Hi all, On Tue, Jul 19, 2011 at 4:15 AM, NoOp <gl...@sbcglobal.net> wrote: > On 07/18/2011 06:07 PM, plino wrote: >> >> NoOp wrote: >>> >>> I'd recommend a followup to the dev list. plino, when you do that you >>> might also add links to the security notices for the earlier version of >>> VC++ 2008. >>> >> >> The Dev list is for devs only. I have unsubscribed from it. > > I got crap for posting there a few times (Jesús Corrius will certainly > remember "Change executable/sh names" - which went nowhere and are still > not changed btw), so I can't blame you.
Well, this is not the developers list and I don't want a discussion that goes to nowhere :) so here is my last message to this thread with my points: 1. LibreOffice and all the other applications (ok, unless they are using private assemblies[1]) will always use the lastest updated versions of the libraries installed in the system. Any user has many old libraries installed in the WinSxS directory and it's not a security threat because they are not in use. 2. The versions of the C++ libraries we are distributing are the last ones available from Microsoft as a full package. According to the security bulletin: "These updates are not the versions on the download center. Microsoft does not recommend customers redistribute any version other than the full versions that can be downloaded from the Microsoft Download Center (KB973544, KB973551, and KB973552)." [2] And this is what we are doing. If you check the KBxxxxxx's mentioned, these are the versions we are currently distributing. 3. When Microsoft provides new full versions of the Visual Studio 2008 runtimes, we will be happy to distribute them. So if you find new full versions in the Microsoft Download Center, let us know and we will update them immediately. [1] http://helgeklein.com/blog/2010/03/deploying-visual-c-runtime-files-as-private-assemblies/ [2] http://support.microsoft.com/kb/973924 -- Jesús Corrius <je...@softcatala.org> Document Foundation founding member Mobile: +34 661 11 38 26 Skype: jcorrius | Twitter: @jcorrius -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted