sl":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ss":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-st":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-sv":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ta":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-te":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-th":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-tn":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-tr":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ts":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-uk":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-ve":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-xh":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-zh_CN":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-zh_TW":  "26.2.5.1-150500.20.37.1",
            "libreoffice-l10n-zu":  "26.2.5.1-150500.20.37.1",
            "libreoffice-mailmerge":  "26.2.5.1-150500.20.37.1",
            "libreoffice-math":  "26.2.5.1-150500.20.37.1",
            "libreoffice-officebean":  "26.2.5.1-150500.20.37.1",
            "libreoffice-pyuno":  "26.2.5.1-150500.20.37.1",
            "libreoffice-writer":  "26.2.5.1-150500.20.37.1",
            "libreoffice-writer-extensions":  "26.2.5.1-150500.20.37.1",
            "libreofficekit":  "26.2.5.1-150500.20.37.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3140-1.json"