-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 03 Oct 2026 12:46:08 +0200 Source: libreoffice Architecture: source Version: 4:25.2.3-2+deb13u8 Distribution: trixie-security Urgency: medium Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org> Changed-By: Rene Engelhard <rene@debian.org> Changes: libreoffice (4:25.2.3-2+deb13u8) trixie-security; urgency=medium . * debian/patches/CVE-2026-63277.diff: fix CVE-2026-63277 ("RCE on document open in Calc") * debian/patches/do-not-load-exotic-protocols-for-document-supplied-data.diff: fix CVE-2026-63270 environment / config disclosure via missing exotic-protocol guards, also prerequisite for CVE-2026-62367 and CVE-2026-63268 * debian/patches/CVE-2026-63269-?.diff: fix CVE-2026-63269 local file read + GET SSRF via GStreamer and HLS media * debian/patches/CVE-2026-63267-?.diff: fix CVE-2026-63267 local file read + GET SSRF via csv data provider * debian/patches/CVE-2026-63268-?.diff: fix CVE-2026-63268 local file read via sql sdbc:flat:file:// db href * debian/patches/CVE-2026-63266-?.diff: fix CVE-2026-63266 arbitrary file write via firebird backup escalates to RCE * debian/patches/firebird-db-connection.diff: backport from upstream, fix db connection to firebird debian/patches/firebird-module-path.diff, debian/patches/firebird-call-writeFile-outside-the-SAL_WARN_IF-cond.patch: backport from upstream to fix tests with Debian's patched firebird * debian/source/include-binaries: add (changed by the build, 3.0->4.0?) firebird_integer_ods12.odb and tdf132924.odb Checksums-Sha1: 4f31123b978fc69b49041e05fb66e8a97528d85f 36665 libreoffice_25.2.3-2+deb13u8.dsc 8827523942747e4c0d6a2b191c3d4545a6762705 28334704 libreoffice_25.2.3-2+deb13u8.debian.tar.xz 51c055f75068fff5f520341dd30f57ed523b2ac6 28403 libreoffice_25.2.3-2+deb13u8_source.buildinfo Checksums-Sha256: c4ee4d5f312e14abd3219291e3ff68e905c74fc99e9abbbac2d6857fe8af5b00 36665 libreoffice_25.2.3-2+deb13u8.dsc e9bb482142969437be528f48eb4614ac8e06f872c08843ab681bcabf228fc516 28334704 libreoffice_25.2.3-2+deb13u8.debian.tar.xz 3f9640a4f7a88ff8c877a98f253a3d0de1f1ea250c3e702cb4306118279aeba9 28403 libreoffice_25.2.3-2+deb13u8_source.buildinfo Files: 2f1a02a2547faf95b55b2310cf169824 36665 editors optional libreoffice_25.2.3-2+deb13u8.dsc eb79fdc5a31e2b20c8ae755a9d72aeaa 28334704 editors optional libreoffice_25.2.3-2+deb13u8.debian.tar.xz f2cdaf51e5701ef93f87a2e20fb500aa 28403 editors optional libreoffice_25.2.3-2+deb13u8_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE4S3qRnUGcM+pYIAdCqBFcdA+PnAFAmrBJKUQHHJlbmVAZGVi aWFuLm9yZwAKCRAKoEVx0D4+cOXYEACKqU/wSoHhtSe71gWNfDbKak8Al6G1AvHr FeZIFA+sqti/pIpCkI46WJaeVXxHxCyjdICRfRpdQ/57J5KJJWmbPc5c3hr3iZJf FVCHIYSUtCObHP8kUzOYtywkfDtp/YsI9XcLd86nozoZwkA9M0GVWQyjPstTzkhQ CWA5MXXtnr7VTx58JWa/wDzF9dl01RNNU5jfMJsRYd6ef329Vszy25+KiQAz2GSu MZIGx97H1YpS3ukdKLqBdROzIYXlXG8DUXSsmqZeKKShC8P/AjeV5rHhFTn831P9 QRFmDTNYIPPI/0nc3ufvfYcvASi7BgXnHl5ZZS8h9vKYMDaS+r3dTtWF9txKtISj ro0i4GHXKRPtl9UP/aOaAXqQxhzfALdgFUvifWbOy/rlqBeIOIUaVeqxAIRuRyfm mRGgYHWb7e1Vg1+j685t3mVYVav2s0dYKCEwQkrFJZKpiY/I+2JWVVQXGZSX7zF/ CYCJ77BBE8zxPiJkx4mKMAJAu7nn7007iyLVtHms4rFjdiCn1sOv9F6sMk1LEmxc 9T270oh6csWQrmh8jpfqO4oImXEHik1aWYhpWSHt/p8yK0iMGNfEHzi7moAWbgw9 YtypnMi43B7+hjkPsNSOXZzQ5SpPiTGJDFncqHYhcdLNOrTO3JwnIZBFZYx8sNcM 5s/8zxf1rg== =a9Eh -----END PGP SIGNATURE-----
