Re: [libreoffice-users] CVE-2012-0337

On Fri, 2012-03-23 at 08:10 -0400, drew jensen wrote:
> On Fri, 2012-03-23 at 07:55 -0400, Dan Lewis wrote:
> > Using both LO and OOo, I'm aware of the need to patch this
> > vulnerability for both. What I don't know is what is the status of this
> > with respect to LO. I presently have 3.5.1-102 and 3.4.5.502. I did not
> > see anything mentioned about this on the LO main page. It would be nice
> > to have a statement on the home page when it was fixed for 3.4.x and
> > 3.5.x. It would be nice to have something on this mailing list.
> Hi Dan
>
> 3.4.6 for the patch. It was in the release announcement. 
>
> Not sure but it maybe that 3.5.1 also has the fix - 3.5.2 surely will.
>
> //drew

     I have now read the release announcement, and it contains
announcements for both 3.4.6 and 3.5.1. Both of these are rather vague.
     The 3.4.6 announcement mentions fixing a potential security issue.
The 3.5.1 states: "LibreOffice contains all the security fixes from
OpenOffice.org in 3.3.0, and perhaps more as a side-effect of the code
clean-ups."
     What security issues? I'm not sure I know from what I read.
     Another thing that comes from trying to find this information: What
is a link that I can use to list my concerns or other comments about the
layout of the LO website?

--Dan


-- 
For unsubscribe instructions e-mail to: users+help@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted