Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Debian 7 LTS: DLA-910-1 Moderate: LibreOffice Information Leak and Overflow

debian lts
Calendar Grey April 23, 2017
Scroller Debian Lts
Security patches for LibreOffice within Debian 7 have been released to mitigate risks related to possible information leaks and buffer overflow vulnerabilities.
CVE-2017-3157 Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure
Topics%20covered

Topics Covered

security advisory buffer overflow debian information disclosure libreoffice

Summary

Ben Hayak discovered that objects embedded in Writer and Calc
documents may result in information disclosure. Please see

for additional information.

CVE-2017-7870

An out-of-bounds write caused by a heap-based buffer overflow was
found in the Polygon class.

For Debian 7 "Wheezy", these problems have been fixed in version
1:3.5.4+dfsg2-0+deb7u9.

We recommend that you upgrade your libreoffice packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: libreoffice
Version: 1:3.5.4+dfsg2-0+deb7u9
CVE ID: CVE-2017-3157 CVE-2017-7870

Topics%20covered

Topics Covered

security advisory buffer overflow debian information disclosure libreoffice

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.