Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-63269 →
DEBIAN-CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In fixed versions LibreOffice does not follow playlists that name further resources, and linked media is under link update control.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:25.2.3-2+deb13u8"}]}]
Debian:14
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:26.2.5.2-1"}]}]
Références
- advisory security-tracker.debian.org