Red Hat Product Errata RHSA-2026:36832 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36832 - Security Advisory Overview Updated Packages Synopsis Important: libreoffice security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libreoffice is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation (CVE-2026-8357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2488964 - CVE-2026-8357 libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVEs CVE-2026-8357 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM libreoffice-7.1.8.1-15.el9_8.2.src.rpm SHA-256: 098d73ce58c59e2069874eec2780ec875b64bddd7328ae56689f00673d524876 x86_64 autocorr-af-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 3d033e115d03f91416bcb4943b225d443d51bae3be7f8112e1b31be6f5abbc02 autocorr-bg-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 980df03b4fa49cde1533ee75ded62c169feda5ea5ea0c38949396425047d31e8 autocorr-ca-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 12d5d29f7c31535ef36500a30f2b106ff04f58d1f7bf822514320dcb88b9e06f autocorr-cs-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 89cdcdb2719b91f4fe62e320d08fa021c7994bfa69e8deda88d9c5524579e964 autocorr-da-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: a65b272ce937545dbe4755647178f500d317b03c6d6f9f16f0330499f786cc9e autocorr-de-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 630f608d7622eceb820344918df9214b74481c778a42528a9cd78fbd357b57e7 autocorr-dsb-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: c5caa5da2f10965be7f2ed90c5d7236ed5b64bf155cfcea97eb411508dc6d302 autocorr-el-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 70cdf9e7ebf9a78e3025c05206bc0ab7930c7d155cb41e3a84fc226fa304baef autocorr-en-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 115953c5e25837c4aea197d0e77a8314056b043ccf358260bff598bfb8b20484 autocorr-es-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 345a44324a0ea7de8bdd242259b6bbaeb84e6f429c6b21cd8f41ad860a2f8e7d autocorr-fa-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 654fa2705e1fd57b778ec4e554d6acda33a0bb653b16ae6aafa47100b6682896 autocorr-fi-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 3f5f518d7e8631777b3ccc1952bc4f8a2e89d4f2468483fa599c549e2e32f848 autocorr-fr-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 342a99e4be45eabea2d8a54ad6cdca9bacb2c21fd22424da8e946c46612f1fbf autocorr-ga-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: dbebf930f42fc5ad1375ef0395414417bcff4f225210ea22d1852a204c8300e5 autocorr-hr-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 1670ff69ba2c18a1de96bb2a7969ac5a36ef4768463dea7448d09b0074427b64 autocorr-hsb-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 141c6d529f45e3906107a49d2cadc670c33afe3037d1b34d22cabf221cb4d5b6 autocorr-hu-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: daafca9f0d23064f7f536460b3fabe66098fe677ea2b4b848af46dcdf0b6f777 autocorr-is-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 54d2f70c4e46d842d9ba9547ca5edbec3fe7ecea171ba3efd6dc65498ed481f9 autocorr-it-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: c97138a7d0d56849bcfac4c800c72eebe2b961d921cf74cd0b7133ef2acc89e9 autocorr-ja-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 4237119c6341c7d553271d5fde9a64d5eb5f623918593d4efd87e0b7207aa723 autocorr-ko-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: b05c3b2c53672280ac2b4468d87c512e557eb61089313bb1919018be8989e75d autocorr-lb-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 60fa2009fe107cb434336b7e3806a9e54b73fedf2335f83bbd7dd45cd4dcb5f4 autocorr-lt-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: eecacd7c45bec7fd40f417e1bf255e026f0d103cc7e17efa7f7e50ead17075a7 autocorr-mn-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: d20af24a23bd13d1f4720df58753014dfb66f6bd130765ce50200f79c3e90f5d autocorr-nl-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 5b1e9094473d0b546c82ccdc4718b20195fd3951567191633f8888b94213e3cf autocorr-pl-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 0a29bda60471361e7d2b5bc5e5bdea82ef2740a871efe4f16bf65504f9ea1bef autocorr-pt-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 54b92504276124b9b4efde15256299786a972c95e953cf9fb0af6a9d2354a2ad autocorr-ro-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 33a654bea048ec7c8dbec9d9945c9f067e47b042a0df66d5f726b84dc2f884b0 autocorr-ru-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: f218c86fa991fe8aa0132e10b2b670c2a92c328883d9afb5233a10561d751b75 autocorr-sk-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 1fc7527750f3da632244cea042c46d48b12641029983573688c7f742946b1144 autocorr-sl-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 3a943a3aeaf1ee3e7528db3af613defb6db5299dc3edacd9765123bce2b729d7 autocorr-sr-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: de00ee74f05497ca833166d4b5f25bb3e2e3d7e1b44c59607dccd9c17ef2e03c autocorr-sv-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 7f98e86a075a6b2a805927ba4d8043d215c9ab874031a16e43e04599a4e9077f autocorr-tr-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 936ac95df3fe24f3029d4de2a4cb99ad28766539c0d78ffebcf15557173b3f84 autocorr-vi-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 3c2078c4ebe13c31005a8d0c8da4fc16cf1adea8b067d2012a13052509bf6f0c autocorr-vro-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 7529b3f8ca4715b96d097f24954356181d312a19e5949acf1ef2f0e460b08b34 autocorr-zh-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 2b9e38253d3325e2c6f1b9e6ca51f36d5863a901136e38e7c5283c7240609f90 libreoffice-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 8f090da142d89d6ee3f657c36ffedb6bff96002dcb5f8f6956a72a0123eb0145 libreoffice-base-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: be322e2393922b8a6480f470b9ffea7631828e05a67651259fcf97c7bad72583 libreoffice-base-debuginfo-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: f72bb2bb345ec47a79a7e254d827a41721cdebc59752fc50451f7ce4273c6142 libreoffice-calc-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 9d183f2cf5d6ac1965e20829e12cf0d583191a5a6774816ca7e014551b787ac9 libreoffice-calc-debuginfo-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 62fed60ac7a968f41a8a4ce9b50639e92f22e30607b6f0d41a7a32ba4548f752 libreoffice-core-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 73fc00fa45cc9430969872dcf0e3d6e2c570a09f460b8c2774c93d083c2cceeb libreoffice-core-debuginfo-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: fea8add1e17d205d9f03c0df78e2db5a0cc6277f045d0604dc75e9a34d2d9a3c libreoffice-data-7.1.8.1-15.el9_8.2.noarch.rpm SHA-256: 06c2440100ffe582440c040df21d38c60470d6b5a373b5503df191469a252692 libreoffice-debuginfo-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 34e5807c54634c83ed1e36ecbe4b54ed5d8f8d66b8c827f4c664453a829c567d libreoffice-debugsource-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: cd9bef15cebaae7b4bd7db8f9324fee7eec77af556bf7fc368f319bd0964b966 libreoffice-draw-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 6b98270a5b5c345c1c234c926d813e5a4e5cb9d0945a07e4e54f99680e521bae libreoffice-emailmerge-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: ac2ae477eb22dbefaf412e53a1673d8dd185b743b6d54774d7ce31f6d139f6e7 libreoffice-filters-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 1beaa39670158d6fea8f51a3b708e5b6254d72520e68af88e97e7a8ad59de5d3 libreoffice-gdb-debug-support-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 1eb6d15f41c8e4e8a04ca101c3fea57e7db5cb33ff9eaf8bc92aa733868f23a2 libreoffice-glade-debuginfo-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 16bbbd6531e2218e8452f83a6d245c536494d28c7b22ac6f2af5879114696a45 libreoffice-graphicfilter-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 5417b91c645adcc24f1cefdb213d7905146791a9d56b80c455a4c69617086b30 libreoffice-graphicfilter-debuginfo-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: 729d16049003578c2cc6b6cb1d60490b527ca05988d0b9d06dc46da56c017249 libreoffice-gtk3-7.1.8.1-15.el9_8.2.x86_64.rpm SHA-256: dca9e530667e788565
A heap buffer overflow vulnerability (CVE-2026-8357, CVSS 7.8 HIGH) in LibreOffice Calc allows arbitrary code execution via maliciously crafted formulas. The flaw affects LibreOffice packages for Red Hat Enterprise Linux 9 and its Extended Update Support variants. Red Hat has released a security update rated Important; affected systems should be patched immediately using the referenced advisory.