-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 31 May 2025 05:25:27 +0200
Source: libreoffice
Architecture: source
Version: 1:7.0.4-4+deb11u13
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Changed-By: Daniel Leidert <dleidert@debian.org>
Changes:
libreoffice (1:7.0.4-4+deb11u13) bullseye-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS team.
* d/patches/CVE-2025-1080.patch: Add patch to fix CVE-2025-1080.
- Filter out more unwanted command URIs to fix an arbitrary script
execution via protocol.
* d/patches/CVE-2025-2866.patch: Add patch to fix CVE-2025-2866.
- For PDF signatures with SubFilter == adbe.pkcs7.sha1, verify the
actual (public-key) signature after the hash values compare equal.
Checksums-Sha1:
5b368faede8b3f58a472360a22da1d41552d8ac0 31324 libreoffice_7.0.4-4+deb11u13.dsc
ce830e2b59be9699f46df84ac0a6610b3d2f4f5a 19548080 libreoffice_7.0.4-4+deb11u13.debian.tar.xz
42b6aad61a6173ae573aa70abad12fe39f12a434 119960 libreoffice_7.0.4-4+deb11u13_amd64.buildinfo
Checksums-Sha256:
c9084313c549e46d4722ac429f3aa011e42a60f07ad36c973e62e0455e4da1a9 31324 libreoffice_7.0.4-4+deb11u13.dsc
9161c49b17459e09afb48550152ceb25045dfcb07ab86301b1b82c8eb4dd13b6 19548080 libreoffice_7.0.4-4+deb11u13.debian.tar.xz
6afd0b53ef144aa14012754af242bd6bb7c5ad6feffd762fd8061dff38c3ed82 119960 libreoffice_7.0.4-4+deb11u13_amd64.buildinfo
Files:
d0919c2307e81199dbec874d73c07ae0 31324 editors optional libreoffice_7.0.4-4+deb11u13.dsc
65f99302308a33a8a25c4325b6136a26 19548080 editors optional libreoffice_7.0.4-4+deb11u13.debian.tar.xz
2fc2dfbc4f97564692251d49268c7370 119960 editors optional libreoffice_7.0.4-4+deb11u13_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=IJPv
-----END PGP SIGNATURE-----
Attachment:
pgpFjR9e6xZLH.pgp
Description: PGP signature