after a long time expat xml parser got an update http://expat.sourceforge.net/ mainly fixing overflow https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1283
For the record: fixed by commit https://gerrit.libreoffice.org/gitweb?p=core.git;a=commit;h=ac19ed0fed3197af2ed3f07e00185befcb90a8fe .
David Tardon committed a patch related to this issue. It has been pushed to "libreoffice-5-1": http://cgit.freedesktop.org/libreoffice/core/commit/?id=5e32c0ef771e0d44b4c747c26724572382f8e863&h=libreoffice-5-1 tdf#99078 upload expat 2.1.1 It will be available in 5.1.3. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.