Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: ooo-dev@incubator.apache.org
Received-SPF: pass (athena.apache.org: domain of simon@webmink.com designates
 74.125.82.43 as permitted sender)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1084)
Subject: Re: Vulnerability fixed in LibreOffice
From: Simon Phipps <simon@webmink.com>
In-Reply-To: <00e601cc8396$a4eeaca0$eecc05e0$@apache.org>
Date: Wed, 5 Oct 2011 20:48:56 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <6AA74BAB-B366-4B88-9472-D78FA94DD599@webmink.com>
References: 
 <b629500c-045c-4018-90ba-d40924bc4121@zimbra60-e10.priv.proxad.net>
 <ae2e5b53-710b-4ed4-81b7-f5c386281837@zimbra60-e10.priv.proxad.net>
 <00e601cc8396$a4eeaca0$eecc05e0$@apache.org>
To: ooo-dev@incubator.apache.org

I've investigated and I am informed by one of the LO developers:
> The initial report was sent to securityteam@openoffice.org on
> 25-07-2011, the assigned CVE id was cc'ed there somewhat later on. I
> posted the 5 patches which in combination would fix it to the list as
> well. I was informed an ApacheOOo representative had joined the list.
=20

On 5 Oct 2011, at 20:40, Dennis E. Hamilton wrote:

> [bcc to ooo-security@i.a.o]
>=20
> It is difficult to tell from a press release what the details of =
security fixes are. =20
>=20
>=20
> -----Original Message-----
> From: FR web forum [mailto:oooforum@free.fr]=20
> Sent: Wednesday, October 05, 2011 10:15
>=20
> Good morning,
>=20
> TDF has published a fix for LibO: http://wp.me/p1byPE-bQ
>=20
> Do you know if OOo is impacted too?
>=20
> Thank you
>=20