- libreoffice (1:5.2.7-1+rpi1+deb9u3) stretch-staging; urgency=medium
++libreoffice (1:5.2.7-1+rpi1+deb9u5) stretch-staging; urgency=medium
+
+ [changes brought forward from 1:5.2.4-2+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 07 Jan 2017 01:42:16 +0000]
+ * Disable chromium stuff as we don't currently have chromium in the Raspbian
+ repository.
+
- -- Raspbian forward porter <root@raspbian.org> Mon, 12 Mar 2018 14:27:13 +0000
++ -- Raspbian forward porter <root@raspbian.org> Sun, 03 Feb 2019 17:21:22 +0000
++
+ libreoffice (1:5.2.7-1+deb9u5) stretch-security; urgency=high
+
+ * debian/patches/disableClassPathURLCheck.diff: add workaround to
+ fix build with openjdks with S8195874 included - add
+ -Djdk.net.URLClassPath.disableClassPathURLCheck=true to JAVAIFLAGS;
+ see https://gerrit.libreoffice.org/#/c/63118/2
+
+ * debian/patches/keep-pyuno-script-processing-below-base-uri.diff: as name
+ says (CVE-2018-16858)
+ * debian/patches/show-partial-signatures-even-if-cert-validation-fails.diff:
+ as name says (CERT-Bund#2018100828000257), but backport the non-UI parts only
+ - the "signing already existing PDFs" feature doesn't exist here yet
+
+ -- Rene Engelhard <rene@debian.org> Wed, 23 Jan 2019 18:51:09 +0100
+
+ libreoffice (1:5.2.7-1+deb9u4) stretch-security; urgency=high
+
+ * debian/patches/CVE-2018-10119.diff,
+ debian/patches/CVE-2018-10120.diff: as name says...
+
+ -- Rene Engelhard <rene@debian.org> Wed, 18 Apr 2018 17:17:55 +0200
libreoffice (1:5.2.7-1+deb9u3) stretch; urgency=medium