Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.changes > #14426

Accepted libreoffice 4:25.2.3-2+deb13u8 (source) into proposed-updates

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 03 Oct 2026 12:46:08 +0200
Source: libreoffice
Architecture: source
Version: 4:25.2.3-2+deb13u8
Distribution: trixie-security
Urgency: medium
Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Changed-By: Rene Engelhard <rene@debian.org>
Changes:
 libreoffice (4:25.2.3-2+deb13u8) trixie-security; urgency=medium
 .
   * debian/patches/CVE-2026-63277.diff: fix CVE-2026-63277
     ("RCE on document open in Calc")
   * debian/patches/do-not-load-exotic-protocols-for-document-supplied-data.diff:
     fix CVE-2026-63270 environment / config disclosure via missing
     exotic-protocol guards, also prerequisite for CVE-2026-62367 and
     CVE-2026-63268
   * debian/patches/CVE-2026-63269-?.diff: fix CVE-2026-63269 local file read
     + GET SSRF via GStreamer and HLS media
   * debian/patches/CVE-2026-63267-?.diff: fix CVE-2026-63267 local file read
     + GET SSRF via csv data provider
   * debian/patches/CVE-2026-63268-?.diff: fix CVE-2026-63268 local file read
     via sql sdbc:flat:file:// db href
   * debian/patches/CVE-2026-63266-?.diff: fix
     CVE-2026-63266 arbitrary file write via firebird backup
     escalates to RCE
   * debian/patches/firebird-db-connection.diff: backport from upstream, fix
     db connection to firebird
     debian/patches/firebird-module-path.diff,
     debian/patches/firebird-call-writeFile-outside-the-SAL_WARN_IF-cond.patch:
     backport from upstream to fix tests with Debian's patched firebird
   * debian/source/include-binaries: add (changed by the build, 3.0->4.0?)
     firebird_integer_ods12.odb and tdf132924.odb
Checksums-Sha1:
 4f31123b978fc69b49041e05fb66e8a97528d85f 36665 libreoffice_25.2.3-2+deb13u8.dsc
 8827523942747e4c0d6a2b191c3d4545a6762705 28334704 libreoffice_25.2.3-2+deb13u8.debian.tar.xz
 51c055f75068fff5f520341dd30f57ed523b2ac6 28403 libreoffice_25.2.3-2+deb13u8_source.buildinfo
Checksums-Sha256:
 c4ee4d5f312e14abd3219291e3ff68e905c74fc99e9abbbac2d6857fe8af5b00 36665 libreoffice_25.2.3-2+deb13u8.dsc
 e9bb482142969437be528f48eb4614ac8e06f872c08843ab681bcabf228fc516 28334704 libreoffice_25.2.3-2+deb13u8.debian.tar.xz
 3f9640a4f7a88ff8c877a98f253a3d0de1f1ea250c3e702cb4306118279aeba9 28403 libreoffice_25.2.3-2+deb13u8_source.buildinfo
Files:
 2f1a02a2547faf95b55b2310cf169824 36665 editors optional libreoffice_25.2.3-2+deb13u8.dsc
 eb79fdc5a31e2b20c8ae755a9d72aeaa 28334704 editors optional libreoffice_25.2.3-2+deb13u8.debian.tar.xz
 f2cdaf51e5701ef93f87a2e20fb500aa 28403 editors optional libreoffice_25.2.3-2+deb13u8_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=a9Eh
-----END PGP SIGNATURE-----

Back to linux.debian.changes | Previous | Next | Find similar | Unroll thread

Thread

  Accepted libreoffice 4:25.2.3-2+deb13u8 (source) into proposed-updates Debian FTP Masters <ftpmaster@ftp-master.debian.org> - 2026-10-11 13:50 +0200

csiph-web