Thank you for your contribution to Debian.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Nov 2023 17:39:15 +0000 Source: libreoffice Architecture: source Version: 4:7.4.7-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org> Changed-By: Rene Engelhard <r...@debian.org> Changes: libreoffice (4:7.4.7-1+deb12u1) bookworm-security; urgency=high . * debian/patches/escape-url-passed-to-gstreamer.diff: add from libreoffice-7-5; fixes CVE-2023-6185: "Improper input validation enabling arbitrary Gstreamer pipeline injection" * debian/patches/floating-frame-targets-unneeded-protocols.diff, debian/patches/warn-about-exotic-protocols-as-well.diff, debian/patches/ignore-LO-special-purpose-hyperlinks-per-default.diff, debian/patches/reuse-AllowedLinkProtocolFromDocument-{1,2}.diff: add from libreoffice-7-5; fixes CVE-2023-6186: "Link targets allow arbitrary script execution" * debian/patches/work-around-expired-certificiate-in-test.diff: add from upstream https://gerrit.libreoffice.org/c/core/+/159909 Checksums-Sha1: fa1d4180bf7244bf08d9c95bbee2eb83d0586304 32266 libreoffice_7.4.7-1+deb12u1.dsc 1bc892fe1e928938d111c918f690c98b957142a7 111792188 libreoffice_7.4.7.orig-helpcontent2.tar.xz b0abc4c554f22dee677330fe70e3df83a19c1947 200355412 libreoffice_7.4.7.orig-translations.tar.xz e1850b0d5e3ca17b22f4bf013b93b6bdc9d30d66 264680724 libreoffice_7.4.7.orig.tar.xz 769461119138f3359deb0e27769c00f6215d0f6b 833 libreoffice_7.4.7.orig.tar.xz.asc 411d98a7b41b9a9b07c14dc306c61b4ce451bc49 24749484 libreoffice_7.4.7-1+deb12u1.debian.tar.xz 03bfdd56f51c9d87eb420cc0691e6e3fc852939c 35483 libreoffice_7.4.7-1+deb12u1_source.buildinfo Checksums-Sha256: 3eb885f8330ef44d6b75aa264e97310998e3d2aa35baf24c0073b5b050985bde 32266 libreoffice_7.4.7-1+deb12u1.dsc 6f9b06dec9fadde461c5237bc35365bf37d1c9292a7b8d26241afb83eeb6c154 111792188 libreoffice_7.4.7.orig-helpcontent2.tar.xz cf772d54d17fa58318dcecd064c520481d0f98a16b872d899098df3a321c247f 200355412 libreoffice_7.4.7.orig-translations.tar.xz 743d91f2a138a678380fa7a8ecb5b2401d994b067b330750f03ad8f523a2fb20 264680724 libreoffice_7.4.7.orig.tar.xz f10980f93e55f99a4921839c1a28aa82f60d7e38136a2d427f75c91d7c304ee9 833 libreoffice_7.4.7.orig.tar.xz.asc 73991ae36e2079aa857dc7af73db192e8c3d52ad4744980a09ede4c2b72cccc8 24749484 libreoffice_7.4.7-1+deb12u1.debian.tar.xz 96bf955874c76586a68408fe78a62a2695a2cd582c8883f73ea1afc0ad6936b8 35483 libreoffice_7.4.7-1+deb12u1_source.buildinfo Files: 4d46f1c28fb7d3690b459702feb70a91 32266 editors optional libreoffice_7.4.7-1+deb12u1.dsc 1d06ac60d90ff38c4992d44e074080fd 111792188 editors optional libreoffice_7.4.7.orig-helpcontent2.tar.xz 0dacc723dc1332b849f9b93075dcbe07 200355412 editors optional libreoffice_7.4.7.orig-translations.tar.xz 94ef5331983b96f6ec7af7bfb8f748a9 264680724 editors optional libreoffice_7.4.7.orig.tar.xz 09c027e824888f4d7b3368cec7f67a34 833 editors optional libreoffice_7.4.7.orig.tar.xz.asc 7bdf46712f7317e97322ebb5e16597df 24749484 editors optional libreoffice_7.4.7-1+deb12u1.debian.tar.xz 0b0bf380c8f77e0f44095e2c7c405651 35483 editors optional libreoffice_7.4.7-1+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE4S3qRnUGcM+pYIAdCqBFcdA+PnAFAmVmXoEQHHJlbmVAZGVi aWFuLm9yZwAKCRAKoEVx0D4+cEMAEADWWGoPhT7vyYn9TrM4hsHx6vxDftjpXxCB p5x6qYVOlKg+BlEfLX75x3Z38HSm86YuvGva/tyqlnWteqHdACZbSig3KLWgHoXC VGFBStQCTO0CxDdhi2iXYFoLCUWQ3niWfhekMP0u8x/AnYWTXXrHpQPTNXhn0clY SeidTaCOAlz1bklsaWbnvrqVLXB9OlvdG6fs42bRHDmkBegmGqfW3vTuLXRjAG/Y FyeqCAxEDxRL3wbV2XBPeQu3x8sZ03Bnsg4nKwxnl/fv2sNbzHsz3hCXDfR3LcJw eHY9rzUBJAt6KEoFzsEwHhtsVg17p6gSGLvRnOukzTL1J92yQ6x00woVjmqUpupk uYwuq2G6ajQQzW1uyvMzYC2zO/m34spLdbk6ciGfGHP/DLNG1Gwcilj3zfrheuD5 W1HzStas/X5yBMuXhlnXDUUVAQSHw8m+Oyj9/TvTTCgJVGuqNHcC30DgFO1w2mNw jfRBNoCNw4+PCmEhRRCJ0/hj0j+9AVZxFjQmtyANSrgu2kvo0ijcjsOABcaTRrD3 mWWVAJWioo01O3+Jzm36xbeQgunQDlOJlgIAMyGbJ8BKtgPHTUhhrPH/DtXKFeN6 iDeoBfaJz/UGzJEcwD4W4ZIL7b6WamdtwfIUmgPl71T/SEC2WuUNTA7Ad+g64oMf PMCAzVlZow== =B/37 -----END PGP SIGNATURE-----