To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=104765 Issue #|104765 Summary|Update bundled msvc runtime library Component|Installation Version|OOO310m9 Platform|PC URL| OS/Version|Windows, all Status|NEW Status whiteboard| Keywords| Resolution| Issue type|TASK Priority|P3 Subcomponent|code Assigned to|is Reported by|mt
------- Additional comments from [email protected] Thu Sep 3 17:39:57 +0000 2009 ------- OOo still ships the initial VC2008 RTM runtime, while newer versions with security fixes are available. http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx Not sure if to use the 2008 or the 2008SP1 version, both have been updated. I would prefer SP1, but that's just my feeling. OOo is not affected by the ATL security issue, but still shouldn't bundle an outdated version with known security vulnerabilities. People already complained about this, for example here: http://www.secuobs.com/secumail/btsecumail/msg17008.shtml --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
