[DSA 6346-1] libreoffice security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6346-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
June 15, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libreoffice
CVE ID         : CVE-2026-6039 CVE-2026-6040 CVE-2026-6045 CVE-2026-8356 
                 CVE-2026-8357 CVE-2026-8358

Multiple security vulnerabilities were discovered in LibreOffice, which
could result in denial of service or potentially the execution of
arbitrary code if malformed files are opened.

For the stable distribution (trixie), these problems have been fixed in
version 4:25.2.3-2+deb13u5.

We recommend that you upgrade your libreoffice packages.

For the detailed security status of libreoffice please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libreoffice

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=bsLy
-----END PGP SIGNATURE-----