[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-10-02 Thread kr
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149


User kr changed the following:

What|Old value |New value

  Status|VERIFIED  |CLOSED





--- Additional comments from k...@openoffice.org Fri Oct  2 10:21:08 + 
2009 ---
Closing ...


-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-13 Thread sb
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149


User sb changed the following:

What|Old value |New value

 Assigned to|sb|kr





--- Additional comments from s...@openoffice.org Thu Aug 13 07:26:47 + 
2009 ---
@kr: please verify

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-13 Thread kr
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149


User kr changed the following:

What|Old value |New value

  Status|RESOLVED  |VERIFIED





--- Additional comments from k...@openoffice.org Thu Aug 13 14:01:22 + 
2009 ---
Added patch looks good! 
Patch flag looks good as well!


-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-12 Thread sb
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149





--- Additional comments from s...@openoffice.org Wed Aug 12 07:07:49 + 
2009 ---
...plus missing PATCH flag as SVN cws/sb114/scp2/source/ooo/ure.scp -r 274880

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-11 Thread mt
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149
 Issue #|104149
 Summary|libxml2 needs to be updated - security fixes
   Component|udk
 Version|OOO310m9
Platform|Sun
 URL|
  OS/Version|All
  Status|NEW
   Status whiteboard|
Keywords|
  Resolution|
  Issue type|PATCH
Priority|P3
Subcomponent|code
 Assigned to|sb
 Reported by|mt





--- Additional comments from m...@openoffice.org Tue Aug 11 10:04:06 + 
2009 ---
For details, see http://www.debian.org/security/2009/dsa-1859

It is not clear if OOo is affected by these issues, but since we don't want to
ship a 3rd party lib with known security issues, the lib will be updated ASAP.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-11 Thread mt
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149


User mt changed the following:

What|Old value |New value

Keywords|  |security

Target milestone|---   |OOo 3.1.1





--- Additional comments from m...@openoffice.org Tue Aug 11 10:05:22 + 
2009 ---
added keyword security, target ooo 3.1.1

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-11 Thread sb
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149


User sb changed the following:

What|Old value |New value

  Status|NEW   |RESOLVED

  Resolution|  |FIXED





--- Additional comments from s...@openoffice.org Tue Aug 11 14:56:46 + 
2009 ---
Fixed as SVN cws/sb114/libxml2/libxml2-2.6.31.patch -r 274864 by merging in the
difference between
http://ftp.debian.org/debian/pool/main/libx/libxml2/libxml2_2.6.32.dfsg-5.diff.gz
and
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.32.dfsg-5+lenny1.diff.gz
(which appears to also apply cleanly to the libxml2 2.6.31 source base checked
into OOo).

Given that http://xmlsoft.org/news.html does not list any security fixes for
libxml2 2.6.32 (so that we do not appear to miss any security fixes if we do not
upgrade from 2.6.31 to 2.6.32) and that http://xmlsoft.org/news.html lists
libxml2 2.7.3 as the latest release of libxml2 (so that it does not appear that
we would get the latest and greatest, anyway, if we did upgrade from 2.6.31 to
2.6.32; though I do not know what the compatibility story is between libxml2 2.6
and 2.7), and given that the Debian patch mentioned above appears to apply
cleanly to our 2.6.31, I decided together with mt that it would be best to stay
with 2.6.31 for now.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-11 Thread rene
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149





--- Additional comments from r...@openoffice.org Tue Aug 11 15:26:51 + 
2009 ---
 2.6.32; though I do not know what the compatibility story is between libxml2 
 2.6
 and 2.7), and given that the Debian patch mentioned above appears to apply

Well, Debian builds OOo 3.x with 2.7.3 in it's development release. (Just FYI).
No explicit problems with it discovered (so far)

 cleanly to our 2.6.31, I decided together with mt that it would be best to 
 stay
 with 2.6.31 for now.

Of course. Nothing else would make sense anyway. (Except that you imho also
should fix the bogus files in the tarball, see issue 104152)

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[udk-issues] [Issue 104149] libxml2 needs to be updat ed - security fixes

2009-08-11 Thread rene
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104149


User rene changed the following:

What|Old value |New value

  CC|''|'rene'





-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@udk.openoffice.org
For additional commands, e-mail: issues-h...@udk.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org