• [SECURITY] [DSA 3837-1] libreoffice security update

    From Moritz Muehlenhoff@1:229/2 to All on Thu Apr 27 23:20:02 2017
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3837-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    April 27, 2017 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : libreoffice
    CVE ID : CVE-2017-7870

    It was discovered that a buffer overflow in processing Windows Metafiles
    may result in denial of service or the execution of arbitrary code if
    a malformed document is opened.

    For the stable distribution (jessie), this problem has been fixed in
    version 1:4.3.3-2+deb8u7.

    For the upcoming stable distribution (stretch), this problem has been
    fixed in version 1:5.2.5-1.

    For the unstable distribution (sid), this problem has been fixed in
    version 1:5.2.5-1.

    We recommend that you upgrade your libreoffice packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlkCXdoACgkQEMKTtsN8 TjZuKA//cdaDufGQwqY7PUj4NHWLXiyyZb5EApMT59zROWhIDmw6n1x+SBlsNHjL g/e1AVpcppZmvn4kBoPkHMYLEOW0rtsYejZUWYpnV9ksBbfYREluCCJheKhm0RuQ QbMZuKS0tr/cwQHwODYWrDDgvd6RE6rKITASjrRzy1IPFn85DRNGrrH3ulZpopib qnK2MiX7jAwnV61P2GPzPbNc6Nb4/JVa9HoBF/X+1T2ftNb6iEDnGE0iymf5YOFH rZz3hDvS44kzRUd0f6I/xD8F1Q8GD1Pw/Q0YeNnnDMDt8Mkxx+gsvHS6oLEXKZ5j gLOAFgzafX/uzmWK/oNP9oeJAeHZtdJfcgyfrurPxE9ViTPJqtfUNJetiiUAbRVN lYQ48VAS5IVhgGiA/x2IwRFMQUo8p0usNaWJybpkaFUxaM+t/Kh346wTDCr0VB5I xhcxZaLyArqVYfPzfBVPddqgnKKimenSVd3v4I12z81+mqC5dq5XV/GOH3S5QHU9 sIM0UBXcPonhBF5siyFJJxJwFYZ31ngtDhzBA4nQzjhF4qWrlh8jb8ErMAHrPI1A XCrmchPYJ9jS7aA+yHzZ2tDlmOZQ8tB5/aHt1dA2Ov/wgWJQ396ga5Zinfi7H4N8 eMs4YCrbebs08273rQlxSZsxsbT+zDfJXFgtVgOydutEK0gBUg8=
    =pvqa
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)