Re: [DISCUSS] Future of the Hangul Word Processor, HWP, filter

2015-04-29 Thread Andrea Pescetti
On 28/04/2015 Marcus wrote: Am 04/28/2015 06:12 PM, schrieb Kay Schenk: As we plan for the 4.1.2 release, should we give some thought to the importance of the HWP filter, Hangul Word Processor But Jeongkyu Kim on the L10n@ mailing list wrote that it is no longer relevant. So, maybe time to dele

Re: mingw32 for building the ODK under Linux?

2015-04-29 Thread Andrea Pescetti
On 29/04/2015 Kay Schenk wrote: put it into external/unowinreg using your browser or a command equivalent to: wget -O external/unowinreg/unowinreg.dll http://www.openoffice.org/tools/unowinreg_prebuild/680/unowinreg.dll Is this really needed for Linux builds of the ODK? I wr

Re: Reporting broken download link

2015-04-29 Thread FR web forum
>The server at 10.5.101.1 is taking too long to respond. This @ IP is in a private network. That meaning that it is not allocated to any specific organization and cannot be transmitted through the public Internet. - To unsubscri

Re: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability

2015-04-29 Thread Simon Phipps
Given this problem is not fixed in the current download, should the project suspend downloads until it can be addressed? Few of the people downloading the package will be aware of this CVE or of the necessary mitigation post-install. S. On Sat, Apr 25, 2015 at 8:13 PM, Herbert Duerr wrote: > C

Re: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability

2015-04-29 Thread Andrea Pescetti
Simon Phipps wrote: Given this problem is not fixed in the current download, should the project suspend downloads until it can be addressed? This looks like a very extreme measure to take. The severity of the issue would not justify it. As far as I know, there are no known exploits and we are

Re: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability

2015-04-29 Thread Simon Phipps
On Wed, Apr 29, 2015 at 2:00 PM, Andrea Pescetti wrote: > Simon Phipps wrote: > >> Given this problem is not fixed in the current download, should the >> project >> suspend downloads until it can be addressed? >> > > This looks like a very extreme measure to take. The severity of the issue > woul

Re: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability

2015-04-29 Thread jan i
On 29 April 2015 at 15:07, Simon Phipps wrote: > On Wed, Apr 29, 2015 at 2:00 PM, Andrea Pescetti > wrote: > > > Simon Phipps wrote: > > > >> Given this problem is not fixed in the current download, should the > >> project > >> suspend downloads until it can be addressed? > >> > > > > This looks

Re: mingw32 for building the ODK under Linux?

2015-04-29 Thread Kay Schenk
On Wed, Apr 29, 2015 at 12:44 AM, Andrea Pescetti wrote: > On 29/04/2015 Kay Schenk wrote: > >> put it into external/unowinreg using your browser or a command >> equivalent to: >> wget -O external/unowinreg/unowinreg.dll >> http://www.openoffice.org/tools/unowinreg_prebuild/68

Re: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability

2015-04-29 Thread Marcus
Am 04/29/2015 05:39 PM, schrieb jan i: On 29 April 2015 at 15:07, Simon Phipps wrote: On Wed, Apr 29, 2015 at 2:00 PM, Andrea Pescetti wrote: Simon Phipps wrote: Given this problem is not fixed in the current download, should the project suspend downloads until it can be addressed? This

Re: [DISCUSS] #2 Organization around Capacity/Accountability

2015-04-29 Thread Andrea Pescetti
On 17/03/2015 Dennis E. Hamilton wrote: The #2 from the list seems critical to everything else. 2) Internal reorganization: people say what they are going to do to drive the project forward (so an "active" approach rather than the "I don't have time, but someone should..."

Re: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability

2015-04-29 Thread jonathon
On 29/04/15 13:00, Andrea Pescetti wrote: > issue would not justify it. As far as I know, there are no known > exploits and we are talking about a file format that is obsolete by all Is this vulnerability exploited only by opening a file in HWP format, or can it be exploited by any file? jonatho

Re: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability

2015-04-29 Thread Jürgen Schmidt
On 29/04/15 21:53, Marcus wrote: > Am 04/29/2015 05:39 PM, schrieb jan i: >> On 29 April 2015 at 15:07, Simon Phipps wrote: >> >>> On Wed, Apr 29, 2015 at 2:00 PM, Andrea Pescetti >>> wrote: >>> Simon Phipps wrote: > Given this problem is not fixed in the current download, should the