bugtraq - [SECURITY] [DSA 4178-1] libreoffice security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 20 Apr 2018 22:21:28 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4178-1] libreoffice security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4178-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
April 20, 2018                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libreoffice
CVE ID         : CVE-2018-10119 CVE-2018-10120

Two vulnerabilities were discovered in LibreOffice's code to parse
MS Word and Structured Storage files, which could result in denial of
service and potentially the execution of arbitrary code if a malformed
file is opened.

For the oldstable distribution (jessie), these problems have been fixed
in version 1:4.3.3-2+deb8u11.

For the stable distribution (stretch), these problems have been fixed in
version 1:5.2.7-1+deb9u4.

We recommend that you upgrade your libreoffice packages.

For the detailed security status of libreoffice please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libreoffice

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=KPGE
-----END PGP SIGNATURE-----