Ubuntu LibreOffice Updates Fix Multiple Vulnerabilities
Tech GuruQuick Answer
Ubuntu published USN-8868-1 for LibreOffice vulnerabilities on Ubuntu 26.04 (resolute) LTS, Ubuntu 24.04 (noble) LTS, Ubuntu 22.04 (jammy) LTS. Ubuntu does not state a CVSS base score in this notice. Install the fixed source-package versions from the supported security or ESM channel.
Match USN-8868-1 To Ubuntu Releases And Update
What to do now: Inventory affected Ubuntu releases, compare installed source-package versions with USN-8868-1, install the supported updates, validate dependent workloads, and retain evidence.
Last verified: 2026-10-05 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | LibreOffice vulnerabilities on Ubuntu 26.04 (resolute) LTS, Ubuntu 24.04 (noble) LTS, Ubuntu 22.04 (jammy) LTS |
|---|---|
| Advisory | USN-8868-1 |
| CVEs | CVE-2026-50593, CVE-2026-63272, CVE-2026-63273, CVE-2026-63274, CVE-2026-63275, CVE-2026-63276, CVE-2026-63278, CVE-2026-63279 |
| Authoritative release date | 2026-10-05 13:14:21.165866 UTC |
| Authority revision date | 2026-10-05 13:14:21.165866 UTC |
| Affected versions | The Ubuntu releases and source packages enumerated in USN-8868-1: Ubuntu 26.04 (resolute) LTS, Ubuntu 24.04 (noble) LTS, Ubuntu 22.04 (jammy) LTS. |
| Fixed version | jammy: libreoffice 1:7.3.7-0ubuntu0.22.04.13 / noble: libreoffice 4:24.2.7-0ubuntu0.24.04.7 / resolute: libreoffice 4:26.2.6.3-0ubuntu0.26.04.2 |
| CVSS base score | Not provided by the authority |
| CVSS severity | Not provided by the authority |
| Exploitation status | Not stated by the authority; no exploitation claim is inferred. |
What Changed
Several security issues were fixed in LibreOffice. This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes.
What To Validate Now
- Inventory. Locate systems on Ubuntu 26.04 (resolute) LTS, Ubuntu 24.04 (noble) LTS, Ubuntu 22.04 (jammy) LTS; record the installed source package, repository pocket, ESM entitlement where applicable, owner, exposure, and dependencies.
- Establish applicability. Match the Ubuntu codename and source package to USN-8868-1. Do not infer applicability from the binary package name, a generic kernel label, or the number of CVEs alone.
- Remediate. Install the fixed Ubuntu source-package versions listed in USN-8868-1 through the supported security or ESM channel.
- Validate. Confirm the installed source-package version, test representative LibreOffice functions and recovery paths, and document any exception.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
Coordinate service or application restart requirements and test dependent workflows. Preserve package-manager output, before-and-after versions, validation results, and rollback evidence.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
