No scam. Please update to version 4.1.17. We will look into updating the update xml.
Best, Dave > On Nov 3, 2026, at 12:49 PM, ACG <[email protected]> wrote: > > I have received 12 of these alerts. > I opened opened OO and checked for updates. > It told me that I was on 4.1.16 and when I asked it to update I was told I > was up to date. > So is this message itself a scam? > > > On 03/11/2026 20:39, Arrigo Marchiori via users wrote: >> Severity: >> CVSS 4.0: 5.8 (medium) >> CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P >> >> Affected versions: >> >> - Apache OpenOffice through 4.1.16 >> >> Description: >> >> A crafted DXF document causes a heap buffer overflow in Draw in Apache >> OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a >> corruption of memory areas. >> Users are recommended to upgrade to version 4.1.17, which fixes this issue. >> >> Credit: >> >> Trail of Bits, in collaboration with Anthropic (reporter) >> >> References: >> >> https://openoffice.apache.org/ >> https://www.cve.org/CVERecord?id=CVE-2026-59267 >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
