This security update addresses two high-severity vulnerabilities (CVE-2026-4430 and CVE-2026-8357, both CVSS 7.8) in LibreOffice. The flaws include a denial of service via crafted OOXML documents and arbitrary code execution via a heap buffer overflow in Calc's formula compilation. Affected LibreOffice versions are 25.8.0.0 through 25.8.6.0 and 26.2.0.0 through 26.2.2.0, which are fixed in versions 25.8.7.0 and 26.2.3.0 respectively.
Red Hat Product Errata RHSA-2026:46386 - Security Advisory Issued: 2026-07-27 Updated: 2026-07-27 RHSA-2026:46386 - Security Advisory Overview Updated Packages Synopsis Important: libreoffice security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libreoffice is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430) libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation (CVE-2026-8357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2467657 - CVE-2026-4430 LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents BZ - 2488964 - CVE-2026-8357 libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVEs CVE-2026-4430 CVE-2026-8357 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM libreoffice-5.3.6.1-28.el7_9.src.rpm SHA-256: 5974bd762ac6350189e3367ef7f20cc71fc5ee74380cef9765b43dcfa5451039 x86_64 autocorr-af-5.3.6.1-28.el7_9.noarch.rpm SHA-256: ea8e580d1d5ba1089cc21d267e4e71f1337f80175b37fd0b68775e9dffa3a60d autocorr-bg-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 99949de159d0fd697f1d1b6e302aee89d292c55ffffa9358e0ac2e93510aa614 autocorr-ca-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 3d94e8e529d39fb9e46b130521b4580046faef6a176d4d7ca51ab9dd839be628 autocorr-cs-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 94c1f66590327bf5087437f851b94db3ea3634473ad1c057ce53a8fccf67bfde autocorr-da-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 90249970350dfb95a048481067312056c88957871f7353d13ec70f64663485b0 autocorr-de-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 7b249ee366b6c88eccc034ca5f56e4d67844f7349c05f997cf44416fc184e09e autocorr-en-5.3.6.1-28.el7_9.noarch.rpm SHA-256: b2ddd0db4892b780633895fb092d49e09df39f84d03854c332e851e98a5c3c83 autocorr-es-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 2f767b800bea0efe0dc639fed222c5cbcf88b9ceca30ca79272db030f2eaf8e2 autocorr-fa-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 618927cc5899d597bddecb83210ae85018414e0ed51cf549c01d4aa671e9294e autocorr-fi-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 0eaee18d41420d1ce923148bc20adbd3db6128452e79221278c4aed07ae58ac2 autocorr-fr-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 68cd9d810acbbc31f64cd98874900a3ecf3904192896a511dbbbc82a3d611c2f autocorr-ga-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 4f065e64dd10079eada3f24e4489260774ac22a73aabfa80a7daf372c8dd5f24 autocorr-hr-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 71a891b0f57ebd79f4131b7b178f4bfd54bad89a08a5c4af277c9b9e04320ae3 autocorr-hu-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 443e9577b0dc17c8d9476aac1f742fb409af345a8646291085615d78287fe6a8 autocorr-is-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 5b125c68c02b89c0a430e918389d4f53d88d13fa9d2bd4b3f00799a71d25e615 autocorr-it-5.3.6.1-28.el7_9.noarch.rpm SHA-256: feba593d2074777e0f41ced8b07e9a03218d2270f1695e2a8483d56363e59b96 autocorr-ja-5.3.6.1-28.el7_9.noarch.rpm SHA-256: e449b1c3336370d2aab47e2f23fe9786356e9a43c0a047c36420336bd3e1875f autocorr-ko-5.3.6.1-28.el7_9.noarch.rpm SHA-256: d666cf7e77dca081bc17e970be39342e8b160f8b0625ff571612cc7c9fe5148d autocorr-lb-5.3.6.1-28.el7_9.noarch.rpm SHA-256: e572b8de7d4143203d5a47a759e584a99f0fe5958d50c3eb8d6102c7b42160d3 autocorr-lt-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 872691087b9dcefbdf98174f6cafbf743a65300635731b533c1ac75882e28584 autocorr-mn-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 07a29e8938a1de58cbbddd4431f0394982760bb9e8435e2624bad0767e898f13 autocorr-nl-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 545cf9b8e2771c0cb67b712bca90510c2cfb1808aaf4bcd091da8cc4afa41ee0 autocorr-pl-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 1abf7fd9cbd6fe97868c452f92b70850c51a35935745efdc390f4f17d9830161 autocorr-pt-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 465d14c45eabd5be3cf6ce0678815f69b935ce2acd70fd27bad0b9284d6ca932 autocorr-ro-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 515cf76b3990a8573b51bb6e65becd485553f6af1664dbf643f14df2e84fc9ad autocorr-ru-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 77b986c296d4b1afa605dcf0227fc10d7e590defb3f87f534d1746c86c4c2e9a autocorr-sk-5.3.6.1-28.el7_9.noarch.rpm SHA-256: da3c13a4fa63c629ff7704fe0b57855588ff1710c0be8091b8d12d0c0868c8b6 autocorr-sl-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 591623f115c4d4787de6bc5fe9c28026884d179525befa0d030300e6af32156a autocorr-sr-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 46044f7bb396d2de981b635e282d5f8fb24065f53d890c3f29c665e748ac41f9 autocorr-sv-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 50cd9bcbe0e915da9f299d6eeda7b1ce31820987bda29eb9c2fb3c30cf1ffd1c autocorr-tr-5.3.6.1-28.el7_9.noarch.rpm SHA-256: c90e4dbc95fd0fda1111322ac17b9c3ad0a4adba07ffcc2783c5c713c806d6ec autocorr-vi-5.3.6.1-28.el7_9.noarch.rpm SHA-256: c68821837b310603f28b84aed85062080eda2b8598c20560a4ab1269674323f5 autocorr-zh-5.3.6.1-28.el7_9.noarch.rpm SHA-256: 176fe99df27882fc6b63d379f5d8d9a849ee5973ab7117b207dc27ffc01f4d79 libreoffice-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 1605bf8f7bc3e17ce71d3951d052bd681abab93baea0da83edc29148d846a4f4 libreoffice-base-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: b2c5ad6c404ea58eb408dd0c7c86bb3fc41ee32c817b206035ee23db6ca26fad libreoffice-bsh-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 6a5f251fe4b73762975887b02beea6990c48c8ca8ab3e423a76544f8404a9a18 libreoffice-calc-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 4df3d1926317d4bf809b2eaf10ae8ec6f38fa38b014fe0f7a4cd6c0de814d85a libreoffice-core-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 3769bd1bbba9c17cd479a2d009c3f71d84f82e50cf8e1b950449e4e69f396548 libreoffice-data-5.3.6.1-28.el7_9.noarch.rpm SHA-256: c280bd8825da030ba059207e6a0eba487beccad9d90dbe366f9c1e4009816722 libreoffice-debuginfo-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: b9f7e5ef8ffc46221c20f59e3843e7adcc774daab9ce63d4d0b9d7ba01c95610 libreoffice-draw-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 264907039f6cacfb282e56f7c79de8d4620a262b8bed2822b6b33c9cfd1a8e3c libreoffice-emailmerge-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 78ead2e90387e2dc994666f2522ab631979d756c9bc15d20d0762439f1266c51 libreoffice-filters-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: e35e73e168e1a27e13a141535f82027e227ca886382d334942e1db85ce45b33e libreoffice-gdb-debug-support-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: c024db0ffbaa4dfd948a60df0d6edbab177b59ffef03d851afe20107083598f1 libreoffice-glade-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: cd27cf259715b3319c4c79d7ce60ce385d4bb921c1026659d6c22604c9c217b5 libreoffice-graphicfilter-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: fdb80c3eaf0392c19a223dcd90745fa83da533f3d3a716976050dabbec903614 libreoffice-gtk2-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 84bee9b631c7aac390f42246ef4b8a26506ed6017e053d58221c38e191444bcb libreoffice-gtk3-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 6741d98cad191e855ac0c01a89cd6ae711b48b1f0d12385a3bdb351fb090d687 libreoffice-help-ar-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 8e884719fa57cb3ecc0dc3cd37c824faefab8f291fa78496516311b33009cc5a libreoffice-help-bg-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 1efa3c5481c2e1346fdba0ecc5be21d40f168e790a3e44bea5576798655db886 libreoffice-help-bn-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: f1acc23f624ed97e9ed38054410f466bc3de8b3479793e66d64816c20529efbf libreoffice-help-ca-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 7bf44fb78658851ded0176c0bd3d99556c25acdaa77fec4312c22f4765e492f9 libreoffice-help-cs-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 11f0e5773b0330fae8c27a2cd4d2d19320744c9cb57f43eab4c29f5116688ae1 libreoffice-help-da-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 535e8e2382f8ce1f21aecb130da2e473df339963ef3e50577fcebadeecd454c7 libreoffice-help-de-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 2c7f205f06a5fc9a29f5e60af6277989360c3a61ed7cca36bd60232cc7c1fe6f libreoffice-help-dz-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 4df0c752ee20cd3903e4d1dee28aec8a8457df928a2df79321c3ebabc93fa42a libreoffice-help-el-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 63d80d441d8cba89558c9bcea5feabbd94190faf66a07db10083e98469edabfe libreoffice-help-es-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: aac5a3c1e63103425b79295a19b969594e89fc7188c1a4fbf4648828525a420a libreoffice-help-et-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 76af09cf9712d6d7522f69c3cd886349b5a1c0c3b4f8e8b9e152846bbabb1f66 libreoffice-help-eu-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 804007fb990f7b29b8b4558eefbe3929bf1f21a2c54a95d56d21299aefdb5b14 libreoffice-help-fi-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 1be47fed39c2565b7d5f1053a53ad47ecf5d257780410e35a84d0e18a721e5f4 libreoffice-help-fr-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 8403abe8adca87eb01f4000be5358273c4acf369a1d258ea0a4abdc677c9edeb libreoffice-help-gl-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 5d2b94fcbc0c3fda29f1cac2f43d10cabe5a9c00b808a10a9e041ff66c4359e1 libreoffice-help-gu-5.3.6.1-28.el7_9.x86_64.rpm SHA-256: 59eecc72f137a9a87040abf95dd9b89eb53d67fa04776e965ba54dab9061