Re: Problmes useing changes with Writer

2021-04-16 Thread F Campos Costero
I played with a chapter from the Getting Started guide for about a half
hour on my Linux Mint system and did not have any problems, That included
handling quite a few images, which tended to cause problems on my Windows
system. I then edited the first chapter of the Calc guide. It is 37 pages
and I had to change several of the images. That all went well. I did see
instability when using the Navigator. Something as simple as selecting the
Navigator in the Sidebar and then choosing the Styles and Formatting Deck
in the Sidebar would crash the program. Not every time but frequently. I
also got a crash once using the floating Navigator called from the Standard
toolbar. I reproduced the crash when editing a chapter of the Getting
Started guide also. A few attempts to cause a crash using a new, simple
document did not work but I have not tried that enough to trust that
result. I will try more of that tomorrow.
So, the image handling problem I saw on Windows does not seem to happen on
Linux Mint but I do see a problem with the Navigator.

Francis

On Fri, Apr 16, 2021 at 10:15 AM Keith N. McKenna 
wrote:

> On 2021-04-15 19:57, Keith N. McKenna wrote:
> > On 2021-04-15 18:42, F Campos Costero wrote:
> >> I had considerable stability problems with the Getting Started
> >> Guide's files. My problem may be different than Keith's but it was
> fixed by
> >> running my Windows 10 system in Safe Mode. The instability was most
> >> commonly associated with manipulating (copying/pasting) images in
> frames.
> >> A related symptom is that I cannot view macros stored in OpenOffice
> >> documents unless I use Safe Mode because the program crashes. This has
> been
> >> a problem with my current Windows system for a few years. I have tried
> to
> >> determine what driver or program causes the crash but I have failed.
> Keith
> >> - do you ever edit or view marcos?
> >> I have a Linux Mint system on which I can test the Stability of the
> Getting
> >> Started documents. I will try that and report the result.
> >> Francis
> >>
> >
> > Francis;
> >
> > Thanks for the hint about Safe Mode. I will give that a try.Thanks for
> > checking on your Linux machine as well. I do not do macros at all,except
> > when I am checking a bug report.
> >
> > Regards,
> > Keith
>
> Francis;
>
> Working in Windows safe mode did the trick. I look forward to the
> results of your tests on your Linux machine.
>
> Regards,
> Keith
>
>
> Regards
> >> On Wed, Apr 14, 2021 at 6:00 PM Dave Fisher  wrote:
> >>
> >>>
> >>>
>  On Apr 14, 2021, at 4:53 PM, Keith N. McKenna <
> keith.mcke...@comcast.net>
> >>> wrote:
> 
>  On 2021-04-14 19:21, Keith N. McKenna wrote:
> > On 2021-04-14 17:36, Marcus wrote:
> >> Am 14.04.21 um 23:11 schrieb Keith N. McKenna:
> >>> Greetings all;
> >>>
> >>> I am currently having problems with accepting changes with AOO
> Writer
> >>> 4.1.9 on both Windows 10 Pro and Windows 7, both 64 bit. This is
> >>> currently having an impact on being able to properly edit the New
> >>> 4.1.x
> >>> documentation.
> >>>
> >>> When I highlight and a change and press Accept in the edit >
> Changes
> >>> dialog the systems go unresponsive and then crash. On Windows 10
> there
> >>> is no error message, the program just quiets, on Windows 7 the
> error
> >>> message is OpenOffice 4.1.9 has stopped working A problem caused
> the
> >>> program to stop working correctly.Windows will close the program
> and
> >>> notify you if a solution is available.When you click the close
> button
> >>> the program gracefully closes.
> >>>
> >>> Just wanted to check if others have seen the problem before I open
> a
> >>> bug
> >>> in Bugzilla./
> >>
> >> OK; I'm starting with the usual questions to get some further
> details:
> >>> ;-)
> >>
> >> - Does it happen with a special document or also with more or all
> you
> >>   have tried?
> >>
> >> - Does it also occur in Calc?
> >>
> >> - If accessible for you, also a problem on Linux and / or macOS?
> >>
> >> Thanks
> >>
> >> Marcus
> > Hi Marcus;
> >
> > It has happened with all the Getting Started Guide chapters that I
> have
> > tried. Haven't tried calc will do a quick test document for that.At
> this
> > time I only have access to my 2 Windows machines.
> >
> > Regards,
> > Keith
> >
>  I tried a quick test with calc with no problem. Then I tried an
>  unrelated Writer file with no problem. It appears that the problem is
>  related only from the files in openoffice-docs/Getting-Stared-Guide.
> 
>  I will do some further tests on that do not appear to be touched yet.
> >>>
> >>> Maybe try to do a Save As to a new filename first?
> >>>
> >>> Regards,
> >>> Dave
> >>>
> >>>
> 
>  Regards
>  Keith
> 
> >>>
> >>>
> >>> -
> >>> To unsubscribe,

[GitHub] [openoffice] cbmarcum commented on pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread GitBox


cbmarcum commented on pull request #127:
URL: https://github.com/apache/openoffice/pull/127#issuecomment-821576281


   I figured so but I thought I should check.  I've seen people get surprised 
by the fall though behavior in a switch case and I didn't check for HTTP 
before. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



[GitHub] [openoffice] dave2wave commented on pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread GitBox


dave2wave commented on pull request #127:
URL: https://github.com/apache/openoffice/pull/127#issuecomment-821572470


   Yes. That was the intent. Maybe in 4.2.0 we discussing forcing http to https 
as one of our hyperlink security settings.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



[GitHub] [openoffice] cbmarcum commented on pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread GitBox


cbmarcum commented on pull request #127:
URL: https://github.com/apache/openoffice/pull/127#issuecomment-821538999


   Just to be clear this also allows any extension with HTTP also.  Just wanted 
to make sure that was the intent.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



[GitHub] [openoffice] dave2wave merged pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread GitBox


dave2wave merged pull request #127:
URL: https://github.com/apache/openoffice/pull/127


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



[GitHub] [openoffice] cbmarcum commented on pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread GitBox


cbmarcum commented on pull request #127:
URL: https://github.com/apache/openoffice/pull/127#issuecomment-821536102


   +1


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



[GitHub] [openoffice] dave2wave commented on pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread GitBox


dave2wave commented on pull request #127:
URL: https://github.com/apache/openoffice/pull/127#issuecomment-821533514


   Well the CVE was about non-http(s) links. I think we are good to go. 
Especially since no one engaged to reply.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: [GitHub] [openoffice] jimjag commented on pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread Carl Marcum



I'm building this PR now.  I should have it tested soon.


On 4/16/21 2:02 PM, GitBox wrote:

jimjag commented on pull request #127:
URL: https://github.com/apache/openoffice/pull/127#issuecomment-821368755


+1





-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Request for reviewers: PR 126

2021-04-16 Thread Jim Jagielski
Approved and merged... sorry for the delay

> On Apr 16, 2021, at 1:38 PM, Carl Marcum  wrote:
> 
> Hi Arrigo,
> 
> On 4/16/21 12:36 PM, Arrigo Marchiori wrote:
>> Dear All,
>> 
>> PR 126 [1] is about the "About" dialog (sorry for the word play :-).
>> 
>> It fixes an invalid display of the build number for 4.4.10 that... we
>> need for the first time, because we hve never reached a two-digit
>> version until today.
>> 
>> Matthias and I gave our approval but a ``third opinion'' would
>> greatly be appreciated.
>> 
>> Jim was requested for reviewing but he seems to be quite busy at the
>> moment. Could anyone else help us, please?
>> 
>> Thank you in advance!
>> 
>> 1: https://github.com/apache/openoffice/pull/126
> I'll review it soon.
> 
> Best regards,
> Carl
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org 
> 
> For additional commands, e-mail: dev-h...@openoffice.apache.org 
> 


[GitHub] [openoffice] jimjag commented on pull request #127: Allow all https(s) Hyperlinks

2021-04-16 Thread GitBox


jimjag commented on pull request #127:
URL: https://github.com/apache/openoffice/pull/127#issuecomment-821368755


   +1


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



[GitHub] [openoffice] jimjag merged pull request #126: Fix to get the version string right in the About dialog

2021-04-16 Thread GitBox


jimjag merged pull request #126:
URL: https://github.com/apache/openoffice/pull/126


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



[GitHub] [openoffice] jimjag commented on pull request #126: Fix to get the version string right in the About dialog

2021-04-16 Thread GitBox


jimjag commented on pull request #126:
URL: https://github.com/apache/openoffice/pull/126#issuecomment-821363664


   Approved by me


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Request for reviewers: PR 126

2021-04-16 Thread Carl Marcum

Hi Arrigo,

On 4/16/21 12:36 PM, Arrigo Marchiori wrote:

Dear All,

PR 126 [1] is about the "About" dialog (sorry for the word play :-).

It fixes an invalid display of the build number for 4.4.10 that... we
need for the first time, because we hve never reached a two-digit
version until today.

Matthias and I gave our approval but a ``third opinion'' would
greatly be appreciated.

Jim was requested for reviewing but he seems to be quite busy at the
moment. Could anyone else help us, please?

Thank you in advance!

1: https://github.com/apache/openoffice/pull/126

I'll review it soon.

Best regards,
Carl

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Integrate download wizard into website?

2021-04-16 Thread Marcus

Am 16.04.21 um 10:29 schrieb Jörg Schmidt:

-Original Message-
From: Marcus [mailto:marcus.m...@wtnet.de]
Sent: Friday, April 16, 2021 9:20 AM
To: dev@openoffice.apache.org
Subject: Re: Integrate download wizard into website?

Indeed, the way can be different how to show these hints. But
I think we
agree already that the hint presentation could be more automatic and
context-sensitive.


Exactly, I agree with you on that.


OK, then we have our basis.

Next step would be to clearify the requirements. Here I would like to be 
generic as best as possible; which means to keep out technical details 
for the moment.


When this is done we can try to find a technical solution to get the 
requirement implemented.


What do you think?

Marcus


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Request for reviewers: PR 126

2021-04-16 Thread Arrigo Marchiori
Dear All,

PR 126 [1] is about the "About" dialog (sorry for the word play :-).

It fixes an invalid display of the build number for 4.4.10 that... we
need for the first time, because we hve never reached a two-digit
version until today.

Matthias and I gave our approval but a ``third opinion'' would
greatly be appreciated.

Jim was requested for reviewing but he seems to be quite busy at the
moment. Could anyone else help us, please?

Thank you in advance!

1: https://github.com/apache/openoffice/pull/126
-- 
Arrigo

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Problmes useing changes with Writer

2021-04-16 Thread Keith N. McKenna
On 2021-04-15 19:57, Keith N. McKenna wrote:
> On 2021-04-15 18:42, F Campos Costero wrote:
>> I had considerable stability problems with the Getting Started
>> Guide's files. My problem may be different than Keith's but it was fixed by
>> running my Windows 10 system in Safe Mode. The instability was most
>> commonly associated with manipulating (copying/pasting) images in frames.
>> A related symptom is that I cannot view macros stored in OpenOffice
>> documents unless I use Safe Mode because the program crashes. This has been
>> a problem with my current Windows system for a few years. I have tried to
>> determine what driver or program causes the crash but I have failed. Keith
>> - do you ever edit or view marcos?
>> I have a Linux Mint system on which I can test the Stability of the Getting
>> Started documents. I will try that and report the result.
>> Francis
>>
> 
> Francis;
> 
> Thanks for the hint about Safe Mode. I will give that a try.Thanks for
> checking on your Linux machine as well. I do not do macros at all,except
> when I am checking a bug report.
> 
> Regards,
> Keith

Francis;

Working in Windows safe mode did the trick. I look forward to the
results of your tests on your Linux machine.

Regards,
Keith


Regards
>> On Wed, Apr 14, 2021 at 6:00 PM Dave Fisher  wrote:
>>
>>>
>>>
 On Apr 14, 2021, at 4:53 PM, Keith N. McKenna 
>>> wrote:

 On 2021-04-14 19:21, Keith N. McKenna wrote:
> On 2021-04-14 17:36, Marcus wrote:
>> Am 14.04.21 um 23:11 schrieb Keith N. McKenna:
>>> Greetings all;
>>>
>>> I am currently having problems with accepting changes with AOO Writer
>>> 4.1.9 on both Windows 10 Pro and Windows 7, both 64 bit. This is
>>> currently having an impact on being able to properly edit the New
>>> 4.1.x
>>> documentation.
>>>
>>> When I highlight and a change and press Accept in the edit > Changes
>>> dialog the systems go unresponsive and then crash. On Windows 10 there
>>> is no error message, the program just quiets, on Windows 7 the error
>>> message is OpenOffice 4.1.9 has stopped working A problem caused the
>>> program to stop working correctly.Windows will close the program and
>>> notify you if a solution is available.When you click the close button
>>> the program gracefully closes.
>>>
>>> Just wanted to check if others have seen the problem before I open a
>>> bug
>>> in Bugzilla./
>>
>> OK; I'm starting with the usual questions to get some further details:
>>> ;-)
>>
>> - Does it happen with a special document or also with more or all you
>>   have tried?
>>
>> - Does it also occur in Calc?
>>
>> - If accessible for you, also a problem on Linux and / or macOS?
>>
>> Thanks
>>
>> Marcus
> Hi Marcus;
>
> It has happened with all the Getting Started Guide chapters that I have
> tried. Haven't tried calc will do a quick test document for that.At this
> time I only have access to my 2 Windows machines.
>
> Regards,
> Keith
>
 I tried a quick test with calc with no problem. Then I tried an
 unrelated Writer file with no problem. It appears that the problem is
 related only from the files in openoffice-docs/Getting-Stared-Guide.

 I will do some further tests on that do not appear to be touched yet.
>>>
>>> Maybe try to do a Save As to a new filename first?
>>>
>>> Regards,
>>> Dave
>>>
>>>

 Regards
 Keith

>>>
>>>
>>> -
>>> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
>>> For additional commands, e-mail: dev-h...@openoffice.apache.org
>>>
>>>
> 
> 




signature.asc
Description: OpenPGP digital signature


[GitHub] [openoffice] Pilot-Pirx commented on pull request #126: Fix to get the version string right in the About dialog

2021-04-16 Thread GitBox


Pilot-Pirx commented on pull request #126:
URL: https://github.com/apache/openoffice/pull/126#issuecomment-821251804


   > I suggest we squash the commits when merging to avoid polluting the commit 
log.
   
   Please go ahead, it is your code! ;-) Squash and merge will be best.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

2021-04-16 Thread Jim Jagielski
In prep for 4.1.10 (and our 1st release candidate), we're using

https://cwiki.apache.org/confluence/display/OOOUSERS/AOO+4.1.10

for tracking. 

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

2021-04-16 Thread Carl Marcum
Thank you Dave for all your work and co-ordination with security, the 
reporter, and communications.


Best regards,
Carl

On 4/15/21 4:06 PM, Dave Fisher wrote:

Hi -

Here is some background on the issue which has apparently existed since about 
OpenOffice.org 2.0 in 2005 or so.

See https://bz.apache.org/ooo/show_bug.cgi?id=49802

Some confusion existed between types of hyperlinks and rather than filtering 
they were all allowed to proceed.

Arrigo restored the code and Carl added some protocol checks:
https://github.com/apache/openoffice/commit/aa358bfc895091e0ee5382ad1d25e5d51261463b

This current code will cause a warning for any http(s) hyperlinks that do not 
have an extension in the “whitelist.”

Some think that we should blanket allow all http(s) hyperlinks so I’ve created 
a PR for that:
https://github.com/apache/openoffice/pull/127

Topics for 4.2.0 include:
(1) A better dialog box for the hyperlink security warning
(2) Implement an option to allow users to choose from 3 levels of hyperlink 
security that is in the code, but not the settings. The levels in the code are 
essentially:
- No Security
- What we have now
- And only help links

All The Best,
Dave



On Apr 15, 2021, at 12:34 PM, Dave Fisher  wrote:

Hi -

We are working on releasing 4.1.10 soon do to this security report [1] which 
was announced today.

I’d like to credit Arrigo Marchiori and Carl Marcum for development. Ariel 
Constenla-Haile and Peter Kovacs for our indispensible OpenGrok setup. Matthias 
Seidel, Marcus Lange, Jim Jagielski, and Don Lewis for builds and testing.

All The Best,
Dave

[1] https://positive.security/blog/url-open-rce


On Apr 15, 2021, at 12:18 PM, Dave Fisher  wrote:

Severity: moderate

Description:

The project received a report that all versions of Apache OpenOffice through 
4.1.8 can open non-http(s) hyperlinks. The problem has existed since about 2006 
and the issue is also in 4.1.9. If the link is specifically crafted this could 
lead to untrusted code execution. It is always best practice to be careful 
opening documents from unknown and unverified sources. The mitigation in Apache 
OpenOffice 4.1.10 (unreleased) assures that a security warning is displayed 
giving the user the option of continuing to open the hyperlink.

Credit:

Fabian Bräunlein and Lukas Euler of Positive Security




-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org




-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



RE: Integrate download wizard into website?

2021-04-16 Thread Jörg Schmidt
 

> -Original Message-
> From: Marcus [mailto:marcus.m...@wtnet.de] 
> Sent: Friday, April 16, 2021 9:20 AM
> To: dev@openoffice.apache.org
> Subject: Re: Integrate download wizard into website?
> 

> 
> Indeed, the way can be different how to show these hints. But 
> I think we 
> agree already that the hint presentation could be more automatic and 
> context-sensitive.

Exactly, I agree with you on that.


greetings,
Jörg


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Integrate download wizard into website?

2021-04-16 Thread Marcus

Am 16.04.21 um 07:47 schrieb Jörg Schmidt:

-Original Message-
From: Marcus [mailto:marcus.m...@wtnet.de]
Sent: Thursday, April 15, 2021 7:00 PM
To: dev@openoffice.apache.org
Subject: Re: Integrate download wizard into website?

Am 15.04.21 um 08:49 schrieb Jörg Schmidt:



That's exactly what I wrote myself on the de-users list and

expressed my lack of understanding that users don't seem to
be able to use a website that is as easy to use as a vending machine.

Nevertheless, I have to take note that there are such users.


The the question is if can satisfy all users that have
problems to find
the right install set.


Let's not argue about that.
At the same time, I want to say one word:

kaizen

(I do not put a link to Wikipedia, because in the English Wikipedia "Kaizen" is 
explained only one-sided, related to the economy. In the German Wikipedia it is explained 
more thoroughly.)


good point how we can handle this topic.


And my suggestion comes from the observation that the

improvements of the last months didn't seem optimal(*),
because they required the user to actively do something to
get an additional info (either place the mouse over a button
to get a tooltip/teaser or actually click on a button to get
an info page in a separate window).

This is a complete different topic (at least in my eyes)


Then _I_ must have explained it badly, because actually that is the core of my 
proposal.

mmh ... but I understand, there are two different possibilities, namely once 
the user makes his selection in one step (so it is currently on the download 
page) and then automatically gets all the appropriate hints in one step, or you 
ask the settings step by step and also give the hints step by step.


Indeed, the way can be different how to show these hints. But I think we 
agree already that the hint presentation could be more automatic and 
context-sensitive.


Marcus


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org