[libreoffice-users] Re: LibreOffice ''Insecure" per Secunia

On 03/24/2012 03:14 PM, Dan Lewis wrote:
> On Sat, 2012-03-24 at 15:27 -0600, pase23176@mypacks.net wrote:
> > Hi, 
> > Love LibreOffice, have happily used it and it's predecessor for years! 
> > One problem: Secunia is now saying the most recent LibreOffice update is ''insecure''.
> > Not sure what that means, not a techie, but I wanted to pass that along fwiw.
> > Thanks,
> > pase
>
>      What is the link to Secunia's statement. I have done a web search
> and did not find what you said. Last summer, there was an issue. There
> was also a solution: upgrade to a specified version. Recently, there is
> the CVE-2012-0037 security issue. Upgrading to 3.4.6 if using 3.4.5 or
> upgrading to 3.5.1 from 3.5.0 will solve the problem as well.

Notice(s) are here:
https://www.libreoffice.org/advisories/
<https://www.libreoffice.org/advisories/CVE-2012-0037/>

>      Sounds to me that the most recent updates for LibreOffice are
> secure for now. Possibly some time in the future, some other security
> issues will arise. But this will give the developers time to continue
> working on the code weeding potential problems before they become real
> problems.
...

It seems to be a mix of LO and Secuna:

LO:
<http://nabble.documentfoundation.org/LibreOffice-Version-Mismatch-Conflict-td3853714.html#a3854153>
<http://nabble.documentfoundation.org/Fwd-tdf-discuss-LibreOffice-Version-Mismatch-Conflict-tt3854036.html>

Secuna:
<https://secunia.com/community/forum/thread/show/12365/update_to_3_5_1_not_acknowledged>
OOo/AOO has a similar problem w/Secuna:
<https://secunia.com/community/forum/thread/show/12366/i_couldn_t_update_openoffice_org_from_secunia>




-- 
For unsubscribe instructions e-mail to: users+help@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted