- libreoffice (4:25.2.3-2+rpi1+deb13u6) trixie-staging; urgency=medium
++libreoffice (4:25.2.3-2+rpi1+deb13u7) trixie-staging; urgency=medium
+
+ [changes brought forward from 1:6.0.2-1+rpi2 by Peter Michael Green <plugwash@raspbian.org> at Fri, 27 Apr 2018 02:14:18 +0000]
+ * Disable testsuite.
+
+ [changes introduced in 1:5.4.0-1+rpi1 by Peter Michael Green]
+ * Disable pdfium, it fails to build for armv6
+
+ [changes introduced in 1:7.2.4-3+rpi1 by Peter Michael Green]
+ * Use clang 11, newer versions cause armv7 contamination issues.
+
+ [changes introduced in 4:24.2.5-1+rpi1 by Peter Michael Green]
+ * Build with gcc rather than clang.
+ * Disable skia.
+
- -- Raspbian forward porter <root@raspbian.org> Mon, 20 Jul 2026 17:04:02 +0000
++ -- Raspbian forward porter <root@raspbian.org> Fri, 02 Oct 2026 10:51:47 +0000
++
+ libreoffice (4:25.2.3-2+deb13u7) trixie-security; urgency=medium
+
+ * debian/patches/CVE-2026-62327?.diff: fix
+ - CVE-2026-63272 WMF DX-array heap OOB (CRFDC4JM)
+ - CVE-2026-63273 PDF decrypt-key OOB write (J00S1S9Y)
+ - CVE-2026-63274 PDF /Length stream OOB (QT406EDT)
+ - CVE-2026-63275 CFF addHints stack OOB (RNHRV8B9)
+ - CVE-2026-63276 CFF-to-Type1 stack OOB (YA6ADR86)
+ - CVE-2026-63278 environment / ini-file disclosure
+ (CVE-2024-12426 bypass)
+ - CVE-2026-63279 PICT palette-index heap OOB read
+
+ -- Rene Engelhard <rene@debian.org> Tue, 21 Jul 2026 13:41:22 -0300
libreoffice (4:25.2.3-2+deb13u6) trixie; urgency=medium