• [SECURITY] [DSA 5772-1] libreoffice security update

    From Moritz Muehlenhoff@21:1/5 to All on Tue Sep 17 23:20:01 2024
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5772-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 17, 2024 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : libreoffice
    CVE ID : CVE-2024-7788

    Yufan You discovered that Libreoffice's handling of documents based on
    ZIP archives was suspectible to spoofing attacks when the repair mode
    attempts to address a malformed archive structure.

    For additional information please refer to https://www.libreoffice.org/about-us/security/advisories/cve-2024-7788/

    For the stable distribution (bookworm), this problem has been fixed in
    version 4:7.4.7-1+deb12u5.

    We recommend that you upgrade your libreoffice packages.

    For the detailed security status of libreoffice please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/libreoffice

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmbp7VsACgkQEMKTtsN8 TjY20RAAuJuPyqB0ViM2E/MxqoqTFSzbC9q7XH/5txXMdAQhpxv1HioaiITMFyai auAPQTPJcanGdEi2QUwyS8woKXbUJQfCvwKBfUcBD7F8urAB6xeCWV2tHwW1HnI5 Af169qwqGQ1gU/pSEmatW5BmFB1fGtsaZGuCFWPOiZ8LUgm9RWRxjqZRqsM4N8Ie /TIGpHwhoi6gKi04Yq10i7uWeR9YAVSADCljKEIuwUfsV23QGxBnhmLjnSj+d7x1 uh+CiZdRCS2Z8EYtVhkwS4C9D2vT1Tyj8WktQn2QUG85PAkjjvtuEOxhHY65TOkV RXZh7rW7hDF6AYL/wzFvIPFyXg76T5NSqxXiU+P+dqYlMPRgHJG6fLepRZ58V9JP LZ4FW13h16t6yeXLg5xiRxviZxczhA8zHZYXXSlyUzB1e+qn2UIg3/qydDiqKlH7 e3HczIUEU3U+FJ5py9oadsRnZoMS7ZpLN91KYakV62yTcfLTDeBhOM4p04qNoluJ thd/egrNaOZNyUknxZHbvC/qcY3T5FIMQcwM3Yg0rlpSKUs69Yiqag8cOYI2JmLl peFr8i3xQcPyCsZl2NwkVLVXeiFS4gPYwmv00J+p7C3vnHMk1+MVyry3oZeXWL5X ffDlL/Y/6/Ht9hdwC1N79FmDbdNwZ+iEspZYTaeDhOCvfQ0bU9Q=
    =ZHJC
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)