
Important Announcement: Early release of LibreOffice 7.6.2 Community and LibreOffice 7.5.7 Community featuring a critical security fix
The Document Foundation announces the early release of LibreOffice 7.6.2 Community and LibreOffice 7.5.7 Community to quickly address a security issue known as CVE 2023-4863, stemming from a widely used code library called libwebp, created by Google over a decade ago to facilitate the WebP graphic format of its time [1].
Security Fixes and Improvements
In addition to the CVE, both new versions fix other bugs and regressions, and are immediately available at www.libreoffice.org/download [2]. All LibreOffice users are encouraged to update their current version as soon as possible.
Operating System Compatibility
Proprietary operating systems require at least Microsoft Windows 7 SP1 and Apple MacOS 10.15.
LibreOffice Enterprise for Business Deployments
For business deployments, The Document Foundation strongly recommends the LibreOffice Enterprise application family from its ecosystem partners, offering a wide range of dedicated value-added features and other benefits such as SLAs: www.libreoffice.org/download/libreoffice-in-business/
Support and Assistance for LibreOffice
The Document Foundation does not offer technical support to users, but it is available from volunteers on the user mailing lists and the Ask LibreOffice site: ask.libreoffice.org.
LibreOffice users, advocates of free software, and community members can support The Document Foundation by making a donation at www.libreoffice.org/donate.
Technical Details and Release Notes
[1] Details of CVE 2023-4863: nvd.nist.gov/vuln/detail/CVE-2023-4863. Bugzilla: bugs.documentfoundation.org/show_bug.cgi?id=157231
[2] LibreOffice 7.6.2 Community Changelog: wiki.documentfoundation.org/Releases/7.6.2/RC1 and LibreOffice 7.5.7 Community: wiki.documentfoundation.org/Releases/7.5.7/RC1

