libreoffice - Debian Package Tracker

general

source: libreoffice (main)
version: 4:26.8.0.3-2
maintainer: Debian LibreOffice Maintainers (archive) (DMD)
uploaders: Chris Halls [DMD] – Rene Engelhard [DMD]
arch: all alpha amd64 arm64 armel armhf hppa i386 ia64 loong64 m68k mips mips64 mips64el mipsel powerpc ppc64 ppc64el riscv64 s390x sparc sparc64
std-ver: 4.0.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1:7.0.4-4+deb11u10
o-o-sec: 1:7.0.4-4+deb11u13
o-o-p-u: 1:7.0.4-4+deb11u10
oldstable: 4:7.4.7-1+deb12u14
old-sec: 4:7.4.7-1+deb12u13
old-bpo: 4:25.2.3-2+deb13u5~bpo12+1
old-p-u: 4:7.4.7-1+deb12u14
stable: 4:25.2.3-2+deb13u6
stable-sec: 4:25.2.3-2+deb13u5
stable-bpo: 4:26.8.0.3-2~bpo13+1
testing: 4:26.8.0.3-2
unstable: 4:26.8.0.3-2

versioned links

1:7.0.4-4+deb11u10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:7.0.4-4+deb11u13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:7.4.7-1+deb12u13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:7.4.7-1+deb12u14: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:7.5.9~rc1-1~bpo12+2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:24.2.5-1~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:25.2.3-2+deb13u5~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:25.2.3-2+deb13u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:25.2.3-2+deb13u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:26.2.4.2-1~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:26.8.0.3-2~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:26.8.0.3-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

fonts-opensymbol
gir1.2-lokdocview-0.1
liblibreoffice-java (1 bugs: 0, 1, 0, 0)
liblibreofficekitgtk
libofficebean-java
libreoffice (32 bugs: 0, 24, 8, 0)
libreoffice-base (8 bugs: 0, 7, 1, 0)
libreoffice-base-core
libreoffice-base-drivers
libreoffice-base-nogui
libreoffice-calc (11 bugs: 0, 8, 3, 0)
libreoffice-calc-nogui
libreoffice-common (16 bugs: 0, 8, 8, 0)
libreoffice-core (4 bugs: 0, 4, 0, 0)
libreoffice-core-nogui
libreoffice-dev
libreoffice-dev-common
libreoffice-dev-doc
libreoffice-dev-gui
libreoffice-draw (2 bugs: 0, 2, 0, 0)
libreoffice-draw-nogui
libreoffice-evolution
libreoffice-gnome
libreoffice-gtk3 (7 bugs: 0, 7, 0, 0)
libreoffice-gtk4 (1 bugs: 0, 1, 0, 0)
libreoffice-help-ca
libreoffice-help-common
libreoffice-help-cs
libreoffice-help-da
libreoffice-help-de
libreoffice-help-dz
libreoffice-help-el
libreoffice-help-en-gb
libreoffice-help-en-us (1 bugs: 0, 0, 1, 0)
libreoffice-help-es
libreoffice-help-et
libreoffice-help-eu
libreoffice-help-fi
libreoffice-help-fr
libreoffice-help-gl
libreoffice-help-hi
libreoffice-help-hu
libreoffice-help-id
libreoffice-help-it
libreoffice-help-ja
libreoffice-help-km
libreoffice-help-ko
libreoffice-help-nl
libreoffice-help-om
libreoffice-help-pl
libreoffice-help-pt
libreoffice-help-pt-br
libreoffice-help-ru
libreoffice-help-sk
libreoffice-help-sl
libreoffice-help-sv
libreoffice-help-tr
libreoffice-help-vi
libreoffice-help-zh-cn
libreoffice-help-zh-tw
libreoffice-impress (5 bugs: 0, 4, 1, 0)
libreoffice-impress-nogui
libreoffice-java-common
libreoffice-jsuno
libreoffice-kf6
libreoffice-l10n-af
libreoffice-l10n-am
libreoffice-l10n-ar
libreoffice-l10n-as
libreoffice-l10n-ast
libreoffice-l10n-be
libreoffice-l10n-bg
libreoffice-l10n-bn
libreoffice-l10n-br
libreoffice-l10n-bs
libreoffice-l10n-ca
libreoffice-l10n-cs
libreoffice-l10n-cy
libreoffice-l10n-da
libreoffice-l10n-de
libreoffice-l10n-dz
libreoffice-l10n-el
libreoffice-l10n-en-gb
libreoffice-l10n-en-za
libreoffice-l10n-eo
libreoffice-l10n-es
libreoffice-l10n-et
libreoffice-l10n-eu
libreoffice-l10n-fa
libreoffice-l10n-fi
libreoffice-l10n-fr
libreoffice-l10n-ga
libreoffice-l10n-gd
libreoffice-l10n-gl
libreoffice-l10n-gu
libreoffice-l10n-gug
libreoffice-l10n-he
libreoffice-l10n-hi
libreoffice-l10n-hr
libreoffice-l10n-hu
libreoffice-l10n-hy
libreoffice-l10n-id
libreoffice-l10n-in
libreoffice-l10n-is
libreoffice-l10n-it
libreoffice-l10n-ja (1 bugs: 0, 1, 0, 0)
libreoffice-l10n-ka
libreoffice-l10n-kk
libreoffice-l10n-km
libreoffice-l10n-kmr
libreoffice-l10n-kn
libreoffice-l10n-ko
libreoffice-l10n-lt
libreoffice-l10n-lv
libreoffice-l10n-mk
libreoffice-l10n-ml
libreoffice-l10n-mn
libreoffice-l10n-mr
libreoffice-l10n-nb
libreoffice-l10n-ne
libreoffice-l10n-nl
libreoffice-l10n-nn
libreoffice-l10n-nr
libreoffice-l10n-nso
libreoffice-l10n-oc
libreoffice-l10n-om
libreoffice-l10n-or
libreoffice-l10n-pa-in
libreoffice-l10n-pl
libreoffice-l10n-pt
libreoffice-l10n-pt-br
libreoffice-l10n-ro
libreoffice-l10n-ru
libreoffice-l10n-rw
libreoffice-l10n-si
libreoffice-l10n-sk
libreoffice-l10n-sl
libreoffice-l10n-sr
libreoffice-l10n-ss
libreoffice-l10n-st
libreoffice-l10n-sv
libreoffice-l10n-szl
libreoffice-l10n-ta
libreoffice-l10n-te
libreoffice-l10n-tg
libreoffice-l10n-th
libreoffice-l10n-tl
libreoffice-l10n-tn
libreoffice-l10n-tr
libreoffice-l10n-ts
libreoffice-l10n-ug
libreoffice-l10n-uk
libreoffice-l10n-uz
libreoffice-l10n-ve
libreoffice-l10n-vi
libreoffice-l10n-xh
libreoffice-l10n-za
libreoffice-l10n-zh-cn
libreoffice-l10n-zh-tw
libreoffice-l10n-zu
libreoffice-librelogo
libreoffice-math (1 bugs: 0, 0, 1, 0)
libreoffice-math-nogui
libreoffice-nlpsolver
libreoffice-nogui
libreoffice-plasma
libreoffice-qt6 (1 bugs: 0, 1, 0, 0)
libreoffice-report-builder
libreoffice-report-builder-bin
libreoffice-report-builder-bin-nogui
libreoffice-rust-uno-example
libreoffice-script-provider-bsh
libreoffice-script-provider-js
libreoffice-script-provider-python
libreoffice-sdbc-firebird
libreoffice-sdbc-hsqldb
libreoffice-sdbc-mysql
libreoffice-sdbc-postgresql
libreoffice-smoketest-data
libreoffice-style-breeze
libreoffice-style-colibre
libreoffice-style-elementary
libreoffice-style-karasa-jaga
libreoffice-style-sifr
libreoffice-style-sukapura
libreoffice-subsequentcheckbase
libreoffice-uiconfig-base
libreoffice-uiconfig-calc
libreoffice-uiconfig-common
libreoffice-uiconfig-draw
libreoffice-uiconfig-impress
libreoffice-uiconfig-math
libreoffice-uiconfig-report-builder
libreoffice-uiconfig-writer
libreoffice-wiki-publisher
libreoffice-writer (41 bugs: 0, 31, 10, 0)
libreoffice-writer-nogui
libreofficekit-data
libreofficekit-dev
libreofficekit-dev-gtk
librust-rust-uno-dev
libuno-cppu3t64
libuno-cppuhelpergcc3-3t64
libuno-purpenvhelpergcc3-3t64
libuno-sal3t64
libuno-salhelpergcc3-3t64
libunoloader-java
python3-access2base
python3-scriptforge
python3-uno
uno-libs-private
ure
ure-java

action needed

8 security issues in bullseye high

There are 8 open security issues in bullseye.

8 important issues:

CVE-2026-4430: Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.
CVE-2026-6039: LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose point count exceeded the 16-bit range was written past the end of the buffer. In fixed versions such oversized polylines are rejected.
CVE-2026-6040: A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memory outside that string. In fixed versions the position is bounds-checked before use.
CVE-2026-6045: LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow, so a small buffer was allocated and then filled as if it were large, writing past its end. In fixed versions the blend-point count is checked against the data actually available before allocating.
CVE-2026-6047: LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed past the end of the allocation. In fixed versions the type is checked before the write.
CVE-2026-8356: LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose combined colour counts exceeded the table size wrote past the end of the tables on the stack. In fixed versions the unused second pass is no longer read into those tables.
CVE-2026-8357: LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.
CVE-2026-8358: LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

Created: 2026-05-07 Last update: 2026-09-01 05:00

lintian reports 2 errors and 53 warnings high

Lintian reports 2 errors and 53 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-08-27 Last update: 2026-08-27 10:49

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2026-09-02 Last update: 2026-09-10 17:30

Depends on packages which need a new maintainer normal

The packages that libreoffice depends on which need a new maintainer are:

openclipart (#690518)
- Suggests: openclipart-libreoffice
openoffice.org-thesaurus-pl (#1142358)
- Suggests: mythes-pl
openoffice.org-hyphenation-pl (#1142357)
- Suggests: hyphen-pl

Created: 2019-11-22 Last update: 2026-09-10 15:30

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2026-03-19 Last update: 2026-09-10 14:31

Multiarch hinter reports 18 issue(s) normal

There are issues with the multiarch metadata for this package.

libreoffice-dev-common could be marked Multi-Arch: foreign
libreoffice-dev-doc could be marked Multi-Arch: foreign
libreoffice-plasma could be marked Multi-Arch: foreign
libreoffice-smoketest-data could be marked Multi-Arch: foreign
libreoffice-style-colibre could be marked Multi-Arch: foreign
libreoffice-style-karasa-jaga could be marked Multi-Arch: foreign
libreoffice-style-sukapura could be marked Multi-Arch: foreign
libreoffice-uiconfig-base could be marked Multi-Arch: foreign
libreoffice-uiconfig-calc could be marked Multi-Arch: foreign
libreoffice-uiconfig-common could be marked Multi-Arch: foreign
libreoffice-uiconfig-draw could be marked Multi-Arch: foreign
libreoffice-uiconfig-impress could be marked Multi-Arch: foreign
libreoffice-uiconfig-math could be marked Multi-Arch: foreign
libreoffice-uiconfig-report-builder could be marked Multi-Arch: foreign
libreoffice-uiconfig-writer could be marked Multi-Arch: foreign
libreofficekit-data could be marked Multi-Arch: foreign
libreofficekit-dev could be marked Multi-Arch: foreign
libunoloader-java could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2026-09-10 12:05

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 4:26.8.0.3-3, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit d089316de9e3d476a273de14b82307b7c4cd2742
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Sep 6 15:23:31 2026 +0200

    fix indent

commit 764da5ad3b873f52fde535e49bc118202d4607ce
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Tue Sep 1 05:21:13 2026 +0200

    actually set ENABLE_PARQUET_FILTER=n for trixie-backports

commit e0d3b89e7580e186d039a675adeac8e4a44e9a4b
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Thu Aug 27 22:42:19 2026 +0200

    debian/watch: track releases/release candidates again

https://salsa.debian.org/api/v4/projects/libreoffice-team%2Flibreoffice%2Flibreoffice API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2026-08-27 Last update: 2026-09-08 06:03

AppStream hints: 6 warnings normal

AppStream found metadata issues for packages:

libreoffice-base: 1 warning
libreoffice-calc: 1 warning
libreoffice-draw: 1 warning
libreoffice-math: 1 warning
libreoffice-writer: 1 warning
libreoffice-impress: 1 warning

You should get rid of them to provide more metadata about this software.

Created: 2020-06-01 Last update: 2022-01-21 06:05

debian/patches: 48 patches to forward upstream low

Among the 49 debian patches available in version 4:26.8.0.3-2 of the package, we noticed the following issues:

48 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-08-27 11:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.0.1).

Created: 2017-08-31 Last update: 2026-08-27 06:21

testing migrations

This package will soon be part of the auto-xmlsec1 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-abseil transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2026-09-01] Accepted libreoffice 4:26.8.0.3-2~bpo13+1 (source all amd64) into stable-backports (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-09-01] libreoffice 4:26.8.0.3-2 MIGRATED to testing (Debian testing watch)
[2026-08-26] Accepted libreoffice 4:26.8.0.3-2 (source) into unstable (Rene Engelhard)
[2026-08-21] Accepted libreoffice 4:26.8.0.3-1 (source) into experimental (Rene Engelhard)
[2026-08-11] libreoffice 4:26.2.5.2-2 MIGRATED to testing (Debian testing watch)
[2026-08-10] Accepted libreoffice 4:26.2.5.2-2~bpo13+1 (source) into stable-backports (Rene Engelhard)
[2026-08-05] Accepted libreoffice 4:26.2.5.2-2 (source) into unstable (Rene Engelhard)
[2026-08-03] Accepted libreoffice 4:26.8.0.2-1 (source) into experimental (Rene Engelhard)
[2026-08-03] Accepted libreoffice 4:26.2.5.2-1 (source) into unstable (Rene Engelhard)
[2026-07-14] libreoffice 4:26.2.4.2-2 MIGRATED to testing (Debian testing watch)
[2026-07-14] Accepted libreoffice 4:26.8.0.1-1 (source) into experimental (Rene Engelhard)
[2026-06-30] Accepted libreoffice 4:7.4.7-1+deb12u14 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-06-30] Accepted libreoffice 4:25.2.3-2+deb13u6 (source) into proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-06-28] Accepted libreoffice 4:26.2.4.2-2 (source) into unstable (Rene Engelhard)
[2026-06-21] Accepted libreoffice 4:26.8.0.0.beta1-1 (source) into experimental (Rene Engelhard)
[2026-06-19] Accepted libreoffice 4:7.4.7-1+deb12u13 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-06-17] Accepted libreoffice 4:7.4.7-1+deb12u13 (source) into oldstable-security (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-06-16] Accepted libreoffice 4:25.2.3-2+deb13u5 (source) into proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-06-15] Accepted libreoffice 4:25.2.3-2+deb13u5~bpo12+1 (source) into oldstable-backports (Rene Engelhard)
[2026-06-15] Accepted libreoffice 4:25.2.3-2+deb13u5 (source) into stable-security (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-06-07] libreoffice 4:26.2.4.2-1 MIGRATED to testing (Debian testing watch)
[2026-06-07] Accepted libreoffice 4:26.2.4.2-1~bpo13+1 (source) into stable-backports (Rene Engelhard)
[2026-06-01] Accepted libreoffice 4:26.8.0.0.alpha1-4 (source) into experimental (Rene Engelhard)
[2026-06-01] Accepted libreoffice 4:26.2.4.2-1 (source) into unstable (Rene Engelhard)
[2026-05-29] Accepted libreoffice 4:26.8.0.0.alpha1-3 (source) into experimental (Rene Engelhard)
[2026-05-29] Accepted libreoffice 4:26.8.0.0.alpha1-2 (source) into experimental (Rene Engelhard)
[2026-05-28] Accepted libreoffice 4:26.8.0.0.alpha1-1 (source all amd64) into experimental (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-05-17] Accepted libreoffice 4:26.2.4.1-1 (source) into experimental (Rene Engelhard)
[2026-05-08] Accepted libreoffice 4:7.4.7-1+deb12u12 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
[2026-05-07] Accepted libreoffice 4:7.4.7-1+deb12u11 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)

bugs [bug history graph]

all: 142 151
RC: 0
I&N: 102 109
M&W: 39 41
F&P: 1
patch: 1

links

homepage
lintian (2, 53)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
screenshots
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4:26.8.0.3-0ubuntu1
495 bugs (4 patches)
patches for 4:26.8.0.3-0ubuntu1