libreoffice (1:7.0.4-4+deb11u1) bullseye-security; urgency=high

libreoffice (1:7.0.4-4+deb11u1) bullseye-security; urgency=high

  * backport fixes from libreoffice-7-0 branch:
    - xmlsecurity-replace-XSecParser-implementation.diff
    - xmlsecurity-improve-handling-of-multiple-X509Data-elements.diff:
    (fixes CVE-2021-25633 "Double Certificate Attack")
    - xmlsecurity-XSecParser-confused-about-multiple-timestamps.diff,
      xmlsecurity-ignore-elements-in-ds:Object-that-arent-signed.diff:
    (fixes CVE-2021-25634 "Timestamp Manipulation with Signature Wrapping")
    - default-to-CertificateValidity::INVALID.diff:
    (fixes CVE-2021-25635 "Content Manipulation with Certificate Validation
     Attack")

[dgit import unpatched libreoffice 1:7.0.4-4+deb11u1]