libreoffice (1:7.0.4-4+deb11u11) bullseye-security; urgency=medium

libreoffice (1:7.0.4-4+deb11u11) bullseye-security; urgency=medium

  * LTS team upload
  * Fix CVE-2024-7788:
    Various file formats used by libreoffice are based on
    the zip file format.
    In cases of corruption of the underlying zip's central
    directory, LibreOffice offers a "repair mode" which will
    attempt to recover the zip file structure by scanning for
    secondary local file headers in the zip to reconstruct
    the document.
    Prior to this fix, in the case of digitally signed zip
    files, an attacker could construct a document which,
    when repaired, reported a signature status not valid
    for the recovered file.
    Previously if verification failed the user could
    choose to ignore the failure and enable the macros anyway.
    Repair document mode has to be inherently tolerant,
    so now in fixed versions all signatures are implied
    to be invalid in recovery mode.

[dgit import unpatched libreoffice 1:7.0.4-4+deb11u11]