Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

[Marcus]

Am 08/16/2016 05:26 AM, schrieb Dennis E. Hamilton:

BETA 0.2.0 IS NOW AVAILABLE

This is a cleanup version.  It is hoped that this will be the last change 
before bumping the version to 1.0.0 and making general availability.

One important change:

 The names of the files have been changed.

 The README is now named README-4.1.2-patch1-Windows.txt.

 The zip and the related .asc, .md5, .sha1, and .sha256 files all have the 
base name
 apache-openoffice-4.1.2-patch1-Win_x86.zip

The two scripts also have simpler names:

 APPLY-4.1.2-patch1.bat
 REVERT-4.1.2-patch1.bat

The files are still available at

 

Now it is worth testing enough to know there is no regression and that APPLY 
and REVERT operate properly as before.


I've downloaded the new ZIP and tested again:

- Download new ZIP file OK
- Unzipping OK
- ASC signature OK
- MD5   OK
- SHA1  OK
- SHA256OK
- "tl.dll.new" ASC signature  OK
- "tl.dll.old" ASC signature  OK

The both .bat files differ from the past ones. I've not run the new ones 
again but looked closely to the diff output. There are no functional 
changes but only for file name and version.


If I should run them again, just tell me.

Otherwise I think also this ZIP is ready to do its work.

Marcus




-Original Message-
From: Dennis E. Hamilton [mailto:dennis.hamil...@acm.org]
Sent: Thursday, August 11, 2016 21:08
To: d...@openoffice.apache.org
Cc: qa@openoffice.apache.org
Subject: RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

BETA 0.1.0 WITH AUTOMATED SCRIPTS IS NOW AVAILABLE

The scripts make life much easier, since users don't have to go hunting
for anything and digging around in operating-system locations.

You should be able to go through the procedure that uses the automated
steps pretty easily.

It is very important to know the difficulties that arise or whether
there were none.

The material is available at
.

  - Dennis




-Original Message-
From: Dennis E. Hamilton [mailto:dennis.hamil...@acm.org]
Sent: Wednesday, August 10, 2016 18:01
To: d...@openoffice.apache.org
Cc: qa@openoffice.apache.org
Subject: RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

Beta version 0.1.0 is now nearing completion.

It will include two scripts, one for applying the patch, the other for
reverting the patch.

The .zip will also have a copy of the original 4.1.2 tl.dll as well as
the new one.  These are used in the procedures to verify the files

that

are present in the OpenOffice configuration in order to apply the

patch

and also to remove it.

Next steps:
  * Additional path testing of the two scripts and verification that
operation on Windows XP and on Windows 10 work as expected.

[orcmid]

Done

It is also much easier to work through the patch checks using the
scripts.


  * Updating of the README to reflect the availability of the batch-

file

scripts as well as the manual procedure if ever needed.

[orcmid]

Done



  * Although the Zips already carry executable code (i.e., DLLs) there
may be some Antivirus push-back where the policy is to not allow .zip
files with scripts in them.  The README will also have to address that
possibility.

[orcmid]

I forgot that at the last minute.  I will put that into the next
version.  Meanwhile, those who check these procedures should report any
AV objections they ran into.




  - Dennis


-Original Message-
From: Dennis E. Hamilton [mailto:dennis.hamil...@acm.org]
Sent: Monday, August 8, 2016 09:58
To: d...@openoffice.apache.org
Cc: qa@openoffice.apache.org
Subject: RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

Alpha version 0.0.1 of README-4.1.2-patch1-apply-Windows.txt has

been

introduced into the files (and the .zip) at
.

This version reflects suggestions by Marcus Lange, Pedro Lino, and

Keith

McKenna.  Suggestions that are not (yet) implemented will be

discussed

in replies to their messages and on the bugzilla issue at
.


By its nature, this material is intended for users operating on

Windows.

In some cases, incompatible forms are used on the Subversion server
where the above files are situated.  Version 0.0.1 attempts to
accommodate for this incompatibility.  In continuing to verify the
procedure, please indicate whether there are (now) difficulties

using

the text files, especially on Windows.

Users of Linux systems may have difficulties with some utilities for
which the Windows versions of the same tool (e.g., md5sum) do not
produce Linux-acceptable line endings.  It is useful to know if that

is

still the case.  The files have been confirmed t

Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

[Keith N. McKenna]

Dennis E. Hamilton wrote:
>
>> -Original Message-
>> From: Keith N. McKenna [mailto:keith.mcke...@comcast.net]
>> Sent: Monday, August 15, 2016 21:05
>> To: qa@openoffice.apache.org; d...@openoffice.apache.org
>> Subject: Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows
>>
>>
>>
>> Dennis E. Hamilton wrote:
>>> BETA 0.2.0 IS NOW AVAILABLE
>>>
>>> This is a cleanup version.  It is hoped that this will be the last
>> change before bumping the version to 1.0.0 and making general
>> availability.
>>> One important change:
>>>
>>> The names of the files have been changed.
>>>
>>> The README is now named README-4.1.2-patch1-Windows.txt.
>>>
>>> The zip and the related .asc, .md5, .sha1, and .sha256 files all
>> have the base name
>>> apache-openoffice-4.1.2-patch1-Win_x86.zip
>>>
>>> The two scripts also have simpler names:
>>>
>>> APPLY-4.1.2-patch1.bat
>>> REVERT-4.1.2-patch1.bat
>>>
>>> The files are still available at
>>>
>>> > patch1/Windows>
>> [knmc]
>> the link should read
>> <
> [orcmid] 
> https://dist.apache.org/repos/dist/dev/openoffice/4.1.2-patch1/binaries/Windows/>
> [orcmid] 
>
> Right you are.  Thanks for the quick check.
>> Regards
>> Keith
>>> Now it is worth testing enough to know there is no regression and that
>> APPLY and REVERT operate properly as before.
>>>  - Dennis
>>>
> [ ... ]
[knmc]
As we move forward to a general distribution here  is an odt revision of
the readme that can be used to generate an html, pdf, or text versions.
All versions are attached but may not come through to the list. They can
all be accessed from the following link.

All feedback is both welcomed and encouraged.

regards
Keith
>
>
> -
> To unsubscribe, e-mail: qa-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: qa-h...@openoffice.apache.org
>



New_Readmeforpatch.odt
Description: application/vnd.oasis.opendocument.text
Title: Readme




APPLYING
HOTFIX FOR APACHE OPENOFFICE ON WINDOWS

README-4.1.2-patch1-apply-Windows.txt	1.0.0	2016-08-07

	
		
		Table of
		Contents
	
	Notice	1
	Purpose	1
	Intended
	Audience	1
	Prerequisites	2
	Preliminary
	Instructions	2
	Apply Patch
	Automatically	3
	Removing the Patch	3
	Appendicies	4
	Manually
	Apply Patch	4
	Troubleshooting	4




Notice
Licensed to the Apache Software
Foundation (ASF) under one or more contributor license agreements.
The ASF licenses this file to you under the Apache License, Version
2.0 (the "License"). You may obtain a copy of the License
at http://www.apache.org/licenses/LICENSE-2.0
Purpose
The purpose of this document is to
describe how to apply the hotfix to eliminate a security
vulnerability identified as CVE-2016-1513. The latest details about
that vulnerability and its mitigation can be found on the web at
.
The hotfix is provided as a zip
file at the following
location:

Intended Audience
This document is primarily
intended for use by non-technical individuals but presumes
familiarity with the following;

	Your account has
	administrator privileges or you have access to an adminstrator
	password
	NOTE: If your Operating System
	is Windows XP you must be logged into an account with administrator
	privileges.
	Use of a web browser to
	download files from the internet
	Use of the file manager to
	locate files and folders
	Use of the file manager to
	select files

Prerequisites

	Apache OpenOffice Version
	4.1.2 
	
	Quickstarter must be off

Preliminary
Instructions

	Verify installed version is
	4.1.2
	
		Open Apache OpenOffice 
		
	
	Download the zip file from
	
	
		Use of the download folder
		for this procedure is fine
	
	Navigate to the above folder
	with the file manager
	Select the downloaded zip
	file
	Right click the zip file
	Select Extract All... from
	the context menu
	
		This will create a folder in
		the same folder you downloaded the archive with the contents of the
		archive un-packed in it
	
	Open the new folder from step
	5 it should contain the following files
	
		README-4.1.2-patch1-apply-Windows.txt
		
			This procedure
		
		LICENSE.txt
		
			The Apache License Version
			2.0 under which the .zip and its content are licensed.
		
		NOTICE.txt
		
			A notice about the origin
			of the content.
		
		tl.dll.new
		
			The patched tl.dll library
			file to be installed in the Apache OpenOffice 4.1.2 software.
		
		ti.dll.new.asc
		
			A digital signature
			provided by the developer of tl.dll.new that can be used to verify
			the authenticity and origin of tl.dll.new using suitable software

RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

[Dennis E. Hamilton]

> -Original Message-
> From: Marcus [mailto:marcus.m...@wtnet.de]
> Sent: Thursday, August 18, 2016 14:40
> To: d...@openoffice.apache.org
> Cc: qa@openoffice.apache.org
> Subject: Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows
> 
> Am 08/16/2016 05:26 AM, schrieb Dennis E. Hamilton:
> > BETA 0.2.0 IS NOW AVAILABLE
> >
> > This is a cleanup version.  It is hoped that this will be the last
> change before bumping the version to 1.0.0 and making general
> availability.
> >
> > One important change:
> >
> >  The names of the files have been changed.
> >
> >  The README is now named README-4.1.2-patch1-Windows.txt.
> >
> >  The zip and the related .asc, .md5, .sha1, and .sha256 files all
> have the base name
> >  apache-openoffice-4.1.2-patch1-Win_x86.zip
> >
> > The two scripts also have simpler names:
> >
> >  APPLY-4.1.2-patch1.bat
> >  REVERT-4.1.2-patch1.bat
> >
> > The files are still available at
> >
> >   patch1/Windows>
> >
> > Now it is worth testing enough to know there is no regression and that
> APPLY and REVERT operate properly as before.
> 
> I've downloaded the new ZIP and tested again:
> 
> - Download new ZIP file   OK
> - Unzipping   OK
> - ASC signature   OK
> - MD5 OK
> - SHA1OK
> - SHA256  OK
> - "tl.dll.new" ASC signature  OK
> - "tl.dll.old" ASC signature  OK
> 
> The both .bat files differ from the past ones. I've not run the new ones
> again but looked closely to the diff output. There are no functional
> changes but only for file name and version.
> 
> If I should run them again, just tell me.
> 
> Otherwise I think also this ZIP is ready to do its work.
> 
> Marcus
[orcmid] 

That's great, Marcus.  Thanks.

I will go ahead and cut 1.0.0 now.  

 - Dennis


-
To unsubscribe, e-mail: qa-unsubscr...@openoffice.apache.org
For additional commands, e-mail: qa-h...@openoffice.apache.org

RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

[Dennis E. Hamilton]

> -Original Message-
> From: Keith N. McKenna [mailto:keith.mcke...@comcast.net]
> Sent: Thursday, August 18, 2016 14:46
> To: qa@openoffice.apache.org; d...@openoffice.apache.org
> Subject: Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows
> 
[ ... ]
> [knmc]
> As we move forward to a general distribution here  is an odt revision of
> the readme that can be used to generate an html, pdf, or text versions.
> All versions are attached but may not come through to the list. They can
> all be accessed from the following link.
> 
> All feedback is both welcomed and encouraged.
[orcmid] 

The .odt and the .txt file come through as attachments.

Do you have specific recommendations about what should be done with these?  

I notice that there are problems with the .txt file layout not having hard line 
breaks.  The name changes and dates in 0.2.0 are not reflected.  The .odt also 
needs layout work.  There's too much white space and I have not looked closely 
enough to figure out why.

I know we differ on formatting and some document organization matters.  I am 
not going to address them at this point.

I am going to 1.0.0 now, essentially with the 0.2.0 except for the change of 
version number and removal of the limitation to testing use.  I did the other 
repair you suggested.  I think Marcus is ready on the other binaries, so 
something will happen tomorrow (Friday).  

I'm not certain what the final inch is just yet, but it looks like everything 
is ready enough.

 - Dennis
> 
> regards
> Keith
> >
> >
> > -
> > To unsubscribe, e-mail: qa-unsubscr...@openoffice.apache.org
> > For additional commands, e-mail: qa-h...@openoffice.apache.org
> >



-
To unsubscribe, e-mail: qa-unsubscr...@openoffice.apache.org
For additional commands, e-mail: qa-h...@openoffice.apache.org