Debian Package Tracker
Register | Log in
Subscribe

libreoffice

office productivity suite (metapackage)

Choose email to subscribe with

general
  • source: libreoffice (main)
  • version: 4:26.2.4.2-2
  • maintainer: Debian LibreOffice Maintainers (archive) (DMD)
  • uploaders: Rene Engelhard [DMD] – Chris Halls [DMD]
  • arch: all alpha amd64 arm64 armel armhf hppa i386 ia64 loong64 m68k mips mips64 mips64el mipsel powerpc ppc64 ppc64el riscv64 s390x sparc sparc64
  • std-ver: 4.0.1
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 1:7.0.4-4+deb11u10
  • o-o-sec: 1:7.0.4-4+deb11u13
  • o-o-p-u: 1:7.0.4-4+deb11u10
  • oldstable: 4:7.4.7-1+deb12u12
  • old-sec: 4:7.4.7-1+deb12u13
  • old-bpo: 4:25.2.3-2+deb13u5~bpo12+1
  • old-p-u: 4:7.4.7-1+deb12u13
  • stable: 4:25.2.3-2+deb13u4
  • stable-sec: 4:25.2.3-2+deb13u5
  • stable-bpo: 4:26.2.4.2-1~bpo13+1
  • stable-p-u: 4:25.2.3-2+deb13u5
  • testing: 4:26.2.4.2-1
  • unstable: 4:26.2.4.2-2
  • exp: 4:26.8.0.0.beta1-1
versioned links
  • 1:7.0.4-4+deb11u10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:7.0.4-4+deb11u13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:7.4.7-1+deb12u12: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:7.4.7-1+deb12u13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:7.5.9~rc1-1~bpo12+2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:24.2.5-1~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:25.2.3-2+deb13u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:25.2.3-2+deb13u5~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:25.2.3-2+deb13u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:26.2.4.2-1~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:26.2.4.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:26.2.4.2-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:26.8.0.0.alpha1-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4:26.8.0.0.beta1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • fonts-opensymbol
  • gir1.2-lokdocview-0.1
  • liblibreoffice-java (1 bugs: 0, 1, 0, 0)
  • liblibreofficekitgtk
  • libofficebean-java
  • libreoffice (32 bugs: 0, 24, 8, 0)
  • libreoffice-base (8 bugs: 0, 7, 1, 0)
  • libreoffice-base-core
  • libreoffice-base-drivers
  • libreoffice-base-nogui
  • libreoffice-calc (11 bugs: 0, 8, 3, 0)
  • libreoffice-calc-nogui
  • libreoffice-common (15 bugs: 0, 7, 8, 0)
  • libreoffice-core (4 bugs: 1, 3, 0, 0)
  • libreoffice-core-nogui
  • libreoffice-dev
  • libreoffice-dev-common
  • libreoffice-dev-doc
  • libreoffice-dev-gui
  • libreoffice-draw (1 bugs: 0, 1, 0, 0)
  • libreoffice-draw-nogui
  • libreoffice-evolution
  • libreoffice-gnome
  • libreoffice-gtk3 (7 bugs: 0, 7, 0, 0)
  • libreoffice-gtk4 (1 bugs: 0, 1, 0, 0)
  • libreoffice-help-ca
  • libreoffice-help-common
  • libreoffice-help-cs
  • libreoffice-help-da
  • libreoffice-help-de
  • libreoffice-help-dz
  • libreoffice-help-el
  • libreoffice-help-en-gb
  • libreoffice-help-en-us (1 bugs: 0, 0, 1, 0)
  • libreoffice-help-es
  • libreoffice-help-et
  • libreoffice-help-eu
  • libreoffice-help-fi
  • libreoffice-help-fr
  • libreoffice-help-gl
  • libreoffice-help-hi
  • libreoffice-help-hu
  • libreoffice-help-id
  • libreoffice-help-it
  • libreoffice-help-ja
  • libreoffice-help-km
  • libreoffice-help-ko
  • libreoffice-help-nl
  • libreoffice-help-om
  • libreoffice-help-pl
  • libreoffice-help-pt
  • libreoffice-help-pt-br
  • libreoffice-help-ru
  • libreoffice-help-sk
  • libreoffice-help-sl
  • libreoffice-help-sv
  • libreoffice-help-tr
  • libreoffice-help-vi
  • libreoffice-help-zh-cn
  • libreoffice-help-zh-tw
  • libreoffice-impress (5 bugs: 0, 4, 1, 0)
  • libreoffice-impress-nogui
  • libreoffice-java-common
  • libreoffice-kf6
  • libreoffice-l10n-af
  • libreoffice-l10n-am
  • libreoffice-l10n-ar
  • libreoffice-l10n-as
  • libreoffice-l10n-ast
  • libreoffice-l10n-be
  • libreoffice-l10n-bg
  • libreoffice-l10n-bn
  • libreoffice-l10n-br
  • libreoffice-l10n-bs
  • libreoffice-l10n-ca
  • libreoffice-l10n-cs
  • libreoffice-l10n-cy
  • libreoffice-l10n-da
  • libreoffice-l10n-de
  • libreoffice-l10n-dz
  • libreoffice-l10n-el
  • libreoffice-l10n-en-gb
  • libreoffice-l10n-en-za
  • libreoffice-l10n-eo
  • libreoffice-l10n-es
  • libreoffice-l10n-et
  • libreoffice-l10n-eu
  • libreoffice-l10n-fa
  • libreoffice-l10n-fi
  • libreoffice-l10n-fr
  • libreoffice-l10n-ga
  • libreoffice-l10n-gd
  • libreoffice-l10n-gl
  • libreoffice-l10n-gu
  • libreoffice-l10n-gug
  • libreoffice-l10n-he
  • libreoffice-l10n-hi
  • libreoffice-l10n-hr
  • libreoffice-l10n-hu
  • libreoffice-l10n-hy
  • libreoffice-l10n-id
  • libreoffice-l10n-in
  • libreoffice-l10n-is
  • libreoffice-l10n-it
  • libreoffice-l10n-ja (1 bugs: 0, 1, 0, 0)
  • libreoffice-l10n-ka
  • libreoffice-l10n-kk
  • libreoffice-l10n-km
  • libreoffice-l10n-kmr
  • libreoffice-l10n-kn
  • libreoffice-l10n-ko
  • libreoffice-l10n-lt
  • libreoffice-l10n-lv
  • libreoffice-l10n-mk
  • libreoffice-l10n-ml
  • libreoffice-l10n-mn
  • libreoffice-l10n-mr
  • libreoffice-l10n-nb
  • libreoffice-l10n-ne
  • libreoffice-l10n-nl
  • libreoffice-l10n-nn
  • libreoffice-l10n-nr
  • libreoffice-l10n-nso
  • libreoffice-l10n-oc
  • libreoffice-l10n-om
  • libreoffice-l10n-or
  • libreoffice-l10n-pa-in
  • libreoffice-l10n-pl
  • libreoffice-l10n-pt
  • libreoffice-l10n-pt-br
  • libreoffice-l10n-ro
  • libreoffice-l10n-ru
  • libreoffice-l10n-rw
  • libreoffice-l10n-si
  • libreoffice-l10n-sk
  • libreoffice-l10n-sl
  • libreoffice-l10n-sr
  • libreoffice-l10n-ss
  • libreoffice-l10n-st
  • libreoffice-l10n-sv
  • libreoffice-l10n-szl
  • libreoffice-l10n-ta
  • libreoffice-l10n-te
  • libreoffice-l10n-tg
  • libreoffice-l10n-th
  • libreoffice-l10n-tl
  • libreoffice-l10n-tn
  • libreoffice-l10n-tr
  • libreoffice-l10n-ts
  • libreoffice-l10n-ug
  • libreoffice-l10n-uk
  • libreoffice-l10n-uz
  • libreoffice-l10n-ve
  • libreoffice-l10n-vi
  • libreoffice-l10n-xh
  • libreoffice-l10n-za
  • libreoffice-l10n-zh-cn
  • libreoffice-l10n-zh-tw
  • libreoffice-l10n-zu
  • libreoffice-librelogo
  • libreoffice-math (1 bugs: 0, 0, 1, 0)
  • libreoffice-math-nogui
  • libreoffice-nlpsolver
  • libreoffice-nogui
  • libreoffice-plasma
  • libreoffice-qt6 (1 bugs: 0, 1, 0, 0)
  • libreoffice-report-builder
  • libreoffice-report-builder-bin
  • libreoffice-report-builder-bin-nogui
  • libreoffice-rust-uno-example
  • libreoffice-script-provider-bsh
  • libreoffice-script-provider-js
  • libreoffice-script-provider-python
  • libreoffice-sdbc-firebird
  • libreoffice-sdbc-hsqldb
  • libreoffice-sdbc-mysql
  • libreoffice-sdbc-postgresql
  • libreoffice-smoketest-data
  • libreoffice-style-breeze
  • libreoffice-style-colibre
  • libreoffice-style-elementary
  • libreoffice-style-karasa-jaga
  • libreoffice-style-sifr
  • libreoffice-style-sukapura
  • libreoffice-subsequentcheckbase
  • libreoffice-uiconfig-base
  • libreoffice-uiconfig-calc
  • libreoffice-uiconfig-common
  • libreoffice-uiconfig-draw
  • libreoffice-uiconfig-impress
  • libreoffice-uiconfig-math
  • libreoffice-uiconfig-report-builder
  • libreoffice-uiconfig-writer
  • libreoffice-wiki-publisher
  • libreoffice-writer (41 bugs: 0, 31, 10, 0)
  • libreoffice-writer-nogui
  • libreofficekit-data
  • libreofficekit-dev
  • libreofficekit-dev-gtk
  • librust-rust-uno-dev
  • libuno-cppu3t64
  • libuno-cppuhelpergcc3-3t64
  • libuno-purpenvhelpergcc3-3t64
  • libuno-sal3t64
  • libuno-salhelpergcc3-3t64
  • libunoloader-java
  • python3-access2base
  • python3-scriptforge
  • python3-uno
  • uno-libs-private
  • ure
  • ure-java
action needed
Marked for autoremoval on 28 July due to mold: #935182, #1140262 high
Version 4:26.2.4.2-1 of libreoffice is marked for autoremoval from testing on Tue 28 Jul 2026. It is affected by #935182. The removal of libreoffice will also cause the removal of (transitive) reverse dependencies: accessodf, akonadi-calendar, akonadi-calendar-tools, akonadi-import-wizard, akonadiconsole, akregator, alttab, apvlv, arc-theme, aspell-sk, awl, ayatana-indicator-a11y, baconqrcode, bamclipper, bats, bats-assert, bats-file, bats-support, blazar-nova, blends, blendsel, bpftune, budgie-desktop, budgie-desktop-environment, budgie-extras, budgie-indicator-applet, cacti, cacti-spine, calendarsupport, ceilometer, ceilometer-instance-poller, cfengine3, charliecloud, christianriesen-base32, christianriesen-otp, cinnamon, cinnamon-desktop-environment, cinnamon-screensaver, clipit, cockpit-machines, collectd, composer, condor, coyote, daps, dasprid-enum, davical, debian-astro, debian-edu, debian-edu-config, debian-electronics, debian-fbx, debian-games, debian-gis, debian-hamradio, debian-junior, debian-med, debian-multimedia, debian-pan, debian-science, debichem, diffoscope, dmarc-srg, dmaths, doctrine, dokuwiki, dokuwiki-plugins-extra, dokuwiki-templates-extra, eluceo-ical, eo-spell, esnacc, eventviews, fbless, fence-agents, fio, firebuild, forensics-extra, gnome-boxes, gnome-flashback, gnumach, golang-github-containers-toolbox, golang-github-libvirt-libvirt-go, google-recaptcha, gpredict, gpu-screen-recorder, grammalecte, grantlee-editor, gregwar-captcha, guestfs-tools, guzzle, h2orestart, herbstluftwm, ibus-typing-booster, icingaweb2-module-idoreports, icingaweb2-module-metapackages, icingaweb2-module-pdfexport, icingaweb2-module-reporting, image-factory, incidenceeditor, inkcut, ironic-python-agent, jabref, jfractionlab, jodconverter, jodconverter-cli, jp, jsonlint, kaddressbook, kalarm, kalkun, kcalutils, kdepim-addons, kdepim-runtime, keynav, kidentitymanagement, kleopatra, kmail, kmail-account-wizard, kmymoney, kontact, korganizer, kpimtextedit, ktnef, lava, less.php, libguestfs, libksieve, libnbd, libnumbertext, libphp-phpmailer, libphp-swiftmailer, libreoffice-canzeley-client, libreoffice-dictionaries, libreoffice-texmaths, libreoffice-voikko, libsys-virt-perl, libvirt, libvirt-dbus, libvirt-glib, libvirt-python, lightproof, live-tasks, lloconv, lomiri, lomiri-cloudsync-app, lomiri-docviewer-app, lomiri-keyboard, lomiri-online-accounts-plugins, lomiri-online-accounts-plugins-caldav, lomiri-online-accounts-plugins-carddav, lomiri-session, lomiri-system-settings, lomiri-system-settings-cellular, lomiri-system-settings-online-accounts, lomiri-system-settings-phone, lxappearance-obconf, lxde-common, lxde-metapackages, mailcommon, mariadb-mysql-kbs, masakari-monitors, massxpert3, matomo-component-cache, matomo-component-decompress, matomo-component-ini, matomo-component-network, matomo-device-detector, matomo-php-tracker, matthiasmullie-minify, matthiasmullie-path-converter, mbox-importer, merkuro, messagelib, meta-gnome, meta-kde, mgmt, mig, minexpert3, mom, msc-generator, msitools, munin-libvirt-plugins, myspell.pt, nanovg, napari, napari-console, napari-plugin-manager, napari-svg, nbdkit, ndpi, nova, obconf, obconf-qt, ocaml-libvirt, onboard, openbox, openclipart, openoffice.org-thesaurus-pl, orange-canvas-core, orange-widget-base, oz, parallel, parlatype-libreoffice-extension, pcp, phing, php-algo26-idna-convert, php-amqplib, php-arthurhoaro-web-thumbnailer, php-async-aws-core, php-async-aws-dynamo-db, php-async-aws-ses, php-async-aws-sns, php-async-aws-sqs, php-brick-math, php-brick-varexporter, php-cache-integration-tests, php-cache-tag-interop, php-carbon-doctrine-types, php-code-lts-u2f-php-server, php-codecoverage, php-codeigniter-framework, php-composer-ca-bundle, php-composer-class-map-generator, php-composer-metadata-minifier, php-composer-pcre, php-composer-semver, php-composer-spdx-licenses, php-composer-xdebug-handler, php-constant-time, php-crypt-gpg, php-dapphp-radius, php-datto-json-rpc, php-datto-json-rpc-http, php-db, php-deepcopy, php-dflydev-dot-access-data, php-di, php-di-invoker, php-directory-scanner, php-doctrine-annotations, php-doctrine-cache, php-doctrine-collections, php-doctrine-data-fixtures, php-doctrine-dbal, php-doctrine-deprecations, php-doctrine-event-manager, php-doctrine-inflector, php-doctrine-instantiator, php-doctrine-lexer, php-doctrine-persistence, php-dragonmantank-cron-expression, php-econea-nusoap, php-email-validator, php-embed, php-enum, php-faker, php-fig-http-message-util, php-fig-link-util, php-fig-log-test, php-file-iterator, php-font-lib, php-fruitcake-php-cors, php-getallheaders, php-getid3, php-gettext-languages, php-giggsey-libphonenumber, php-giggsey-locale, php-graham-campbell-result-type, php-guzzlehttp-promises, php-guzzlehttp-psr7, php-guzzlehttp-uri-template, php-hamcrest, php-http-httplug, php-http-interop-http-factory-tests, php-http-message-factory, php-http-promise, php-http-psr7-integration-tests, php-httpful, php-image-text, php-invoker, php-jakeasmith-http-build-url, php-jolicode-jolinotif, php-jolicode-php-os-helper, php-jshrink, php-json-schema, php-kissifrot-php-ixr, php-klogger, php-laravel-framework, php-laravel-prompts, php-laravel-serializable-closure, php-lcobucci-clock, php-lcobucci-jwt, php-league-commonmark, php-league-config, php-league-csv, php-league-flysystem, php-league-html-to-markdown, php-league-mime-type-detection, php-league-uri-src, php-log, php-lorenzo-pinky, php-malkusch-lock, php-masterminds-html5, php-matomo-doctrine-cache, php-maxmind-web-service-common, php-mikey179-vfsstream, php-ml-iri, php-ml-json-ld, php-mock, php-mock-integration, php-mock-phpunit, php-mockery, php-monolog, php-nesbot-carbon, php-net-ldap2, php-net-ldap3, php-net-sieve, php-net-url2, php-netscape-bookmark-parser, php-nette-schema, php-nette-utils, php-nikic-fast-route, php-nrk-predis, php-nunomaduro-termwind, php-nyholm-psr7, php-opis-closure, php-oscarotero-gettext, php-oscarotero-html-parser, php-parsedown, php-parsedown-extra, php-parser, php-pda-pheanstalk, php-phar-io-manifest, php-phar-io-version, php-phpdocumentor-reflection-common, php-phpdocumentor-reflection-docblock, php-phpdocumentor-type-resolver, php-phpoption, php-phpseclib, php-phpseclib3, php-phpspec-prophecy, php-phpspec-prophecy-phpunit, php-phpstan-phpdoc-parser, php-pimple, php-proxy-manager, php-psr-cache, php-psr-clock, php-psr-container, php-psr-event-dispatcher, php-psr-http-client, php-psr-http-factory, php-psr-http-message, php-psr-link, php-psr-log, php-psr-simple-cache, php-pubsubhubbub-publisher, php-ramsey-collection, php-ramsey-uuid, php-random-compat, php-react-promise, php-roundcube-rtf-html-php, php-seld-signal-handler, php-shellcommand, php-slim, php-slim-psr7, php-sparkline, php-spyc, php-staabm-side-effects-detector, php-symfony-contracts, php-symfony-mercure, php-symfony-mercure-bundle, php-symfony-polyfill, php-symfony-security-acl, php-symfony-webpack-encore-bundle, php-text-captcha, php-text-password, php-text-template, php-tijsverkoyen-css-to-inline-styles, php-timer, php-tokenizer, php-twig, php-vlucas-phpdotenv, php-voku-portable-ascii, php-webmozart-assert, php-zend-code, php-zend-stdlib, php-zeta-base, php-zeta-console-tools, php-zeta-unit-test, php-zumba-json-serializer, phpab, phpmyadmin-motranslator, phpmyadmin-shapefile, phpmyadmin-sql-parser, phpsysinfo, phpunit, phpunit-cli-parser, phpunit-comparator, phpunit-complexity, phpunit-diff, phpunit-environment, phpunit-exporter, phpunit-file-filter, phpunit-git-state, phpunit-global-state, phpunit-lines-of-code, phpunit-object-enumerator, phpunit-object-reflector, phpunit-recursion-context, phpunit-resource-operations, phpunit-type, phpunit-version, pim-data-exporter, pim-sieve-editor, plasmidid, pmacct, poke, poke-elf, profile-cleaner, prokka, prometheus-libvirt-exporter, psychtoolbox-3, ptyxis, pwdsphinx, pyenv, pyphen, pyshark, python-enaml, python-enamlx, python-xdo, qemu-web-desktop, qtvirtualkeyboard-opensource-src, r-cran-hunspell, r-cran-spelling, reprotest, roary, roundcube, roundcube-plugin-authres-status, roundcube-plugin-compose-addressbook, roundcube-plugin-contextmenu, roundcube-plugin-dovecot-impersonate, roundcube-plugin-fail2ban, roundcube-plugin-html5-notifier, roundcube-plugin-keyboard-shortcuts, roundcube-plugin-listcommands, roundcube-plugin-message-highlight, roundcube-plugin-sauserprefs, roundcube-plugin-thunderbird-labels, roundcube-plugins-extra, rss-bridge, ruby-build, ruby-fog-libvirt, ruby-libvirt, rust-presenterm, selint, sentineldl, simplesnap, spip, storm-lang, supermin, surf-display, symfony, tasksel, tcpdf, tweeper, virt-manager, virt-p2v, virt-top, virt-v2v, virt-viewer, virtnbdbackup, virtualbmc, weasyprint, wifite, winff, wireshark, wordpress, workrave, writer2latex, writer2xhtml, xdg-terminal-exec, xdotool, xsnow, zanshin, zemberek-ooo, zfs-auto-snapshot, zfs-linux, zfsnap, zsnapd. It depends (transitively) on mold, affected by #1140262. You should try to prevent the removal by fixing these RC bugs.
Created: 2026-06-28 Last update: 2026-06-29 21:00
Debci reports failed tests high
  • unstable: fail (log)
    The tests ran in 4:01:07
    Last run: 2026-06-17T14:26:24.000Z
    Previous status: unknown

  • testing: pass (log)
    The tests ran in 1:14:31
    Last run: 2026-06-24T13:59:12.000Z
    Previous status: unknown

  • stable: pass (log)
    The tests ran in 1:10:27
    Last run: 2026-05-17T09:00:54.000Z
    Previous status: unknown

Created: 2026-06-01 Last update: 2026-06-29 20:32
8 security issues in bullseye high

There are 8 open security issues in bullseye.

8 important issues:
  • CVE-2026-4430: Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.
  • CVE-2026-6039: LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose point count exceeded the 16-bit range was written past the end of the buffer. In fixed versions such oversized polylines are rejected.
  • CVE-2026-6040: A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memory outside that string. In fixed versions the position is bounds-checked before use.
  • CVE-2026-6045: LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow, so a small buffer was allocated and then filled as if it were large, writing past its end. In fixed versions the blend-point count is checked against the data actually available before allocating.
  • CVE-2026-6047: LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed past the end of the allocation. In fixed versions the type is checked before the write.
  • CVE-2026-8356: LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose combined colour counts exceeded the table size wrote past the end of the tables on the stack. In fixed versions the unused second pass is no longer read into those tables.
  • CVE-2026-8357: LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.
  • CVE-2026-8358: LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.
Created: 2026-05-07 Last update: 2026-06-28 20:30
Fails to build during reproducibility testing normal
A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!
Created: 2026-03-19 Last update: 2026-06-29 21:00
1 bug tagged patch in the BTS normal
The BTS contains patches fixing 1 bug, consider including or untagging them.
Created: 2026-06-02 Last update: 2026-06-29 20:30
Depends on packages which need a new maintainer normal
The packages that libreoffice depends on which need a new maintainer are:
  • openclipart (#690518)
    • Suggests: openclipart-libreoffice
Created: 2019-11-22 Last update: 2026-06-29 18:01
Multiarch hinter reports 18 issue(s) normal
There are issues with the multiarch metadata for this package.
  • libreoffice-dev-common could be marked Multi-Arch: foreign
  • libreoffice-dev-doc could be marked Multi-Arch: foreign
  • libreoffice-plasma could be marked Multi-Arch: foreign
  • libreoffice-smoketest-data could be marked Multi-Arch: foreign
  • libreoffice-style-colibre could be marked Multi-Arch: foreign
  • libreoffice-style-karasa-jaga could be marked Multi-Arch: foreign
  • libreoffice-style-sukapura could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-base could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-calc could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-common could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-draw could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-impress could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-math could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-report-builder could be marked Multi-Arch: foreign
  • libreoffice-uiconfig-writer could be marked Multi-Arch: foreign
  • libreofficekit-data could be marked Multi-Arch: foreign
  • libreofficekit-dev could be marked Multi-Arch: foreign
  • libunoloader-java could be marked Multi-Arch: foreign
Created: 2016-09-14 Last update: 2026-06-29 15:20
version in VCS is newer than in repository, is it time to upload? normal
vcswatch reports that this package seems to have a new changelog entry (version 4:26.8.0.0.beta2~git20260621-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:
commit 60cdf1434cc6db904c658067c0a216e5a97681b2
Merge: 70504e9 8186345
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 28 13:04:31 2026 +0200

    Merge remote-tracking branch 'origin/master' into debian-experimental-26.8

commit 8186345762a645a7f28d277262ccb61ebe2cf6d5
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 28 12:58:14 2026 +0200

    release libreoffice 4:26.2.4.2-2

commit 7f23e1c8524e8f079a7ec10e2e3a635c8c854c77
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Mon Jun 22 22:11:42 2026 +0200

    properly conditionalize patches/clucene-reproducible.patch.diff to help backports
    
    and not needing the "revert the patch" hack

commit 70504e984e8ca12db86aa20347b439dbf28d22a8
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Mon Jun 22 22:11:42 2026 +0200

    properly conditionalize patches/clucene-reproducible.patch.diff to help backports
    
    and not needing the "revert the patch" hack

commit 75fc284fb0643fc05a59512b3f451b69a7b81e9a
Merge: b42db22 b4e7cbe
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Mon Jun 22 20:57:13 2026 +0200

    Merge remote-tracking branch 'origin/master' into debian-experimental-26.8

commit b4e7cbe415fe610f65eb612fdbd87866c89cef10
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Mon Jun 22 20:24:10 2026 +0200

    hack: unapply clucene-reproducible.patch.diff on trixie-backports

commit b42db222fb60a8b1fe57b97a507daaa2c9680208
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 22:42:05 2026 +0200

    typo

commit ae39104a6dc445043e55a1ad0acc421fedf87bc0
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 20:23:30 2026 +0200

    fix new override files for -help-*/-l10n-*

commit 60ecd021fdf34c31082f44d243a15d591c8ce806
Merge: 7ede140 e9f43c2
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 21:52:16 2026 +0200

    Merge tag 'libreoffice_26.8.0.0.beta1-1' into debian-experimental-26.8
    
    tag libreoffice 4:26.8.0.0.beta1-1

commit 7ede1407925eaecc0bc94cac6921f12441706a3a
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 18:18:01 2026 +0200

    testofficehelper-test-UNO_PATH.diff is upstream

commit 79a1ceabeacf8ae0acfe767c76acc511dc0d7c9e
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 15:04:03 2026 +0200

    actually add the new spelling-error-in-changelog  to libreoffice-help.lintian-overrides.in (and only it)

commit b7437e342fa237bd0f2bc03069b67e720df4ba6e
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 14:56:58 2026 +0200

    rm debian/libreoffice-l10n-*.lintian-overrides in clean

commit 03b339c782432a5b559e9b97480a613c004358c2
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 14:51:37 2026 +0200

    also generate -l10ns lintian-overrides from .in

commit 19414185348f89b2026c413677f6d22e53f704e1
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 14:41:06 2026 +0200

    override bogus pelling-error-in-changelog ot to

commit d5f6cdcc5e1fb319d135134b387b4aca21420ae2
Author: Rene Engelhard <rene@rene-engelhard.de>
Date:   Sun Jun 21 14:19:13 2026 +0200

    add comment about OpenDocument spec
Created: 2026-06-02 Last update: 2026-06-28 16:51
AppStream hints: 6 warnings normal
AppStream found metadata issues for packages:
  • libreoffice-base: 1 warning
  • libreoffice-calc: 1 warning
  • libreoffice-draw: 1 warning
  • libreoffice-math: 1 warning
  • libreoffice-writer: 1 warning
  • libreoffice-impress: 1 warning
You should get rid of them to provide more metadata about this software.
Created: 2020-06-01 Last update: 2022-01-21 06:05
debian/patches: 48 patches to forward upstream low

Among the 49 debian patches available in version 4:26.2.4.2-2 of the package, we noticed the following issues:

  • 48 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2026-06-28 21:30
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.0.1).
Created: 2017-08-31 Last update: 2026-06-28 16:51
testing migrations
  • This package is part of the ongoing testing transition known as auto-upperlimit-python3. Please avoid uploads unrelated to this transition, they would likely delay it and require supplementary work from the release managers. On the other hand, if your package has problems preventing it to migrate to testing, please fix them as soon as possible. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
  • This package will soon be part of the auto-xmlsec1 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
  • This package will soon be part of the auto-abseil transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
  • excuses:
    • Migrates after: python3-defaults
    • Migration status for libreoffice (4:26.2.4.2-1 to 4:26.2.4.2-2): BLOCKED: Rejected/violates migration policy/introduces a regression
    • Issues preventing migration:
    • ∙ ∙ Remove hint for (transitive) dependency: openjdk-21
    • ∙ ∙ Missing build on riscv64
    • ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
    • ∙ ∙ Autopkgtest for apparmor/4.1.7-4: amd64: Pass, arm64: Pass, i386: Failed (not a regression) ♻ (reference ♻), loong64: Pass, ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Autopkgtest for auto-multiple-choice/1.7.0-3: amd64: Pass, arm64: Pass, i386: Pass, loong64: Pass, ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Autopkgtest for grammalecte/2.1.2+ds2-4: amd64: Pass, arm64: Pass, i386: Pass, loong64: Pass, ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Autopkgtest for libnumbertext/1.0.11-4: amd64: Pass, arm64: Pass, i386: Pass, loong64: Pass, ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Autopkgtest for libreoffice/4:26.2.4.2-2: amd64: Pass, arm64: Test triggered (failure will be ignored), i386: Test triggered (failure will be ignored), loong64: Failed (not a regression) ♻ (reference ♻), ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Autopkgtest for libreoffice-dictionaries/1:26.2.3.2-4: amd64: No tests, superficial or marked flaky ♻ (reference ♻), arm64: No tests, superficial or marked flaky ♻ (reference ♻), i386: No tests, superficial or marked flaky ♻ (reference ♻), loong64: No tests, superficial or marked flaky ♻ (reference ♻), ppc64el: No tests, superficial or marked flaky ♻ (reference ♻), s390x: Test triggered
    • ∙ ∙ Autopkgtest for lightproof/1.6+git20190911.c299ddd-1: amd64: No tests, superficial or marked flaky ♻ (reference ♻), arm64: No tests, superficial or marked flaky ♻ (reference ♻), i386: No tests, superficial or marked flaky ♻ (reference ♻), loong64: No tests, superficial or marked flaky ♻ (reference ♻), ppc64el: No tests, superficial or marked flaky ♻ (reference ♻), s390x: Test triggered
    • ∙ ∙ Autopkgtest for lloconv/6.1.3-1: amd64: Pass, arm64: Pass, i386: Pass, loong64: Pass, ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Autopkgtest for paperwork/2.2.5-4: amd64: Pass, arm64: Pass, i386: Pass, loong64: Pass, ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Autopkgtest for parlatype-libreoffice-extension/4.3-1: amd64: Pass, arm64: Pass, i386: Pass, loong64: Pass, ppc64el: Pass, s390x: Test triggered
    • ∙ ∙ Lintian check waiting for test results - info
    • ∙ ∙ Reproducibility check waiting for results on amd64 - info
    • ∙ ∙ Reproducibility check waiting for results on arm64 - info
    • ∙ ∙ Reproducibility check waiting for results on i386 - info
    • ∙ ∙ Too young, only 2 of 5 days old
    • ∙ ∙ Depends: libreoffice python3-defaults (not considered)
    • Additional info (not blocking):
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/libr/libreoffice.html
    • ∙ ∙ Not reproduced on armhf (not a regression): libreoffice-dev-doc, libreoffice-smoketest-data
    • Not considered
news
[rss feed]
  • [2026-06-28] Accepted libreoffice 4:26.2.4.2-2 (source) into unstable (Rene Engelhard)
  • [2026-06-21] Accepted libreoffice 4:26.8.0.0.beta1-1 (source) into experimental (Rene Engelhard)
  • [2026-06-19] Accepted libreoffice 4:7.4.7-1+deb12u13 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-06-17] Accepted libreoffice 4:7.4.7-1+deb12u13 (source) into oldstable-security (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-06-16] Accepted libreoffice 4:25.2.3-2+deb13u5 (source) into proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-06-15] Accepted libreoffice 4:25.2.3-2+deb13u5~bpo12+1 (source) into oldstable-backports (Rene Engelhard)
  • [2026-06-15] Accepted libreoffice 4:25.2.3-2+deb13u5 (source) into stable-security (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-06-07] libreoffice 4:26.2.4.2-1 MIGRATED to testing (Debian testing watch)
  • [2026-06-07] Accepted libreoffice 4:26.2.4.2-1~bpo13+1 (source) into stable-backports (Rene Engelhard)
  • [2026-06-01] Accepted libreoffice 4:26.8.0.0.alpha1-4 (source) into experimental (Rene Engelhard)
  • [2026-06-01] Accepted libreoffice 4:26.2.4.2-1 (source) into unstable (Rene Engelhard)
  • [2026-05-29] Accepted libreoffice 4:26.8.0.0.alpha1-3 (source) into experimental (Rene Engelhard)
  • [2026-05-29] Accepted libreoffice 4:26.8.0.0.alpha1-2 (source) into experimental (Rene Engelhard)
  • [2026-05-28] Accepted libreoffice 4:26.8.0.0.alpha1-1 (source all amd64) into experimental (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-05-17] Accepted libreoffice 4:26.2.4.1-1 (source) into experimental (Rene Engelhard)
  • [2026-05-08] Accepted libreoffice 4:7.4.7-1+deb12u12 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-05-07] Accepted libreoffice 4:7.4.7-1+deb12u11 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-05-07] Accepted libreoffice 4:25.2.3-2+deb13u4 (source) into proposed-updates (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-05-07] Accepted libreoffice 4:25.2.3-2+deb13u4 (source) into stable-security (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-05-07] Accepted libreoffice 4:7.4.7-1+deb12u11 (source) into oldstable-security (Debian FTP Masters) (signed by: Rene Engelhard)
  • [2026-05-07] libreoffice 4:26.2.3.2-2 MIGRATED to testing (Debian testing watch)
  • [2026-05-06] Accepted libreoffice 4:26.2.3.2-2~bpo13+1 (source) into stable-backports (Rene Engelhard)
  • [2026-04-30] Accepted libreoffice 4:26.2.3.2-2 (source) into unstable (Rene Engelhard)
  • [2026-04-24] Accepted libreoffice 4:26.2.3.2-1 (source) into experimental (Rene Engelhard)
  • [2026-04-09] Accepted libreoffice 4:26.2.3.1-1 (source) into experimental (Rene Engelhard)
  • [2026-04-03] libreoffice 4:26.2.2.2-3 MIGRATED to testing (Debian testing watch)
  • [2026-04-02] Accepted libreoffice 4:26.2.2.2-3~bpo13+1 (source) into stable-backports (Rene Engelhard)
  • [2026-03-26] Accepted libreoffice 4:26.2.2.2-3 (source) into unstable (Rene Engelhard)
  • [2026-03-23] Accepted libreoffice 4:26.2.2.2-2 (source) into experimental (Rene Engelhard)
  • [2026-03-20] Accepted libreoffice 4:26.2.2.2-1 (source) into experimental (Rene Engelhard)
  • 1
  • 2
bugs [bug history graph]
  • all: 139 148
  • RC: 1
  • I&N: 99 106
  • M&W: 39 41
  • F&P: 0
  • patch: 1
links
  • homepage
  • buildd: logs, exp, reproducibility, cross
  • popcon
  • browse source code
  • other distros
  • security tracker
  • screenshots
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 4:26.2.4.2-0ubuntu1
  • patches for 4:26.2.4.2-0ubuntu1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing