Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Important Release date: 2026-10-25 Summary: SAC is a standard interface for CSS parsers, intended to work with CSS1, CSS2, CSS3 and other CSS derived languages. Security Fix(es): * libreoffice: heap buffer overflow in PDF import stream handling (CVE-2026-63274) * libreoffice: stack buffer overflow in CFF to Type 1 font conversion (CVE-2026-63276) * libreoffice: stack buffer overflow in CFF font hint handling (CVE-2026-63275) * libreoffice: libreoffice: Arbitrary code execution via remote Java database driver (CVE-2026-63277) Bug Fix(es) and Enhancement(s): * [libbase] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275415) * [flute] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275416) * [libserializer] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275417) * [libloader] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275418) * [libformula] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275419) * [librepository] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275420) * [libfonts] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275421) * [liblayout] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275422) * [pentaho-libxml] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275423) * [pentaho-reporting-flow-engine] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-275424) * [sac] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-277813) * [libreoffice] LibreOffice packages using EOL Java (after November 2026) (JIRA:AlmaLinux-260518) * [AlmaLinux 8.10] Base Report Wizard fails with packaged Pentaho reporting engine (JIRA:AlmaLinux-286491) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2026-88164.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team