ElixirOffice 0.6.3 — desktop build 29

Security release. Release cut: 2026-11-02. Update metadata must pass owner signing and public verification before publication.

Security

• Electron 44.10.1 (Chromium 152.0.7977.169, Node.js 24.22.1) fixes the Brotli
  decoder vulnerability CVE-2026-111497 in the embedded browser engine and Node.js.
• The document converters (WebAssembly) are rebuilt with Brotli 1.2.1 for the
  same vulnerability.
• October 2026 security fixes from upstream office projects in the editors and
  converters.

What's new

• Saving, Save As and PDF export work when the folder path goes through a
  symbolic link, such as a NAS or sync folder (#50).
• A plain Ctrl+S no longer leaves a persistent "Open file / Show in folder"
  notice (#51).
• Choosing a font in the font list applies that font, not one a few rows above,
  after the computer fonts have loaded (#47).
• Presenter View opens its own window again (#48).
• Spreadsheets no longer freeze for several seconds when switching sheets or
  scrolling on computers with many installed fonts.
• Spreadsheet PDF export prints the active sheet, as Microsoft Excel does.
• Word layout closer to Microsoft Word: stacked frames, table rows that end at
  the bottom of a page, and section breaks inside index fields.

AI stays optional and off by default. Sending document context requires your
configured service, consent and explicit request. Documents are not sent to the
publisher.

Qualification

The portable test suite and the Windows packaging test suite each ran 1,366
tests with 1,366 passed and none failed or skipped. The layout regression set
gave the same results as the previous build.

On Apple Silicon macOS, the Darwin unit tests reported 1,366 tests: 1,297 passed,
none failed and 69 were skipped. The DMG audit passed with 19,104 application
entries. A packaged smoke test passed for six formats: DOCX, XLSX, PPTX, ODT, ODS
and ODP, covering open, edit, save, reopen and WebAssembly PDF. On a Mac with
1,819 installed fonts, switching sheets in a reported workbook went from pauses of
several seconds to none longer than 0.3 seconds.

Not run for this build: the unattended Mac check (a fonts assertion does not
match on an attended Mac) and the native Mac Mailings and Avenir Next interface
checks. Physical printing, Gatekeeper, Intel Macs and this build on a physical
Windows PC were not verified.

No all-green suite, native platform acceptance, speed improvement or
Office-layout equivalence is claimed.

Installation and updates

Use the package for your operating system and follow the
desktop installation instructions.
Exact download links and checksums accompany the qualified release.

Installers remain publisher-unsigned. macOS packages are arm64-only, ad-hoc
signed and not notarized; Gatekeeper may require the documented manual
approval. Update signatures authenticate update metadata and bytes; they do
not provide an OS publisher certificate. Silent updates are not available.

Known limitations

• Spreadsheet PDF export of very large sheets can print at a wrong scale.
• Chinese, Japanese and Korean text in PDF export uses the native path only
  for the safe case; rare characters such as CJK Extension B can still be
  missing from the PDF.
• Physical printing, downloaded-installer handling, Gatekeeper and all-users
  installation require separate native checks.
• On Linux hosts that restrict unprivileged user namespaces, the AppImage can
  run without the Chromium sandbox. Prefer the DEB on affected systems.
• Long-session memory growth and Windows CPU spikes on lower-end computers
  remain unresolved.
• Font substitution cannot reproduce every missing typeface or glyph.
• Existing conversion, PDF, ODF, embedded-object and AI tool limits remain.
  AI can make mistakes.

Reporting problems

Open an issue with the app
version, operating system, steps and expected/actual behavior. For security
problems use private reporting as described in SECURITY.md, not a public issue.
Remove personal information, private content and API keys before sharing
attachments.

Corresponding source contains public snapshots of every repository used by the build: the product, DocumentServer, core, sdkjs, web-apps and the other DocumentServer components. All of them change in this release because of the October 2026 security sync.

Public product revision: a6901ba.
Source archive: elixiroffice-desktop-source.tar.gz.
Source archive SHA-256: e3bc198702439dd1b6587f6e0a0c5e3f19a1ae70d0fd61a25d27695e5eebceb5.