-
Fri Oct 23 2026 Craig Guiller <craig.guiller@oracle.com> - 7.1.8.1-3.0.1
- Replace colors with Oracle colors [Orabug: 32120093]
- Build with --with-vendor="Oracle America, Inc."
- Added the --with-hamcrest option to configure
-
Tue Oct 06 2026 Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-3
- Resolves: RHEL-286491 Bump Java requirements in program/javavendors.xml
-
Tue Oct 06 2026 Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-2
- Resolves: RHEL-269267 CVE-2026-63274 heap buffer overflow in PDF import
stream handling
- Resolves: RHEL-269190 CVE-2026-63275 stack buffer overflow in CFF font hint
handling
- Resolves: RHEL-269176 CVE-2026-63276 stack buffer overflow in CFF to Type 1
font conversion
- Resolves: RHEL-276430 CVE-2026-63277 Arbitrary code execution via remote Java
database driver
-
Tue Oct 06 2026 Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-1
- OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026,
move to OpenJDK 21. LibreOffice 6.x doesn't really support anything newer than
OpenJDK 8, so a rebase to 7.x was needed and RHEL 9 was used as a base.
OpenJDK 21 doesn't have i686 builds available so these are not built anymore
(previously they were built, but stayed in the BUILDROOT repository).
- Resolves: RHEL-260518
-
Tue Jun 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:6.4.7.2-21
- Fix CVE-2026-8357 buffer overflow in Calc formula compiler with
formulas composed entirely of open tokens
- Resolves: RHEL-186059
-
Tue May 19 2026 Tomas Popela <tpopela@redhat.com> - 1:6.4.7.2-20
- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
the spec has
- Resolves: RHEL-176575
-
Tue Mar 11 2025 Eike Rathke <erack@redhat.com> - 1:6.4.7.2-19
- Fix CVE-2025-1080 Filter out more unwanted command URIs
-
Thu Aug 15 2024 Eike Rathke <erack@redhat.com> - 1:6.4.7.2-18
- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
high security
-
Fri Jun 07 2024 Eike Rathke <erack@redhat.com> - 1:6.4.7.2-17
- Fix CVE-2024-3044 add notify for script use
-
Mon Mar 11 2024 Eike Rathke <erack@redhat.com> - 1:6.4.7.2-16
- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols