Security advisory: Recently reported zlib compression issue impacts Qt

zlib has recently reported that it has a security issue when deflating which could cause memory corruption if the input has many distant matches. This is reported in a bit more detail here: and has been assigned the CVE id CVE-2018-25032. This has been fixed in an update to zlib 1.2.12 This affec...

CVE-2021-40439

CVE-2021-40439 maps to Apache OpenOffice’s use of expat. The issue stems from the historic Billion Laughs XML entity expansion vulnerability (CVE-2013-0340) affecting expat in OpenOffice builds up to 4.1.10, with Expat patched in 4.1.11. The linked CNVD entry describes XML external entity injecti...

MGASA-2015-0441 Updated libreoffice packages fix security vulnerability

Federico Scrinzi discovered that LibreOffice incorrectly handled documents inserted into Writer or Calc via links. If a user were tricked into opening a specially crafted document, a remote attacker could possibly obtain the contents of arbitrary files CVE-2015-4551. It was discovered that...

USN-2793-1: LibreOffice vulnerabilities

Federico Scrinzi discovered that LibreOffice incorrectly handled documents inserted into Writer or Calc via links. If a user were tricked into opening a specially crafted document, a remote attacker could possibly obtain the contents of arbitrary files. CVE-2015-4551 It was discovered that...