rpm package
almalinux/pentaho-libxml
pkg:rpm/almalinux/pentaho-libxml
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-63277 | Hig | — | < 1.1.3-20.el8_10 | 1.1.3-20.el8_10 | Oct 5, 2026 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed ver | |
| CVE-2026-63276 | Med | — | < 1.1.3-20.el8_10 | 1.1.3-20.el8_10 | Sep 22, 2026 | LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no | |
| CVE-2026-63275 | Med | — | < 1.1.3-20.el8_10 | 1.1.3-20.el8_10 | Sep 22, 2026 | LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed ver | |
| CVE-2026-63274 | Med | — | < 1.1.3-20.el8_10 | 1.1.3-20.el8_10 | Sep 22, 2026 | LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote pas |
- affected < 1.1.3-20.el8_10fixed 1.1.3-20.el8_10
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed ver
- affected < 1.1.3-20.el8_10fixed 1.1.3-20.el8_10
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no
- affected < 1.1.3-20.el8_10fixed 1.1.3-20.el8_10
LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed ver
- affected < 1.1.3-20.el8_10fixed 1.1.3-20.el8_10
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote pas