Debian alert DLA-4633-1 (libreoffice)

From:
             
 
Sylvain Beucler <beuc@beuc.net>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4633-1] libreoffice security update
Date:
             
 
Wed, 17 Jun 2026 14:20:15 +0200
Message-ID:
             
 
<ajKQ_16LLvl5L0_k@mail.beuc.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4633-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                       Rene Engelhard
June 17, 2026                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : libreoffice
Version        : 4:7.4.7-1+deb12u13
CVE ID         : CVE-2026-6039 CVE-2026-6045 CVE-2026-8356 CVE-2026-8357 
                 CVE-2026-8358

Multiple security vulnerabilities were discovered in LibreOffice,
which could result in denial of service or potentially the execution
of arbitrary code if malformed files are opened.

For Debian 12 bookworm, these problems have been fixed in version
4:7.4.7-1+deb12u13.

We recommend that you upgrade your libreoffice packages.

For the detailed security status of libreoffice please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libreoffice

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE1vEOfV7HXWKqBieIDTl9HeUlXjAFAmoykEQACgkQDTl9HeUl
XjAlug/9FSZ8XziEG/pCSAy8GzNBE9jMXWC+Uv87MNfVS3a/2ukhDEULfwLeEKt5
0fHGAwh3dO8HodENtiKk7Dcl01LZ1UKJ3gGbtZdqjZowEaOpEQf4T0IJVDzK47b9
A9HHjIS/gRWTDuSD9cg3xAYEHaUyfo/83ZvH033Zqzac0gqtln6BZvkXL9nlJf7a
QYYcsvrcAZI0EWtFmILxO33w1XyoL/BnIIH1y56cB88ZJ6Ajv+2BikP7QfYPU/3+
a/F+nivVkCPSZ/idmYfr75KT/BA6XPhjEh7JDwXiVB1VKWHoDdk0/DbehntoI3pp
9eCtuxhp5ncHF1QKbL3lcGChLLigm4e7YOowvlFAPw0OvCe8CIJAfDAdQW6Hvamy
+TM/D4HOgHXweG9aYSnTtSQp5Zo6e3nSet0ozV/qUQYbj/4dKIAE8rNpE9oS6IPy
Dxr3bn0J9lp/awi3EEq++b6vuKna/pWjXsp0Dk+XIHcC6umETmLRGD3qXXL8F3Zi
o/fyHQfU1oamBAmxD3I7FtiuQmT/jIiH3Ps4ewH82ZllLkGAMW/JeiGrCP4/LLWR
Bgkx/c1ymHxr4yh+EJdO+simhgny74RMf6u5CzbDJZc/dT2BNMBMoino+ICj6y0u
CUkRASjcnvYr5140kzysOdE5RXQKeSpHtUjLc8jF1MptwomeoE4=
=n21L
-----END PGP SIGNATURE-----