Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 415
Alerts This Week
Warning Icon 1 415

Debian: DSA-4022-1 Critical: LibreOffice Arbitrary Code Execution

debian
Calendar Grey November 8, 2017
Debian Logo
Update LibreOffice to address severe security issues in Debian. Flawed document processing could result in arbitrary code execution.
Marcin Noga discovered two vulnerabilities in LibreOffice, which could result in the execution of arbitrary code if a malformed PPT or DOC document is opened
Topics%20covered

Topics Covered

security advisory code execution debian arbitrary code execution libreoffice

Summary

Marcin Noga discovered two vulnerabilities in LibreOffice, which could
result in the execution of arbitrary code if a malformed PPT or DOC
document is opened.

For the oldstable distribution (jessie), these problems have been fixed
in version 1:4.3.3-2+deb8u9.

These vulnerabilities were fixed in Libreoffice 5.0.2, so the version
in the stable distribution (stretch) is not affected.

We recommend that you upgrade your libreoffice packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libreoffice
CVE ID: CVE-2017-12607 CVE-2017-12608

Topics%20covered

Topics Covered

security advisory code execution debian arbitrary code execution libreoffice

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.