-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Aug 2023 19:09:29 +0000 Source: libreoffice Architecture: source Version: 1:6.1.5-3+deb10u9 Distribution: buster-security Urgency: medium Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Changes: libreoffice (1:6.1.5-3+deb10u9) buster-security; urgency=medium . * Team upload by the LTS team * CVE-2022-3874: Libreoffice may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory. * CVE-2023-0950: Improper Validation of Array Index vulnerability in the spreadsheet component allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. Checksums-Sha1: 5d91a7d4a20514bb7f3e51712e8911109ee4abe8 27751 libreoffice_6.1.5-3+deb10u9.dsc 1e79c5a0a34d93734b4f7ed7a75c91e644f63f0e 9998300 libreoffice_6.1.5-3+deb10u9.debian.tar.xz 412c393a7373f1774f891577fd251360f160e19c 108556 libreoffice_6.1.5-3+deb10u9_amd64.buildinfo Checksums-Sha256: 94eef0b00aa050bf169bd1450df393cf292b065e8ce0a1be5bb4f40371a7e27b 27751 libreoffice_6.1.5-3+deb10u9.dsc e3d43686ddac6653fae4056a53ef7fade40e62d793c6169617f4b53d27a1991b 9998300 libreoffice_6.1.5-3+deb10u9.debian.tar.xz 8ee42a9cc404068c236db246b175c50f2694ef02a3f974fb4892da06821463c0 108556 libreoffice_6.1.5-3+deb10u9_amd64.buildinfo Files: 8d9bc422e345b328f1b3ae9c3c8f3dac 27751 editors optional libreoffice_6.1.5-3+deb10u9.dsc 8e453d22d9d8c8e83939813823511a38 9998300 editors optional libreoffice_6.1.5-3+deb10u9.debian.tar.xz 46cfbc9f00faaf36a29c5843e94d9a59 108556 editors optional libreoffice_6.1.5-3+deb10u9_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmTXo54RHHJvdWNhQGRl Ymlhbi5vcmcACgkQADoaLapBCF8atA/+MISqrMjYs31ROmsW6ymRlwsVjerMHw4N 7eZxmT4f6Hyj6osgEUJjDbsmcgKwgOVSM2vVLy1FzN70+Gc89n/arFyzixa/VC1q Femgr/eZMrvhE9lHRATGkl5XchPzujI0E9rgm7/GTvu7F49gZXNT9BhY+4qCPst6 s287n9ix8gu5KM/lOz/1rjUELXQXK41Ji4JURK/jx6aPFoKt/BRnTe21l4bAqbFJ DzGV1axzNyZrQZwSRQ3iy9ns1/4qOw0SJHFmIPPzAsU7e2liFuEJHck6+bXU16is bgIt8nOXIHAjVey3tB7gil+XeyrApj60z9T+IWwt6jwf985X0gO6fJaPGSPGzJkz pfj2s2J0h9W321oCM52tzcY1zDfnT0/pjBjsL/1h/svpUbosI/5hh1iE1RA1+VwF YNEarFhUsVsf39VEZg9b7xn0FtmRulede57w7zsf9EFPZCtIxjJDZKuFgNtiE3Qe yuIiVDUDrBnQk/Hkkx85pWm51oQjAoVgjmkgDdu17XO2KjjtB2+kKbAFstobbU5r Z0tI9cj3BEwGPvha3fV4Vm1+eF4o/F4nSonDLvZCVxU1sxE64/I7F656yWAhFaFk ib4FE170Okggw79gctsC7oPRBRkvztYERV0yWeFwXxrGwYRUGcAohgD0W4fHzGMJ o/jj348LS1s= =ooAu -----END PGP SIGNATURE-----
