RE: Integrate download wizard into website?

2021-04-15 Thread Jörg Schmidt
> -Original Message- > From: Marcus [mailto:marcus.m...@wtnet.de] > Sent: Thursday, April 15, 2021 7:00 PM > To: dev@openoffice.apache.org > Subject: Re: Integrate download wizard into website? > > Am 15.04.21 um 08:49 schrieb Jörg Schmidt: > > That's exactly what I wrote myself on

Re: Problmes useing changes with Writer

2021-04-15 Thread Keith N. McKenna
On 2021-04-15 18:42, F Campos Costero wrote: > I had considerable stability problems with the Getting Started > Guide's files. My problem may be different than Keith's but it was fixed by > running my Windows 10 system in Safe Mode. The instability was most > commonly associated with manipulating

Re: Problmes useing changes with Writer

2021-04-15 Thread F Campos Costero
I had considerable stability problems with the Getting Started Guide's files. My problem may be different than Keith's but it was fixed by running my Windows 10 system in Safe Mode. The instability was most commonly associated with manipulating (copying/pasting) images in frames. A related symptom

Re: Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

2021-04-15 Thread Dave Fisher
Hi - Here is some background on the issue which has apparently existed since about OpenOffice.org 2.0 in 2005 or so. See https://bz.apache.org/ooo/show_bug.cgi?id=49802 Some confusion existed between types of hyperlinks and rather than filtering they were all allowed to proceed. Arrigo

[GitHub] [openoffice] dave2wave opened a new pull request #127: Allow all https(s) Hyperlinks

2021-04-15 Thread GitBox
dave2wave opened a new pull request #127: URL: https://github.com/apache/openoffice/pull/127 There was some debate on which is best for 4.1.10. Here is the PR should we go this way. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to

Re: CVE-2021-30245: Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

2021-04-15 Thread Dave Fisher
Hi - We are working on releasing 4.1.10 soon do to this security report [1] which was announced today. I’d like to credit Arrigo Marchiori and Carl Marcum for development. Ariel Constenla-Haile and Peter Kovacs for our indispensible OpenGrok setup. Matthias Seidel, Marcus Lange, Jim

[GitHub] [openoffice] ardovm commented on a change in pull request #126: Quick fix to get the version string right in the About dialog

2021-04-15 Thread GitBox
ardovm commented on a change in pull request #126: URL: https://github.com/apache/openoffice/pull/126#discussion_r614337486 ## File path: main/cui/source/dialogs/about.cxx ## @@ -502,13 +502,14 @@ const rtl::OUString AboutDialog::GetBuildId() const // For better

[GitHub] [openoffice] ardovm commented on pull request #126: Quick fix to get the version string right in the About dialog

2021-04-15 Thread GitBox
ardovm commented on pull request #126: URL: https://github.com/apache/openoffice/pull/126#issuecomment-820677389 This code is an attempt to glue two strings together, avoiding to repeat the common part in between. In order not to make a generic algorithm, that would be overkill (such as

[GitHub] [openoffice] Pilot-Pirx commented on pull request #126: Quick fix to get the version string right in the About dialog

2021-04-15 Thread GitBox
Pilot-Pirx commented on pull request #126: URL: https://github.com/apache/openoffice/pull/126#issuecomment-820675967 Looks good! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific

[GitHub] [openoffice] ardovm commented on pull request #126: Quick fix to get the version string right in the About dialog

2021-04-15 Thread GitBox
ardovm commented on pull request #126: URL: https://github.com/apache/openoffice/pull/126#issuecomment-820674805 I apologize for the forced push. I always have to cherry-pick two commits from trunk in order to build AOO41X on openSUSE and I included them by mistake -- This is an

CVE-2021-30245: Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks

2021-04-15 Thread Dave Fisher
Severity: moderate Description: The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically crafted this could lead to untrusted code

Re: Integrate download wizard into website?

2021-04-15 Thread Marcus
Am 15.04.21 um 08:49 schrieb Jörg Schmidt: -Original Message- From: Marcus [mailto:marcus.m...@wtnet.de] Sent: Wednesday, April 14, 2021 11:18 PM To: dev@openoffice.apache.org Subject: Re: Integrate download wizard into website? Am 14.04.21 um 22:34 schrieb Jörg Schmidt: -Original

RE: Integrate download wizard into website?

2021-04-15 Thread Jörg Schmidt
> -Original Message- > From: Peter Kovacs [mailto:pe...@apache.org] > Sent: Wednesday, April 14, 2021 11:07 PM > To: dev@openoffice.apache.org > Subject: Re: Integrate download wizard into website? > > > On 14.04.21 22:42, Jörg Schmidt wrote: > > > > > >> -Original

RE: Integrate download wizard into website?

2021-04-15 Thread Jörg Schmidt
> -Original Message- > From: Marcus [mailto:marcus.m...@wtnet.de] > Sent: Wednesday, April 14, 2021 11:14 PM > To: dev@openoffice.apache.org > Subject: Re: Integrate download wizard into website? > > Am 14.04.21 um 22:42 schrieb Jörg Schmidt: > > > >> -Original Message- > >>

RE: Integrate download wizard into website?

2021-04-15 Thread Jörg Schmidt
> -Original Message- > From: Marcus [mailto:marcus.m...@wtnet.de] > Sent: Wednesday, April 14, 2021 11:18 PM > To: dev@openoffice.apache.org > Subject: Re: Integrate download wizard into website? > > Am 14.04.21 um 22:34 schrieb Jörg Schmidt: > >> -Original Message- > >> From: