[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2007-03-22 Thread andreschnabel
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013





--- Additional comments from [EMAIL PROTECTED] Thu Mar 22 08:25:31 + 
2007 ---
*** Issue 75594 has been marked as a duplicate of this issue. ***

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2007-02-12 Thread tm
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User tm changed the following:

What|Old value |New value

  Status|VERIFIED  |CLOSED





--- Additional comments from [EMAIL PROTECTED] Mon Feb 12 15:29:55 + 
2007 ---
closed

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2007-01-16 Thread tm
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User tm changed the following:

What|Old value |New value

  Status|RESOLVED  |VERIFIED





--- Additional comments from [EMAIL PROTECTED] Tue Jan 16 05:18:35 -0800 
2007 ---
checked and verified in cws obr04 - OK !

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2007-01-12 Thread obr
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User obr changed the following:

What|Old value |New value

 Assigned to|obr   |tm

Target milestone|OOo 2.0.2 |OOo 2.2





--- Additional comments from [EMAIL PROTECTED] Fri Jan 12 05:55:35 -0800 
2007 ---
@tm : please verify.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2007-01-08 Thread obr
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User obr changed the following:

What|Old value |New value

 Assigned to|tm|obr

  Ever confirmed|  |1

  Status|UNCONFIRMED   |NEW





--- Additional comments from [EMAIL PROTECTED] Mon Jan  8 05:35:17 -0800 
2007 ---
re-assigning.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2007-01-08 Thread obr
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User obr changed the following:

What|Old value |New value

  Status|NEW   |RESOLVED

  Resolution|  |FIXED

Target milestone|---   |OOo 2.0.2





--- Additional comments from [EMAIL PROTECTED] Mon Jan  8 05:38:44 -0800 
2007 ---
Patch from issue 72544 already applied in CWS obr04.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-13 Thread cloph
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User cloph changed the following:

What|Old value |New value

  CC|'55zya43' |'55zya43,cloph'





-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-13 Thread 55zya43
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013





--- Additional comments from [EMAIL PROTECTED] Wed Dec 13 10:20:52 -0800 
2006 ---
It occurred to me that my given patch and 
demo_listing_home_directory_to_console.odt are going 
beyond the actual problem of this bug. Therefore, I created separated bugs for 
them
#72543
http://www.openoffice.org/issues/show_bug.cgi?id=72543
and #72544
http://www.openoffice.org/issues/show_bug.cgi?id=72544
.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-11 Thread es
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User es changed the following:

What|Old value |New value

 Assigned to|es|tm

Priority|P1|P3

 Summary|[EXPLOITABLE SECURITY ISSU|Hyperlink whose URL contai
|E] Hyperlink whose URL con|ns ( character can't be cl
|tains ( character can't be|icked on
| clicked on   |





--- Additional comments from [EMAIL PROTECTED] Mon Dec 11 01:59:03 -0800 
2006 ---
I cannot reproduce the execution of a script in the shell (;clear;ls).

Which shell are you using to start OOo? (Thus, no ovious security issue P1 - 
P3)

THis also happens in Calc - reassigning to framework.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-11 Thread 55zya43
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013





--- Additional comments from [EMAIL PROTECTED] Mon Dec 11 07:42:35 -0800 
2006 ---
Note that I did not author the original bug description nor the examples.

However, I am seriously concerened that this problem exists since more than a 
year has not been 
resolved. Even no one commented on the more explicit examples given by 
jainswati in September (3 
months ago!)

Now that I also came across this problem, I provided a patch. But the bug is 
just moved from one 
developer to the other--no one takes a look at the patch to see and fix the 
problem.

@es Even if you cannot reproduce the bug, even if the bug cannot be exploited 
actively now 
(although it can), if I provide some patch which might solve security issues, 
you should at least look at 
the patch.

I'll attach another file which shows the problem. My shell is 
GNU bash, version 3.2.5(1)-release (x86_64-pc-linux-gnu)
. I open the file via 
ooffice2 demo_listing_home_directory_to_console.odt
.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-11 Thread 55zya43
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User 55zya43 changed the following:

What|Old value |New value

 Attachment data|  |Created an attachment (id=
|  |41338)
After opening the f
|  |ile from a console by oof
|  |fice2 demo_listing_home_di
|  |rectory_to_console.odt cl
|  |icking the link lists the 
|  |contents of the current us
|  |ers home directory in the 
|  |console






--- Additional comments from [EMAIL PROTECTED] Mon Dec 11 07:47:03 -0800 
2006 ---
Created an attachment (id=41338)
After opening the file from a console by ooffice2 
demo_listing_home_directory_to_console.odt clicking the link lists the 
contents of the current users home directory in the console


-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-06 Thread 55zya43
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User 55zya43 changed the following:

What|Old value |New value

 Attachment is patch|  |Created an attachment (id=
|  |41172)
corrected quoting i
|  |n scripts






--- Additional comments from [EMAIL PROTECTED] Wed Dec  6 09:08:43 -0800 
2006 ---
Created an attachment (id=41172)
corrected quoting in scripts


-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-06 Thread 55zya43
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013





--- Additional comments from [EMAIL PROTECTED] Wed Dec  6 09:16:03 -0800 
2006 ---
This bug is a _severe security issue_ and can effectively be used to run any 
arbitrary command with 
the priviledges of the current user!

The reason are missing quotes in most of the scripts to launch the preferred 
browser or mail client.
The attached quoting_scripts.patch file adds necessary quotes in:

shell/source/unix/misc/cde-open-url.sh
shell/source/unix/misc/gnome-open-url.sh
shell/source/unix/misc/kde-open-url.sh
shell/source/unix/misc/open-url.sh

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-12-06 Thread 55zya43
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013


User 55zya43 changed the following:

What|Old value |New value

  CC|''|'55zya43'





-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[sw-issues] [Issue 58013] Hyperlink whose URL contai ns ( character can't be clicked on

2006-09-13 Thread kpalagin
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=58013





--- Additional comments from [EMAIL PROTECTED] Wed Sep 13 11:05:48 -0700 
2006 ---
I do not have Linux handy right now so can't test, but this
http://www.google.com/;clear;ls
(opens the webpage, clears the screen and lists all files because of ls.)
seems to be pretty seriuos.


-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]