Debian alert DLA-1356-1 (libreoffice)

From:
    	     
 
Emilio Pozuelo Monfort <pochu@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 1356-1] libreoffice security update 
Date:
    	     
 
Thu, 19 Apr 2018 23:07:49 +0200
Message-ID:
    	     
 
<37cffb36-d8da-016f-c3cf-daaf31281562@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : libreoffice
Version        : 1:3.5.4+dfsg2-0+deb7u11
CVE ID         : CVE-2018-10119 CVE-2018-10120

Fuzzing by the OSS-Fuzz project found two memory safety issues
in LibreOffice, which could result in an application crash or
possibly other unspecified impact.

For Debian 7 "Wheezy", these problems have been fixed in version
1:3.5.4+dfsg2-0+deb7u11.

We recommend that you upgrade your libreoffice packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Qlsx
-----END PGP SIGNATURE-----