-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5772-1 secur...@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 17, 2024 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : libreoffice CVE ID : CVE-2024-7788 Yufan You discovered that Libreoffice's handling of documents based on ZIP archives was suspectible to spoofing attacks when the repair mode attempts to address a malformed archive structure. For additional information please refer to https://www.libreoffice.org/about-us/security/advisories/cve-2024-7788/ For the stable distribution (bookworm), this problem has been fixed in version 4:7.4.7-1+deb12u5. We recommend that you upgrade your libreoffice packages. For the detailed security status of libreoffice please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libreoffice Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmbp7VsACgkQEMKTtsN8 TjY20RAAuJuPyqB0ViM2E/MxqoqTFSzbC9q7XH/5txXMdAQhpxv1HioaiITMFyai auAPQTPJcanGdEi2QUwyS8woKXbUJQfCvwKBfUcBD7F8urAB6xeCWV2tHwW1HnI5 Af169qwqGQ1gU/pSEmatW5BmFB1fGtsaZGuCFWPOiZ8LUgm9RWRxjqZRqsM4N8Ie /TIGpHwhoi6gKi04Yq10i7uWeR9YAVSADCljKEIuwUfsV23QGxBnhmLjnSj+d7x1 uh+CiZdRCS2Z8EYtVhkwS4C9D2vT1Tyj8WktQn2QUG85PAkjjvtuEOxhHY65TOkV RXZh7rW7hDF6AYL/wzFvIPFyXg76T5NSqxXiU+P+dqYlMPRgHJG6fLepRZ58V9JP LZ4FW13h16t6yeXLg5xiRxviZxczhA8zHZYXXSlyUzB1e+qn2UIg3/qydDiqKlH7 e3HczIUEU3U+FJ5py9oadsRnZoMS7ZpLN91KYakV62yTcfLTDeBhOM4p04qNoluJ thd/egrNaOZNyUknxZHbvC/qcY3T5FIMQcwM3Yg0rlpSKUs69Yiqag8cOYI2JmLl peFr8i3xQcPyCsZl2NwkVLVXeiFS4gPYwmv00J+p7C3vnHMk1+MVyry3oZeXWL5X ffDlL/Y/6/Ht9hdwC1N79FmDbdNwZ+iEspZYTaeDhOCvfQ0bU9Q= =ZHJC -----END PGP SIGNATURE-----
