Juray Sarinay discovered that PDF documents signed with the adbe.pkcs7.sha1 standard were incompletely validated by LibreOffice, which could cause invalid signatures to be accepted as legitimate.
https://security-tracker.debian.org/tracker/DSA-5908-1
Continue reading...
https://security-tracker.debian.org/tracker/DSA-5908-1
Continue reading...

