Return-Path: X-Original-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id D6F4277F8 for ; Thu, 6 Oct 2011 15:44:28 +0000 (UTC) Received: (qmail 91752 invoked by uid 500); 6 Oct 2011 15:44:28 -0000 Delivered-To: apmail-incubator-ooo-dev-archive@incubator.apache.org Received: (qmail 91700 invoked by uid 500); 6 Oct 2011 15:44:28 -0000 Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: ooo-dev@incubator.apache.org Delivered-To: mailing list ooo-dev@incubator.apache.org Received: (qmail 91692 invoked by uid 99); 6 Oct 2011 15:44:28 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 06 Oct 2011 15:44:28 +0000 X-ASF-Spam-Status: No, hits=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of floeff@documentfoundation.org designates 178.63.91.70 as permitted sender) Received: from [178.63.91.70] (HELO bilbo.documentfoundation.org) (178.63.91.70) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 06 Oct 2011 15:44:20 +0000 Received: from localhost (localhost [127.0.0.1]) by bilbo.documentfoundation.org (Postfix) with ESMTP id 93C701BF21A7 for ; Thu, 6 Oct 2011 17:44:00 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d= documentfoundation.org; h=content-transfer-encoding:content-type :content-type:in-reply-to:references:subject:subject :mime-version:user-agent:organization:from:from:date:date :message-id:received:received; s=20110105; t=1317915838; bh=Susm OGIf6tU/HdhW8cW5OS7gkET15nx3/rem46fVVIs=; b=H1HPUE6iHEPxcMgaUKDB lwl9bG+tZI4UxoSlJVFaxbLe2zZmf5+fdz6XZqLbsCv8/UOk19ggfshRXHdT4WSp 0Hpkbq+vIYW7kXqVEBvbaS43hnDeh8myoz6yt7no8OPwnSDHVKztWuCTcumGZop/ 8vPElywXEOVrxL/R2yKNyOE= X-Virus-Scanned: amavisd-new-2.6.4 (20090625) at bilbo.documentfoundation.org Received: from bilbo.documentfoundation.org ([127.0.0.1]) by localhost (bilbo.documentfoundation.org [127.0.0.1]) (amavisd-new, port 10026) with LMTP id O1EjPzyIIIRD for ; Thu, 6 Oct 2011 17:43:58 +0200 (CEST) Received: from [192.168.0.5] (188-192-0-70-dynip.superkabel.de [188.192.0.70]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: floeff) by bilbo.documentfoundation.org (Postfix) with ESMTPSA id 71C0F1BF20FE for ; Thu, 6 Oct 2011 17:43:58 +0200 (CEST) Message-ID: <4E8DCCBD.6000003@documentfoundation.org> Date: Thu, 06 Oct 2011 17:43:57 +0200 From: Florian Effenberger Organization: The Document Foundation User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1 MIME-Version: 1.0 To: ooo-dev@incubator.apache.org Subject: Re: Vulnerability fixed in LibreOffice References: <012601cc83b6$22112fe0$66338fa0$@acm.org> <4E8D959C.1010009@documentfoundation.org> <1698C6FB-5815-4CB1-903E-1507C82A8300@webweaving.org> <4E8D9D99.9010506@documentfoundation.org> <512F975D-682E-4EFF-A36C-CAA930AFBDE7@webweaving.org> <625B16EE-6527-42A1-BF7C-4FCE69717998@jaguNET.com> <20111006150529.GQ5916@thinkpad.thebehrens.net> <5285EFA6-F46C-4007-8ACE-6DF2DD348AB9@comcast.net> In-Reply-To: <5285EFA6-F46C-4007-8ACE-6DF2DD348AB9@comcast.net> X-Enigmail-Version: 1.3.2 OpenPGP: id=8C9A6155; url=http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x8C9A6155 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Hi, Dave Fisher wrote on 2011-10-06 17:25: > When that discussion was settled it seems someone on the TDF side should have taken some initiative to inform AOOo at our list. To not have that happen was not in any spirit of cooperation. as Thorsten said, AOOo was informed. There was one AOOo representative on the OOo security mailing list, AFAIK. > Not really, that is NOT AOOo's list. It is even now Oracle's abandoned ML. > So, you guys decided to ignore the fact that we had established an ooo-security@a.i.o because it wasn't what you wanted to have happen? No, I was personally told that I should not be involved on that list, because of ICLA-PPMC-whatever-abbreviation things and that at Apache things are different. So, don't blame me. My proposal was to use the existing mailing list (subscribers) and work as before, but that obviously was not desired. Florian -- Florian Effenberger Steering Committee and Founding Member of The Document Foundation Tel: +49 8341 99660880 | Mobile: +49 151 14424108 Skype: floeff | Twitter/Identi.ca: @floeff