{"schema_version": "1.7.0", "id": "RLSA-2026:88164", "modified": "2026-10-23T06:53:20.384287Z", "published": "2026-10-23T06:42:37.217759Z", "upstream": ["CVE-2026-63274", "CVE-2026-63275", "CVE-2026-63276", "CVE-2026-63277"], "summary": "Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update", "details": "SAC is a standard interface for CSS parsers, intended to work with CSS1, CSS2, CSS3 and other CSS derived languages.\n\nSecurity Fix(es):\n\n* libreoffice: heap buffer overflow in PDF import stream handling (CVE-2026-63274)\n\n* libreoffice: stack buffer overflow in CFF to Type 1 font conversion (CVE-2026-63276)\n\n* libreoffice: stack buffer overflow in CFF font hint handling (CVE-2026-63275)\n\n* libreoffice: libreoffice: Arbitrary code execution via remote Java database driver (CVE-2026-63277)\n\nBug Fix(es) and Enhancement(s):\n\n* [libbase] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275415)\n\n* [flute] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275416)\n\n* [libserializer] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275417)\n\n* [libloader] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275418)\n\n* [libformula] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275419)\n\n* [librepository] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275420)\n\n* [libfonts] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275421)\n\n* [liblayout] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275422)\n\n* [pentaho-libxml] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275423)\n\n* [pentaho-reporting-flow-engine] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-275424)\n\n* [sac] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-277813)\n\n* [libreoffice] LibreOffice packages using EOL Java (after November 2026) (JIRA:Rocky Linux-260518)\n\n* [Rocky Linux 8.10] Base Report Wizard fails with packaged Pentaho reporting engine (JIRA:Rocky Linux-286491)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "severity": [{"type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}], "affected": [{"package": {"ecosystem": "Rocky Linux:8", "name": "flute", "purl": "pkg:rpm/rocky-linux/flute?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.3.0-19.OOo31.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "libbase", "purl": "pkg:rpm/rocky-linux/libbase?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.1.3-21.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "libfonts", "purl": "pkg:rpm/rocky-linux/libfonts?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.1.3-23.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "libformula", "purl": "pkg:rpm/rocky-linux/libformula?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.1.3-20.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "liblayout", "purl": "pkg:rpm/rocky-linux/liblayout?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:0.2.10-19.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "libloader", "purl": "pkg:rpm/rocky-linux/libloader?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.1.3-19.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "libreoffice", "purl": "pkg:rpm/rocky-linux/libreoffice?distro=rocky-linux-8&epoch=1"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "1:7.1.8.1-3.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "librepository", "purl": "pkg:rpm/rocky-linux/librepository?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.1.3-19.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "libserializer", "purl": "pkg:rpm/rocky-linux/libserializer?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.1.2-20.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "pentaho-libxml", "purl": "pkg:rpm/rocky-linux/pentaho-libxml?distro=rocky-linux-8&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:1.1.3-20.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}, {"package": {"ecosystem": "Rocky Linux:8", "name": "pentaho-reporting-flow-engine", "purl": "pkg:rpm/rocky-linux/pentaho-reporting-flow-engine?distro=rocky-linux-8&epoch=1"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "1:0.9.4-17.el8_10"}], "database_specific": {"yum_repository": "AppStream"}}]}], "references": [{"type": "ADVISORY", "url": "https://errata.rockylinux.org/RLSA-2026:88164"}, {"type": "REPORT", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2537936"}, {"type": "REPORT", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538242"}, {"type": "REPORT", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538363"}, {"type": "REPORT", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545885"}, {"type": "ADVISORY", "url": "https://access.redhat.com/errata/RHSA-2026:88164"}], "credits": [{"name": "Rocky Enterprise Software Foundation"}, {"name": "Red Hat"}], "database_specific": {"license": "CC-BY-4.0", "license_url": "https://creativecommons.org/licenses/by/4.0/", "source_advisory": "RHSA-2026:88164"}}