RE: Officially releasing a patch for CVE-2016-1513

2016-08-12 Thread Dennis E. Hamilton
> -Original Message- > From: Don Lewis [mailto:truck...@apache.org] > Sent: Friday, August 12, 2016 14:09 > To: dev@openoffice.apache.org > Cc: dennis.hamil...@acm.org > Subject: Re: Officially releasing a patch for CVE-2016-1513 > > On 12 Aug, Dennis E. Hamilton wrote: > > Don, > > > >

Attention: Courtney

2016-08-12 Thread Patricia Shanahan
Courtney, I tried to reply directly to your email three days ago. Please check whether a message from me got caught in a spam filter etc. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional

RE: Planning for emergency releases

2016-08-12 Thread Dennis E. Hamilton
> -Original Message- > From: Patricia Shanahan [mailto:p...@acm.org] > Sent: Friday, August 12, 2016 13:55 > To: dev@openoffice.apache.org > Subject: Re: Planning for emergency releases > > > > On 8/12/2016 1:40 PM, Dennis E. Hamilton wrote: > >> -Original Message- From:

RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

2016-08-12 Thread Dennis E. Hamilton
> -Original Message- > From: Keith N. McKenna [mailto:keith.mcke...@comcast.net] > Sent: Friday, August 12, 2016 13:49 > To: q...@openoffice.apache.org; dev@openoffice.apache.org > Subject: Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows > > Attached is a text file with the

Re: Officially releasing a patch for CVE-2016-1513

2016-08-12 Thread Don Lewis
On 12 Aug, Dennis E. Hamilton wrote: > Don, > > Having worked through the 4.1.2-patch1 (CVE-2016-1513 remediation) for > Windows, I learned a few more things about what can be done. > > >> -Original Message- >> From: Dennis E. Hamilton [mailto:dennis.hamil...@acm.org] >> Sent: Sunday,

Re: [PACKAGING 4.1.2-patch1 Binaries] (was RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows)

2016-08-12 Thread Don Lewis
On 12 Aug, Dennis E. Hamilton wrote: > > >> -Original Message- >> From: Don Lewis [mailto:truck...@apache.org] >> Sent: Thursday, August 11, 2016 14:41 >> To: dev@openoffice.apache.org; ksch...@apache.org >> Subject: Re: [PACKAGING 4.1.2-patch1 Binaries] (was RE: [TESTING] >> Applying

Re: Planning for emergency releases

2016-08-12 Thread Patricia Shanahan
On 8/12/2016 1:40 PM, Dennis E. Hamilton wrote: -Original Message- From: Patricia Shanahan [mailto:p...@acm.org] Sent: Thursday, August 11, 2016 11:07 To: dev@openoffice.apache.org Subject: Re: Planning for emergency releases [ ... ] Meanwhile, it is interesting for contemplating a

Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

2016-08-12 Thread Keith N. McKenna
Attached is a text file with the tests that I ran and the results of each. The only problem encountered was in verifying tl.dll.new with the .asc signature file. This was due to the web of trust issue discussed earlier in this thread.Patricia's signature had not

RE: Planning for emergency releases

2016-08-12 Thread Dennis E. Hamilton
> -Original Message- > From: Patricia Shanahan [mailto:p...@acm.org] > Sent: Thursday, August 11, 2016 11:07 > To: dev@openoffice.apache.org > Subject: Re: Planning for emergency releases > [ ... ] > > Meanwhile, it is interesting for contemplating a ready-to-release > strategy. We would

Re: [PACKAGING 4.1.2-patch1 Binaries] (was RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows)

2016-08-12 Thread Marcus
Am 08/12/2016 10:01 PM, schrieb Patricia Shanahan: On 8/12/2016 12:22 PM, Dennis E. Hamilton wrote: ... [Anecdotal Side Note: I just discovered that the MD5 hash for the 4.1.2 Windows .exe fails to check on my Windows system because of a defect in the .md5 file. For reasons unknown, the md5sum

Re: [PACKAGING 4.1.2-patch1 Binaries] (was RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows)

2016-08-12 Thread Patricia Shanahan
On 8/12/2016 12:22 PM, Dennis E. Hamilton wrote: ... [Anecdotal Side Note: I just discovered that the MD5 hash for the 4.1.2 Windows .exe fails to check on my Windows system because of a defect in the .md5 file. For reasons unknown, the md5sum tool that I have requires exactly two spaces

RE: Ready to setup release build machines?

2016-08-12 Thread Dennis E. Hamilton
I thought that the basic requirement is that the release manager(s) do any builds on a machine under their [exclusive] individual control. That also means satisfying baseline requirements for release builds though. That pretty much requires use of a VM if the main development system of a

RE: Officially releasing a patch for CVE-2016-1513

2016-08-12 Thread Dennis E. Hamilton
Don, Having worked through the 4.1.2-patch1 (CVE-2016-1513 remediation) for Windows, I learned a few more things about what can be done. > -Original Message- > From: Dennis E. Hamilton [mailto:dennis.hamil...@acm.org] > Sent: Sunday, July 24, 2016 15:45 > To: dev@openoffice.apache.org

RE: [TESTING] Applying openoffice-4.1.2-patch1 for Windows

2016-08-12 Thread Dennis E. Hamilton
> -Original Message- > From: Keith N. McKenna [mailto:keith.mcke...@comcast.net] > Sent: Wednesday, August 3, 2016 12:47 > To: dev@openoffice.apache.org > Subject: Re: [TESTING] Applying openoffice-4.1.2-patch1 for Windows > > Replies in line > > Dennis E. Hamilton wrote: > > Testing