libreoffice (1:6.1.5-3+deb10u10) buster-security; urgency=medium

libreoffice (1:6.1.5-3+deb10u10) buster-security; urgency=medium

  * CVE-2023-2255: Improper access control in editor components of
    LibreOffice allowed an attacker to craft
    a document that would cause external links to be loaded without prompt.
    In the affected versions of LibreOffice documents
    that used "floating frames"
    linked to external files, would load the contents of those frames
    without prompting the user for permission to do so.
    This was inconsistent with the treatment of other linked
    content in LibreOffice.

[dgit import unpatched libreoffice 1:6.1.5-3+deb10u10]