Moderate Security Update for LibreOffice: Denial of Service Vulnerability
Summary
ALSA-2026:28922: Moderate: libreoffice security update. Affects autocorr-af versions < 1:6.4.7.2-20.el8_10.alma.1. Fixed in 1:6.4.7.2-20.el8_10.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreOffice is an open-source office productivity suite that includes applications for word processing, spreadsheets, presentations, and more. It serves as a powerful alternative to other office suites, providing enhanced features and compatibility. However, it is susceptible to security vulnerabilities, including the recent Denial of Service issue identified in crafted OOXML documents.
Vulnerability Detail
The vulnerability (CVE-2026-4430) arises from the processing of specially crafted OOXML documents, which can lead to a Denial of Service condition. Attackers can exploit this flaw to crash the LibreOffice application, potentially leading to data loss or disruption of services. The issue is rooted in the way LibreOffice handles certain document formats, making it critical for users to apply the necessary updates to mitigate risks.
How To Fix
Minimum fixed version
1:6.4.7.2-20.el8_10.alma.1
This is the first release that contains the fix.
sudo dnf update autocorr-afTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, avoid opening untrusted OOXML documents until the update has been applied. Additionally, consider using alternative document formats that are not affected by this vulnerability.
Conclusion
The recent vulnerability in LibreOffice (CVE-2026-4430) poses a risk of Denial of Service through crafted OOXML documents. Users are urged to update their installations to the patched version to mitigate this risk. For those unable to update immediately, avoiding untrusted documents is recommended.
See every vulnerability recorded for autocorr-af →
FAQ
CVE-2026-4430 is a vulnerability in LibreOffice that allows attackers to cause a Denial of Service by exploiting crafted OOXML documents.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update immediately, avoid opening any untrusted OOXML documents to minimize the risk of exploitation.
While it is classified as moderate, it can lead to significant disruptions, so it is important to address it promptly.
The primary impact is a Denial of Service, which can crash the application and potentially lead to data loss.
Related vulnerabilities
Recent vulnerabilities recorded for autocorr-af.
