Debian Security Advisory

DSA-4022-1 libreoffice -- security update

Date Reported:
07 Nov 2017
Affected Packages:
Security database references:
In Mitre's CVE dictionary: CVE-2017-12607, CVE-2017-12608.
More information:

Marcin Noga discovered two vulnerabilities in LibreOffice, which could result in the execution of arbitrary code if a malformed PPT or DOC document is opened.

For the oldstable distribution (jessie), these problems have been fixed in version 1:4.3.3-2+deb8u9.

These vulnerabilities were fixed in Libreoffice 5.0.2, so the version in the stable distribution (stretch) is not affected.

We recommend that you upgrade your libreoffice packages.