Back Linuxsecurity

Ubuntu 26.04 LibreOffice Significant DoS Flaw USN-8352

Linuxsecurity •LinuxSecurity Advisories • June 1, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 Summary: LibreOffice could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - libreoffice: Office productivity suite Details: Duc Anh Nguyen discovered that LibreOffice incorrectly handled mismatched encryption salt parameters in crafted OOXML documents. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libreoffice 4:26.2.3.2-0ubuntu0.26.04.1 Ubuntu 25.10 libreoffice 4:25.8.7-0ubuntu0.25.10.1 This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8352-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical LibreOffice Vulnerability Allows DoS and Potential Code Execution A significant vulnerability in LibreOffice has been identified, allowing attackers to crash the application or execute arbitrary code by opening specially crafted OOXML documents. Discovered by Duc Anh Nguyen, this flaw arises from the incorrect handling of mismatched encryption salt parameters. Affected systems include Ubuntu 26.04 LTS and Ubuntu 25.10. The vulnerability could lead to a denial of service (DoS) or unauthorized code execution, posing a serious risk to users. Users are advised to update their systems to the latest package versions to mitigate this risk. The update includes additional bug fixes and is part of a new upstream release. Ubuntu Pro offers extended security coverage for affected packages. 2 sources 72

Extracted Entities

Ubuntu 26.04 LibreOffice Significant DoS Flaw USN-8352

The full story

Extracted Entities

Attack Types (1)

Companies (1)

IP Addresses (1)

MITRE ATT&CK (1)

Platforms (1)