Debian alert DLA-910-1 (libreoffice)

From:
    	     
 
Emilio Pozuelo Monfort <pochu@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 910-1] libreoffice security update 
Date:
    	     
 
Sun, 23 Apr 2017 23:49:14 +0200
Message-ID:
    	     
 
<69f81895-9181-4850-e5ce-a0b65f17ccd7@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : libreoffice
Version        : 1:3.5.4+dfsg2-0+deb7u9
CVE ID         : CVE-2017-3157 CVE-2017-7870

CVE-2017-3157

    Ben Hayak discovered that objects embedded in Writer and Calc
    documents may result in information disclosure. Please see
    https://www.libreoffice.org/about-us/security/advisories/...
    for additional information.

CVE-2017-7870

    An out-of-bounds write caused by a heap-based buffer overflow was
    found in the Polygon class.

For Debian 7 "Wheezy", these problems have been fixed in version
1:3.5.4+dfsg2-0+deb7u9.

We recommend that you upgrade your libreoffice packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=i7Cs
-----END PGP SIGNATURE-----