Accepted libreoffice 1:6.1.5-3+deb10u10 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 12 Aug 2023 19:58:29 +0000
Source: libreoffice
Architecture: source
Version: 1:6.1.5-3+deb10u10
Distribution: buster-security
Urgency: medium
Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Changes:
libreoffice (1:6.1.5-3+deb10u10) buster-security; urgency=medium
.
* CVE-2023-2255: Improper access control in editor components of
LibreOffice allowed an attacker to craft
a document that would cause external links to be loaded without prompt.
In the affected versions of LibreOffice documents
that used "floating frames"
linked to external files, would load the contents of those frames
without prompting the user for permission to do so.
This was inconsistent with the treatment of other linked
content in LibreOffice.
Checksums-Sha1:
b151c61ef4af4c79a33d926c180296ff153e2f6e 27758 libreoffice_6.1.5-3+deb10u10.dsc
65e0627c816b277c1e2d6e47e4e87cf8d327fc39 10007024 libreoffice_6.1.5-3+deb10u10.debian.tar.xz
8dfb06c1308305c7c792a338b5bde0026d44c9f6 109178 libreoffice_6.1.5-3+deb10u10_amd64.buildinfo
Checksums-Sha256:
82c416ef896ae4881b252ec62f98f90a413bddd676553ed8f79e1fa8b42c49ee 27758 libreoffice_6.1.5-3+deb10u10.dsc
5ec4065e48af5d5f9c3c7e29cb22ab0c9411f92133845ffb77c0fd6587fb50df 10007024 libreoffice_6.1.5-3+deb10u10.debian.tar.xz
1de097c276df7dce9f64949e7c5e3a496dc7fca04dd3397061365f7cbc89121a 109178 libreoffice_6.1.5-3+deb10u10_amd64.buildinfo
Files:
dfeeec646cb2cfde9ec5bc03c5a1af2e 27758 editors optional libreoffice_6.1.5-3+deb10u10.dsc
c2a92576f735c2495e26a2f681581e2b 10007024 editors optional libreoffice_6.1.5-3+deb10u10.debian.tar.xz
fd128acf81b70ce44861fbfae310700a 109178 editors optional libreoffice_6.1.5-3+deb10u10_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=ZeI8
-----END PGP SIGNATURE-----
Reply to: