openoffice-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dennis E. Hamilton" <dennis.hamil...@acm.org>
Subject RE: [QUESTION] Getting to AOO for Java (AOO4J)?
Date Sun, 15 Nov 2015 20:06:08 GMT
Patricia:

> -----Original Message-----
> From: Patricia Shanahan [mailto:pats@acm.org]
> Sent: Sunday, November 8, 2015 11:46
> To: dev@openoffice.apache.org
> Subject: Re: [QUESTION] Getting to AOO for Java (AOO4J)?
> 
> I would be strongly opposed to deserializing untrusted code - it is full
> of problems.
[orcmid] 

Please be more specific.  I can't tell from the previous post what you mean by deserializing
untrusted code.

> 
> On 11/8/2015 11:14 AM, toki wrote:
> > On 08/11/2015 14:32, Patricia Shanahan wrote:
> >
> >> I am just getting started on AOO, and don't know the history of this
> > discussion,
> >
> > Pretty much since Sun purchased StarWriter, there have been proposals
> to
> > make OpenOffice.org Java only. If one considers NeoOffice to be a Java
> > fork, then it is the only proposal to have gained any traction.
> >
> >> but here are some general advantages of Java:
> >
> > Things such as
> > http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-
> jboss-jenkins-opennms-and-your-application-have-in-common-this-
> vulnerability/
> > are viewed as sufficient reason to avoid Java wherever and whenever
> > possible.
> >
> > FWIW, that isn't the only list of known, unpatched zero day exploits
> of
> > Java, that are in the wild.
> >
> > jonathon
> >
> >
> >
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: dev-help@openoffice.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org


Mime
View raw message