Return-Path: X-Original-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1E1CAC23A for ; Wed, 23 May 2012 14:59:38 +0000 (UTC) Received: (qmail 60966 invoked by uid 500); 23 May 2012 14:59:37 -0000 Delivered-To: apmail-incubator-ooo-dev-archive@incubator.apache.org Received: (qmail 60908 invoked by uid 500); 23 May 2012 14:59:37 -0000 Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: ooo-dev@incubator.apache.org Delivered-To: mailing list ooo-dev@incubator.apache.org Received: (qmail 60900 invoked by uid 99); 23 May 2012 14:59:37 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 May 2012 14:59:37 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of orwittmann@googlemail.com designates 209.85.214.47 as permitted sender) Received: from [209.85.214.47] (HELO mail-bk0-f47.google.com) (209.85.214.47) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 May 2012 14:59:31 +0000 Received: by bkcjm2 with SMTP id jm2so6472975bkc.6 for ; Wed, 23 May 2012 07:59:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=ZhfD3avITx9l1B1LxU4HXUfa1rCLpD14wTHJ1dT5SzU=; b=e5OwLSifTbFF7DdAmk1Ykwk9K63/Fb4FSnmriwqUcTPrnJIU5bRlDdsCeotyZT8SaQ k5lQalb0dgg4lDare4gavuMylePAuoyOEiHm8mTDVEGVUP7aTxtdxQauA0rNifIQ7CSz Rg0rjHELdvua4ht5VTPH9+3uFrXIzkUeIIwFBLiASGNrMdFcta+gdDQtpN4hYpNErixE RtZf014rvQ5blAP9BsJsORtKhAdUemkdKrWELhNLil8UmWj/Ixi0Feniu+P+lnlHULTP PdAlr4mbiwTI68TW3rqIbmhBtFH89wNIOLspPdWh+W3P1TLwFqEsZ7zQDzszBDl2XRhv 7C0Q== Received: by 10.204.157.23 with SMTP id z23mr12041603bkw.71.1337785150084; Wed, 23 May 2012 07:59:10 -0700 (PDT) Received: from [9.155.131.111] (deibp9eh1--blueice3n2.emea.ibm.com. [195.212.29.180]) by mx.google.com with ESMTPS id iq16sm8855965bkc.6.2012.05.23.07.59.07 (version=SSLv3 cipher=OTHER); Wed, 23 May 2012 07:59:09 -0700 (PDT) Message-ID: <4FBCFB3E.4080909@googlemail.com> Date: Wed, 23 May 2012 16:59:10 +0200 From: Oliver-Rainer Wittmann User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 MIME-Version: 1.0 To: ooo-dev@incubator.apache.org Subject: Re: CVE-2012-1149 Patch? References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Hi, On 23.05.2012 15:58, Andor E wrote: > Hi, > I have to create a patch for CVE-2012-1149 for OOo 3.2.1. I had a look > at the AOO sources, but I couldn't find any relevant commits. Could > somebody point me to the right direction? > Changes of revision 129929 - http://svn.apache.org/viewvc?rev=1299729&view=rev - are made for CVE-2012-1149. Nevertheless your patch is welcome as it always good to have more people involved in such issues. Best regards, Oliver.