DSA-5415-1 libreoffice -- security update

Debian Security Advisory

DSA-5415-1 libreoffice -- security update

Date Reported:

28 May 2023

Affected Packages:

libreoffice

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2023-0950, CVE-2023-2255.

More information:

Two security issues were discocvered in LibreOffice, which could potentially result in the execution of arbitrary code when loading a malformed spreadsheet document or unacknowlegded loading of linked documents within a floating frame.

For the stable distribution (bullseye), these problems have been fixed in version 1:7.0.4-4+deb11u7.

We recommend that you upgrade your libreoffice packages.

For the detailed security status of libreoffice please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libreoffice