Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: ooo-dev@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of jogischmidt@googlemail.com
 designates 209.85.214.47 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <4E8D959C.1010009@documentfoundation.org>
References: 
 <b629500c-045c-4018-90ba-d40924bc4121@zimbra60-e10.priv.proxad.net>
	<ae2e5b53-710b-4ed4-81b7-f5c386281837@zimbra60-e10.priv.proxad.net>
	<00e601cc8396$a4eeaca0$eecc05e0$@apache.org>
	<6AA74BAB-B366-4B88-9472-D78FA94DD599@webmink.com>
	<00ed01cc839c$70bd9030$5238b090$@apache.org>
	<CAA4ffp-o5bP4jK+KGsQ2QqF+zZy_0_X22ngjZseM_BWjQ94-jA@mail.gmail.com>
	<4E001CA5-762B-4C3B-BF51-FC0BD26C06F8@comcast.net>
	<CAA4ffp9xLczTLuLECnodjPwxLtjPy6z3bdawTkSFi_F1+WHmYQ@mail.gmail.com>
	<012601cc83b6$22112fe0$66338fa0$@acm.org>
	<C5A80A61-9329-4720-BABA-DB88D5731C8B@webmink.com>
	<CAHZP38CztSQ7+md2R18axj_Bs-RVka4_HP4U8ws-qTKXeHM36w@mail.gmail.com>
	<4E8D959C.1010009@documentfoundation.org>
Date: Thu, 6 Oct 2011 14:40:33 +0200
Message-ID: 
 <CAHZP38AZm+vC1pW2UwHcoivbYmWdZ3fiy6O6Pj58H3ixoC1nyg@mail.gmail.com>
Subject: Re: Vulnerability fixed in LibreOffice
From: =?UTF-8?Q?J=C3=BCrgen_Schmidt?= <jogischmidt@googlemail.com>
To: ooo-dev@incubator.apache.org
Content-Type: multipart/alternative; boundary=001517447ec67a808f04aea0a141

--001517447ec67a808f04aea0a141
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Thu, Oct 6, 2011 at 1:48 PM, Florian Effenberger <
floeff@documentfoundation.org> wrote:

> Hi,
>
> J=C3=BCrgen Schmidt wrote on 2011-10-06 13:18:
>
>> If a TDF or ASF list is secondary for me but i would volunteer to join
>> this
>> mailing list to help on this topic in the future. But maybe we should tr=
y
>> to
>> keep the existing and knownsecurityteam@openoffice.**org<knownsecurityte=
am@openoffice.org> mailing list and I
>>
>> see no reason why it shouldn't work. I think it is probably more a probl=
em
>> of the people on this list and missing communication. I assume that peop=
le
>> on this list have now other priorities and are not so responsive which o=
f
>> course is natural if they have a new job or moved into other projects ..=
.
>>
>
> from what I understood, we were told that things at Apache are "different=
".
> IMHO, there is an Apache security list, but only a few selected people ca=
n
> be on it, and IMHO they have to be Apache contributors.
>

a further Apache specific list is independent of the shared and
collaborative list
securityteam@openoffice.org<knownsecurityteam@openoffice.org>where we
want work together. My idea is to simply use the existing
securityteam@openoffice.org <knownsecurityteam@openoffice.org> list for
collaborative work on this topic. LibreOffice has also a separate security
list, right. So i don't see your point here.


> Guess what I think about the fact that the well established communication
> channel is about to vanish...
>

i don't think so, it is up to us to keep it working. We shouldn't mix the
past (confusing, demotivating) 6 month with the future when things have
settled down and everything is working here. We know that we still have a
lot of things to do but that shouldn't prevent us from working together on
this important security topic.

Juergen

--001517447ec67a808f04aea0a141--