This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-63278 →
UBUNTU-CVE-2026-63278
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remot...
Original description
The description as published by the source.
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content provider, so a URL that named it differently still reached the expansion. In fixed versions the package content provider is matched when the URL is checked.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Ubuntu:20.04:LTS
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.3.7-0ubuntu0.22.04.13"}]}]
Ubuntu:24.04:LTS
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:24.2.7-0ubuntu0.24.04.7"}]}]
Ubuntu:26.04:LTS
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:26.2.6.3-0ubuntu0.26.04.2"}]}]
References
- advisory ubuntu.com
- report ubuntu.com
- report cve.org
- report libreoffice.org
- report libreoffice.org