Re: [libreoffice-users] Heartbleed checker for websites

2014-04-19 Thread M Henri Day
2014-04-18 17:15 GMT+02:00 Paul D. Mirowsky p_mirow...@bentaxna.com: http://www.theregister.co.uk/2014/04/18/netcraft_ heartbleed_browser_extension/ If the Netcraft extension determines that a site was vulnerable before news of Heartbleed broke, it checks the date on the site's SSL

Re: [libreoffice-users] Heartbleed

2014-04-18 Thread Ra
After hearing so many horrible scenarios related to this bug, I guess it's very easy to slip into paranoia mode. ;-) The heartbleed bug literally only ever affects web servers that communicate over a secure channel (and use libssl as the backend, obviously). The same library is used for client

Re: [libreoffice-users] Heartbleed

2014-04-18 Thread Tanstaafl
Please do NOT send to me directly, I'm on the list. On 4/17/2014 4:13 PM, Cley Faye cleyf...@gmail.com wrote: 2014-04-17 21:52 GMT+02:00 Tanstaafl tansta...@libertytrek.org: This is an OpenSSL bug, what does this have to do with Libreoffice? ​As far as I can tell, it's because LibreOffice

Re: [libreoffice-users] Heartbleed

2014-04-18 Thread Tanstaafl
On 4/18/2014 2:54 AM, Ra ravi...@gmail.com wrote: As far as I know, uses of SSL/TLS other than on webservers don't use heartbeat as it is only relevant for remote network connections. You are wrong, so need to do a LOT more reading. But again... in what way does Libreoffice utilize TCP/UDP

Re: [libreoffice-users] Heartbleed

2014-04-18 Thread Cley Faye
2014-04-18 11:59 GMT+02:00 Tanstaafl tansta...@libertytrek.org: You are wrong, so need to do a LOT more reading. But again... in what way does Libreoffice utilize TCP/UDP connectivity? What am I missing? Does it have a hidden built-in SSL client? ​Ahem. Some *hidden* features, like,

Re: [libreoffice-users] Heartbleed

2014-04-18 Thread toki
On April 18, 2014 2:59:30 AM PDT, Tanstaafl wrote: But again... in what way does Libreoffice utilize TCP/UDP connectivity? What am I missing? Does it have a hidden built-in SSL client? Back in the days of StarOffice it did. Vestiges of it were in OOo 1.x. I don't know how much of it remains in

Re: [libreoffice-users] Heartbleed checker for websites

2014-04-18 Thread Paul D. Mirowsky
http://www.theregister.co.uk/2014/04/18/netcraft_heartbleed_browser_extension/ If the Netcraft extension determines that a site was vulnerable before news of Heartbleed broke, it checks the date on the site's SSL certificate to make sure it has been recently replaced. If it hasn't, the

[libreoffice-users] Heartbleed

2014-04-17 Thread alnuwer
Any idea when the Heartbleed bug will be fixed in LibreOffice? -- View this message in context: http://nabble.documentfoundation.org/Heartbleed-tp4105573.html Sent from the Users mailing list archive at Nabble.com. -- To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org

Re: [libreoffice-users] Heartbleed

2014-04-17 Thread Sophie Gautier
Hi, Le 17 avr. 2014 20:12, alnuwer alnu...@cox.net a écrit : Any idea when the Heartbleed bug will be fixed in LibreOffice? It's already done in 4.2.3.3 branch. The 4.1.x versions are not concerned. Kind regards Sophie -- To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org

Re: [libreoffice-users] Heartbleed

2014-04-17 Thread Tanstaafl
On 4/17/2014 2:16 PM, Sophie Gautier gautier.sop...@gmail.com wrote: Hi, Le 17 avr. 2014 20:12, alnuweralnu...@cox.net a écrit : Any idea when the Heartbleed bug will be fixed in LibreOffice? It's already done in 4.2.3.3 branch. The 4.1.x versions are not concerned. ??? This is an

Re: [libreoffice-users] Heartbleed

2014-04-17 Thread Cley Faye
2014-04-17 21:52 GMT+02:00 Tanstaafl tansta...@libertytrek.org: This is an OpenSSL bug, what does this have to do with Libreoffice? ​As far as I can tell, it's because LibreOffice was linked with a vulnerable version of openssl. It's never bad to be on the side of precautions by using the

Re: [libreoffice-users] Heartbleed

2014-04-17 Thread Kracked_P_P---webmaster
On 04/17/2014 04:13 PM, Cley Faye wrote: 2014-04-17 21:52 GMT+02:00 Tanstaafl tansta...@libertytrek.org: This is an OpenSSL bug, what does this have to do with Libreoffice? ​As far as I can tell, it's because LibreOffice was linked with a vulnerable version of openssl. It's never bad to be