[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Andras Timar wrote: 1. VC++ 2008 x86 9.0.30729.6161 does not exist as a redistributable package, so we need to distribute what is available, VC++ 2008 x86 9.0.30729.4148 that is. Could someone please update the VC included with version 3.4.2 rc1 to build 9.0.30729.4148 then? It is still packing build 9.0.30729.17 from August 8th... 2008. It will be 3 years old in a few days! -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3227030.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Andras Timar wrote: 1. VC++ 2008 x86 9.0.30729.6161 does not exist as a redistributable package, so we need to distribute what is available, VC++ 2008 x86 9.0.30729.4148 that is. Could someone please update the VC included with version 3.3.4 rc1 to build 9.0.30729.4148 then? It is still packing build 9.0.30729.17 from August 8th... 2008. It will be 3 years old in a few days! -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3227035.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Il giorno 24/lug/2011 01.54, plino pedl...@gmail.com ha scritto: Hi Andras Andras Timar wrote: You fail to understand what people try to explain to you. I can argue the exact same thing. Andras Timar wrote: Currently we install start the VC++ 2008 redistributable 9.0.30729.4148 installer, if it is not installed and skip the installation, if it is installed. If you can skip if the SAME version is installed why can't you skip if a NEWER version is installed? In this case I have to agree with Andras, the installer should check the integrity of the VC but in which way? Having two versions of it in the package for the comparison? Because if the installed one has errors you need to have the other inside the package... Or use you have to go to the internet to check it, but this could be not possible in some circumstances... Ciao -- Valter -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Hi Pedro, 2011/7/24 plino pedl...@gmail.com: Andras Timar wrote: Currently we install start the VC++ 2008 redistributable 9.0.30729.4148 installer, if it is not installed and skip the installation, if it is installed. If you can skip if the SAME version is installed why can't you skip if a NEWER version is installed? Because it is not possible to query a newer version reliably. Especially, detecting yet to be released newer versions seems to be difficult to me. The MsiQueryProductState call can be used only if the product code of the package is known. We skip the same version if it is installed, because that code is there, otherwise probably we would not bother. However, we don't detect the same version of localized VC++ redist packages. Check is only against the product code of en-US version. My opinion is that it is better to always install vcredist, because it is the safest, and it makes no harm, if a newer version is installed already. Maybe we should use the /QN switch instead of /QB so most people would not notice it and would not complain about it. :) Regards, Andras -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Hi Andras Andras Timar wrote: Because it is not possible to query a newer version reliably. Especially, detecting yet to be released newer versions seems to be difficult to me. The MsiQueryProductState call can be used only if the product code of the package is known. I'm not a programmer but apparently you can check for File Version ( and specify a range) using MSI http://technet.microsoft.com/en-us/library/cc754778%28WS.10%29.aspx Andras Timar wrote: My opinion is that it is better to always install vcredist, because it is the safest, and it makes no harm, if a newer version is installed already. Maybe we should use the /QN switch instead of /QB so most people would not notice it and would not complain about it. :) I can see your point. I still think it's a waste of time and resources ;) Actually, I think that installing ANY software (or updates) without user knowledge (and consent) is quite rude ;) In any case it will show up as installed and advanced users do notice that :) Regards, Pedro -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3195032.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Jesús Corrius wrote: We can detect if there a new version installed, and then do nothing, but the trade-off will be to make LibreOffice less reliable. LibreOffice will be less reliable because you won't force to install an older (unsecure) version which in your own words won't even be used? That makes sense! BTW version 3.4.2 RC2 was released and guess what? It is still forces MS VC++ 2008 x86 9.0.30729.4148 to install... -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3193292.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Hi Andras Andras Timar wrote: You fail to understand what people try to explain to you. I can argue the exact same thing. Andras Timar wrote: Currently we install start the VC++ 2008 redistributable 9.0.30729.4148 installer, if it is not installed and skip the installation, if it is installed. If you can skip if the SAME version is installed why can't you skip if a NEWER version is installed? Regards, Pedro -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3194505.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
On 2011-07-19 8:10 AM, Jesús Corrius wrote: 2. The versions of the C++ libraries we are distributing are the last ones available from Microsoft as a full package. According to the security bulletin: That isn't the point... NO software should EVER force the installation of older libraries when newer versions are already installed. TEST for the existence of whatever is required - if it (required version OR NEWER) is already installed, SKIP the installation of that component. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Hi all, On Tue, Jul 19, 2011 at 4:15 AM, NoOp gl...@sbcglobal.net wrote: On 07/18/2011 06:07 PM, plino wrote: NoOp wrote: I'd recommend a followup to the dev list. plino, when you do that you might also add links to the security notices for the earlier version of VC++ 2008. The Dev list is for devs only. I have unsubscribed from it. I got crap for posting there a few times (Jesús Corrius will certainly remember Change executable/sh names - which went nowhere and are still not changed btw), so I can't blame you. Well, this is not the developers list and I don't want a discussion that goes to nowhere :) so here is my last message to this thread with my points: 1. LibreOffice and all the other applications (ok, unless they are using private assemblies[1]) will always use the lastest updated versions of the libraries installed in the system. Any user has many old libraries installed in the WinSxS directory and it's not a security threat because they are not in use. 2. The versions of the C++ libraries we are distributing are the last ones available from Microsoft as a full package. According to the security bulletin: These updates are not the versions on the download center. Microsoft does not recommend customers redistribute any version other than the full versions that can be downloaded from the Microsoft Download Center (KB973544, KB973551, and KB973552). [2] And this is what we are doing. If you check the KBxx's mentioned, these are the versions we are currently distributing. 3. When Microsoft provides new full versions of the Visual Studio 2008 runtimes, we will be happy to distribute them. So if you find new full versions in the Microsoft Download Center, let us know and we will update them immediately. [1] http://helgeklein.com/blog/2010/03/deploying-visual-c-runtime-files-as-private-assemblies/ [2] http://support.microsoft.com/kb/973924 -- Jesús Corrius je...@softcatala.org Document Foundation founding member Mobile: +34 661 11 38 26 Skype: jcorrius | Twitter: @jcorrius -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Jesús Corrius wrote: 1. LibreOffice and all the other applications (ok, unless they are using private assemblies[1]) will always use the lastest updated versions of the libraries installed in the system. Any user has many old libraries installed in the WinSxS directory and it's not a security threat because they are not in use. 2. The versions of the C++ libraries we are distributing are the last ones available from Microsoft as a full package. According to the security bulletin: These updates are not the versions on the download center. Microsoft does not recommend customers redistribute any version other than the full versions that can be downloaded from the Microsoft Download Center (KB973544, KB973551, and KB973552). [2] And this is what we are doing. If you check the KBxx's mentioned, these are the versions we are currently distributing. 3. When Microsoft provides new full versions of the Visual Studio 2008 runtimes, we will be happy to distribute them. So if you find new full versions in the Microsoft Download Center, let us know and we will update them immediately. I ALREADY HAVE A NEWER VERSION INSTALLED!!! LibreOffice IGNORES my NEWER VC++ and STILL installs the OLDER version included. It's a waste of time and resources. I understand that it is the version you are supposed to distribute. BUT it still needs a CHECK because there are NEWER security fixes. If you prefer to ignore this, it's fine with me. -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3182406.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
On 7/19/11 2:53 PM, plino wrote: I understand that it is the version you are supposed to distribute. BUT it still needs a CHECK because there are NEWER security fixes. Although I don't use Windows, I've seen a recent update of the C++ Redistributable Package under Windows 7 on a friend's PC. Online, I could just find this link, which I don't think is the right one, but mentions a Microsoft Visual C++ 2010 Redistributable Package: http://www.microsoft.com/download/en/details.aspx?id=. Maybe, the new package is what gets installed on updated PCs, and might be included in LibreOffice (but I'm not a developer, and I don't know if there are differences between C++ 2008 and C++ 2010). -- Italo Vignoli italo.vign...@gmail.com mobile +39.348.5653829 VoIP +39.02.320621813 skype italovignoli -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
On Tue, Jul 19, 2011 at 3:25 PM, Italo Vignoli italo.vign...@gmail.com wrote: On 7/19/11 2:53 PM, plino wrote: I understand that it is the version you are supposed to distribute. BUT it still needs a CHECK because there are NEWER security fixes. Although I don't use Windows, I've seen a recent update of the C++ Redistributable Package under Windows 7 on a friend's PC. Online, I could just find this link, which I don't think is the right one, but mentions a Microsoft Visual C++ 2010 Redistributable Package: http://www.microsoft.com/download/en/details.aspx?id=. Maybe, the new package is what gets installed on updated PCs, and might be included in LibreOffice (but I'm not a developer, and I don't know if there are differences between C++ 2008 and C++ 2010). Hi Italo, Yes, there are diferences. We should distribute the C++ 2008 as we are using the Visual C++ 2008 compiler to build it. -- Jesús Corrius je...@softcatala.org Document Foundation founding member Mobile: +34 661 11 38 26 Skype: jcorrius | Twitter: @jcorrius -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
I ALREADY HAVE A NEWER VERSION INSTALLED!!! LibreOffice IGNORES my NEWER VC++ and STILL installs the OLDER version included. It's a waste of time and resources. I understand that it is the version you are supposed to distribute. BUT it still needs a CHECK because there are NEWER security fixes. If you prefer to ignore this, it's fine with me. I understand it can be annoying. But without those libraries properly installed, LibreOffice will not work. Some modifications on the Windows files or registry (or a corrupted status) is something that we can't properly detect. And in those cases, LibreOffice will not execute. We launch the installer all the time to try make sure LibreOffice will work under any circumstance. Think of that as an insurance (yes, it's annoying, but it has a good purpose). We can detect if there a new version installed, and then do nothing, but the trade-off will be to make LibreOffice less reliable. -- Jesús Corrius je...@softcatala.org Document Foundation founding member Mobile: +34 661 11 38 26 Skype: jcorrius | Twitter: @jcorrius -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Jesús Corrius wrote: This is working fine. If you don't have the matching version already installed, then the installer should install the version referenced in the manifests. If the version is already installed, the VC runtime installer does nothing. But in this case, it's polite to detect that the version is already installed and don't launch it, although many application launch it anyway just in case. No it's not, Jesus. It is installing a previous version with security issues when a newer fixed version is already installed. It should never install if a newer is already installed. -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3180859.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
No it's not, Jesus. It is installing a previous version with security issues when a newer fixed version is already installed. It should never install if a newer is already installed. The versions are not overridden, they are installed in parallel. If you go to your C:\windows\winsxs folder, you'll find many different versions of the Visual C++ libraries. -- Jesús Corrius je...@softcatala.org Document Foundation founding member Mobile: +34 661 11 38 26 Skype: jcorrius | Twitter: @jcorrius -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
On 07/18/2011 06:19 PM, Jesús Corrius wrote: No it's not, Jesus. It is installing a previous version with security issues when a newer fixed version is already installed. It should never install if a newer is already installed. The versions are not overridden, they are installed in parallel. If you go to your C:\windows\winsxs folder, you'll find many different versions of the Visual C++ libraries. I don't think that was the concern. The concern was the use of an older version that might have security problems. Can there be a way that the installer finds the LATEST version that will work with the installed files? I get irritated with multiple versions of the same software is installed on my machines. Obviously, if the version preferred by the installer is the only version that the installed files will work with is the only choice, then well, OK. But if it's compatible with the latest version, maybe there is a way to make sure that the latest version available is installed (that is compatible) rather than whatever it was built with but I am ignorant as to if this is feasible or notor if testing is available to make sure that this works. -- Operating System: openSUSE Linux 11.4 64 bit Linux Kernel: 2.6.37.6 Desktop Environment: KDE 4.6.0 E-Mail Client: Thunderbird 5.0 Web Browser: Firefox 5.0 Office: LibreOffice 3.3.3 ClamAV 0.97.1 for UNIX -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
Robert Boehm wrote: Obviously, if the version preferred by the installer is the only version that the installed files will work with is the only choice, then well, OK. But if it's compatible with the latest version, maybe there is a way to make sure that the latest version available is installed (that is compatible) rather than whatever it was built with but I am ignorant as to if this is feasible or notor if testing is available to make sure that this works. I have uninstalled the version bundled with LibO and kept the newer version. All is working as expected because updates to VC++ 2008 are security and bug fixes. -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3181055.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
Re: [tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
On 07/18/2011 07:04 PM, plino wrote: Robert Boehm wrote: Obviously, if the version preferred by the installer is the only version that the installed files will work with is the only choice, then well, OK. But if it's compatible with the latest version, maybe there is a way to make sure that the latest version available is installed (that is compatible) rather than whatever it was built with but I am ignorant as to if this is feasible or notor if testing is available to make sure that this works. I have uninstalled the version bundled with LibO and kept the newer version. All is working as expected because updates to VC++ 2008 are security and bug fixes. -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3181055.html Sent from the Discuss mailing list archive at Nabble.com. Gooda work-aroundthanks. -- Operating System: openSUSE Linux 11.4 64 bit Linux Kernel: 2.6.37.6 Desktop Environment: KDE 4.6.0 E-Mail Client: Thunderbird 5.0 Web Browser: Firefox 5.0 Office: LibreOffice 3.3.3 ClamAV 0.97.1 for UNIX -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
On 07/18/2011 05:12 PM, Robert Boehm wrote: On 07/18/2011 07:04 PM, plino wrote: Robert Boehm wrote: Obviously, if the version preferred by the installer is the only version that the installed files will work with is the only choice, then well, OK. But if it's compatible with the latest version, maybe there is a way to make sure that the latest version available is installed (that is compatible) rather than whatever it was built with but I am ignorant as to if this is feasible or notor if testing is available to make sure that this works. I have uninstalled the version bundled with LibO and kept the newer version. All is working as expected because updates to VC++ 2008 are security and bug fixes. ... Gooda work-aroundthanks. Not necessarily as LO is installing a version with security issues IMO that needs to be resolved. The standard 'user' won't know to uninstall the bundled version as plino did. This is similar to when OOo installed insecure versions of java et al. The user would then have parallel versions of jave installed. I'd recommend a followup to the dev list. plino, when you do that you might also add links to the security notices for the earlier version of VC++ 2008. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
NoOp wrote: I'd recommend a followup to the dev list. plino, when you do that you might also add links to the security notices for the earlier version of VC++ 2008. The Dev list is for devs only. I have unsubscribed from it. Here is the link http://support.microsoft.com/kb/2538243 -- View this message in context: http://nabble.documentfoundation.org/LibO-3-4-2-RC1-under-Windows-tp3179764p3181149.html Sent from the Discuss mailing list archive at Nabble.com. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
[tdf-discuss] Re: LibO 3.4.2 RC1 under Windows
On 07/18/2011 06:07 PM, plino wrote: NoOp wrote: I'd recommend a followup to the dev list. plino, when you do that you might also add links to the security notices for the earlier version of VC++ 2008. The Dev list is for devs only. I have unsubscribed from it. I got crap for posting there a few times (Jesús Corrius will certainly remember Change executable/sh names - which went nowhere and are still not changed btw), so I can't blame you. ... -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.documentfoundation.org/www/discuss/ All messages sent to this list will be publicly archived and cannot be deleted
