I downloaded the original tarballs from https://download.documentfoundation.org/libreoffice/src/7.6.6/ and:
- verified their signatures
- matched 7.6.6.orig.tar.xz to upstream's 7.6.6.3 (it's a versioning quirk to call 7.6.6rc3 7.6.6.3 in the end):
$ sha256sum libreoffice_7.6.6.orig.tar.xz upstream/libreoffice-7.6.6.3.tar.xz
41a83a7f09c539e22c873107d5d4088ac7cdf1a299ad9e9de15e30600fe521b6 libreoffice_7.6.6.orig.tar.xz
41a83a7f09c539e22c873107d5d4088ac7cdf1a299ad9e9de15e30600fe521b6 upstream/libreoffice-7.6.6.3.tar.xz
I also verified the packaging changes in debian/* via debdiff.
The extra repacked tarballs from the source package are a bit harder to verify, I'm trying to do that next.
I downloaded the original tarballs from https:/ /download. documentfoundat ion.org/ libreoffice/ src/7.6. 6/ and: 7.6.6.orig. tar.xz upstream/ libreoffice- 7.6.6.3. tar.xz 22c873107d5d408 8ac7cdf1a299ad9 e9de15e30600fe5 21b6 libreoffice_ 7.6.6.orig. tar.xz 22c873107d5d408 8ac7cdf1a299ad9 e9de15e30600fe5 21b6 upstream/ libreoffice- 7.6.6.3. tar.xz
- verified their signatures
- matched 7.6.6.orig.tar.xz to upstream's 7.6.6.3 (it's a versioning quirk to call 7.6.6rc3 7.6.6.3 in the end):
$ sha256sum libreoffice_
41a83a7f09c539e
41a83a7f09c539e
I also verified the packaging changes in debian/* via debdiff.
The extra repacked tarballs from the source package are a bit harder to verify, I'm trying to do that next.