Re: [tdf-discuss] Polish text is missing

[Łukasz Janik]

my bug https://bugs.documentfoundation.org/show_bug.cgi?id=139112

Łukasz

W dniu 04.03.2024 o 16:08, sophi pisze:

Hi Łukasz,
Le 01/03/2024 à 08:30, Łukasz Janik a écrit :
they didn't fix it, you still can't see the Polish text in 
libreoffice 24.2.1


https://www.fotosik.pl/zdjecie/ef99f6c855348945
https://www.fotosik.pl/zdjecie/9180a1fcdf02d031
https://www.fotosik.pl/zdjecie/7f8d13ef51cc0e51



Thanks for your feedback! Could you open a bug here:
https://bugs.documentfoundation.org/
So we can test and track the problem you reported.
Thanks in advance,
Cheers
Sophie



--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Polish text is missing

[sophi]

Hi Łukasz,
Le 01/03/2024 à 08:30, Łukasz Janik a écrit :
they didn't fix it, you still can't see the Polish text in libreoffice 
24.2.1


https://www.fotosik.pl/zdjecie/ef99f6c855348945
https://www.fotosik.pl/zdjecie/9180a1fcdf02d031
https://www.fotosik.pl/zdjecie/7f8d13ef51cc0e51



Thanks for your feedback! Could you open a bug here:
https://bugs.documentfoundation.org/
So we can test and track the problem you reported.
Thanks in advance,
Cheers
Sophie

--
Sophie Gautier so...@libreoffice.org
GSM: +33683901545
IRC: soph
Foundation coordinator
The Document Foundation


--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Polish text is missing

[Łukasz Janik]

they didn't fix it, you still can't see the Polish text in libreoffice 
24.2.1


https://www.fotosik.pl/zdjecie/ef99f6c855348945
https://www.fotosik.pl/zdjecie/9180a1fcdf02d031
https://www.fotosik.pl/zdjecie/7f8d13ef51cc0e51

--
Łukasz

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Polish text is missing

[Łukasz Janik]

they didn't fix it, you still can't see the Polish text in libreoffice 
24.2.0


https://www.fotosik.pl/zdjecie/ef99f6c855348945
https://www.fotosik.pl/zdjecie/9180a1fcdf02d031
https://www.fotosik.pl/zdjecie/7f8d13ef51cc0e51

--
Łukasz

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] [REMINDER] about the 2023 TDF Board of Directors Election

[Marina Latini]

Dear Members,

The voting phase for the new Board of Directors is ending soon.
Let me remind you of some information and deadlines as already shared in 
my previous message[0].


The subject of the message sent on Wednesday, December 13th 2023 with 
the token for voting was:


"Your Document Foundation 2023 Board Elections Voting Token"

from the sender:

"electi...@documentfoundation.org"

If you are a TDF Member and you didn’t get the message, please, check 
your inbox and the spam folder too!


In case you didn’t find the message, please, reach out to us as soon as 
possible at


electi...@documentfoundation.org

According to the announcement[0], this is the relevant timeline for 
voting:


* Saturday, 2023-12-16, 00:00 CET/UTC+1: official start of the election
* Thursday, 2023-12-28, 24:00 CET/UTC+1: end of the election

You still have time to cast your vote but please, don’t wait until the 
last minute!


For what concerns our voting system, the foundation adopted the STV 
voting system with the Meek method.
Please realize that it tries to optimize to make your first choice most 
likely to be on the board, with subsequent choices being much less 
probable (unless your earlier choices are very popular). As such the 
order of your choices really is important.


For more details please read also the page on Wikipedia[1].

You can find more information on this election directly from the 
election website[2] that includes also the list of candidates with their 
affiliations and candidacy statements[3].


On behalf of the Membership Committee,
Marina Latini

[0] 
https://community.documentfoundation.org/t/announcing-the-2023-tdf-board-of-directors-election/11666


[1] https://en.wikipedia.org/wiki/Single_transferable_vote

[2] https://elections.documentfoundation.org/2023-board/

[3] https://elections.documentfoundation.org/2023-board/candidates.html


--
Marina Latini, Chairperson of the Membership Committee
Tel: +39 3497482812 | IRC: deneb_alpha on LiberaChat
The Document Foundation, Winterfeldtstraße 52, 10781 Berlin, DE
Gemeinnützige rechtsfähige Stiftung des bürgerlichen Rechts
Legal details: http://www.documentfoundation.org/imprint

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information: CVE-2023-6185 & CVE-2023-6186

[Caolán McNamara]

tl;dr Upgrade to 7.5.9 or 7.6.4

---

CVE-2023-6185: Improper input validation enabling arbitrary Gstreamer
pipeline injection

Fixed in: LibreOffice 7.5.9/7.6.3

Description:

LibreOffice supports embedded videos in file formats via platform
audio/video support. Typically under Linux this is via gstreamer. In
affected version of LibreOffice the filename of the embedded video is
not sufficiently escaped when passed to gstreamer enabling an attacker
to run arbitrary gstreamer plugins depending on what plugins are
installed on the target system.

Linux Users are recommended to upgrade to 7.5.9 or 7.6.3 to avoid this
flaw.

---

CVE-2023-6186: Link targets allow arbitrary script execution

Fixed in: LibreOffice 7.5.9/7.6.4

Description:

LibreOffice supports hyperlinks. In addition to the typical common
protocols such as http/https hyperlinks can also have target URLs that
can launch built-in macros or dispatch built-in internal commands. In
affected version of LibreOffice there are scenarios where these can be
executed without warning if the user activates such hyperlinks. In
later versions the users's explicit macro execution permissions for the
document are now consulted if these non-typical hyperlinks can be
executed. The possibility to use these variants of hyperlink targets
for floating frames has been removed.

Users are recommended to upgrade to 7.5.9 or 7.6.4 to avoid this flaw.

---

Credit:

Thanks to Reginaldo Silva of ubercomp.com for finding and reporting
these issues.
Thanks to Collabora Productivity for providing fixes.

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Fwd: [tdf-discuss] Polish text is missing

[Franck Henry]

hi all

Polish update required by Lukasz (screenshots below)

--
--
Franck Henry
french former QA consultant
*www.ecosia.org <http://www.ecosia.org/>*

I use LibreOffice, for privacy, security, and control of my data
Check out the best Office suite: *https://www.libreoffice.org
<https://www.libreoffice.org>*

-- Forwarded message -
De : Łukasz Janik 
Date: sam. 9 déc. 2023 à 08:13
Subject: Re: [tdf-discuss] Polish text is missing
To: Franck Henry 


screen

https://images90.fotosik.pl/698/41a60cd67f6bbd37med.jpg

https://images91.fotosik.pl/697/ecd473cd286a329cmed.jpg

Łukasz

W dniu 09.12.2023 o 08:08, Franck Henry pisze:

hi (from french Paris area)

What level, where ?
You didn't tell

Le sam. 9 déc. 2023 à 08:04, Łukasz Janik  a écrit :

> please correct, Polish language
>
> --
> Łukasz
>
> --
> To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
> Problems?
> https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
> List archive: https://listarchives.documentfoundation.org/www/discuss/
> Privacy Policy: https://www.documentfoundation.org/privacy
>

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Polish text is missing

[Łukasz Janik]

please correct, Polish language

--
Łukasz

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Board elections and a Pledge for LibreOffice

[Andreas Mantke]

Hello everyone,

As some of you may know, the Foundation's board election is currently
taking place.

A group of community members from different countries and continents
have come together and made a pledge for LibreOffice.

Sophie Gautier, who you know from the international project, has
nominated the individual candidates. [1] All of them accepted the
candidacy and signed the pledge for LibreOffice:
- Sophie Gautier, from the French community,
- Eliane Domingos, from the Brazilian community,
- Osvaldo Gervasi, from the Italian community,
- Paolo Vecchi, from the Italian community,
- Jean-Baptiste Faure, from the French community,
- Franklin Weng, from the Taiwanese community,
- Daniel Rodriguez, from the Argentinian community,
- Mike Saunders, from the German community,
- myself (Andreas Mantke) from the German community,
- Jean-François Nifenecker, from the French community and
- Enio Gemmo, from the Italian community.

You can find the pledge at
https://nextcloud.documentfoundation.org/s/D5drr8Hbom6tYTD.

If you have any questions, please contact me. We, the signatories and
candidates, would be delighted to work with you to shape the future of
the Foundation and return the TDF to its golden age.

I wish you all a great weekend.

Kind regards,
Andreas

[1]
https://community.documentfoundation.org/t/nominations-for-the-elections-of-the-tdf-board-of-directors/11759

--
## Free Software Advocate
## My blog: http://www.amantke.de/blog


--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] PO202310315325451-000.EFT-REMITTANCE

[Francesc Xavier Berjano]

Buenos días,

Por favor encuentre los archivos adjuntos para su referencia

Saludos.

Francesc Xavier Berjano

Mediterranean Consulting

[https://attachments.office.net/owa/francesc%40mediterranean-consulting.com/service.svc/s/GetAttachmentThumbnail?id=AQMkAGVmMjhjYWQwLTZhNGQtNDU3OC05MzdjLWQ5ZDgxYmE2ZjIzYgBGAAAD6BGixvnVZE%2BEoyiW%2B5a%2F4AcABDofSrh%2BIUif9vTrL2R1ugAAAgEJBDofSrh%2BIUif9vTrL2R1ugADW8Ff%2BQESABAAscPftgOH%2FE60EPHYSE9eBQ%3D%3D=2=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.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.eiAoCPEI4sjJnfcGF63i6JQ9xTu9EPbLhXnR5rKD_GJmMQVZ6q0c4WISZ6LLqh7KnAPy-gt6Au4dr6s8vv5cyJ0N5N2wKkiBsFGLkclPYXgL_X7-GVoAmVn4ZO93UIbn8hxwUzvNVvlJH9imgso8YT8S0-gcinV8v3Lx_oXTtuITJ2C0wKC63gICWQNktTaf5R0r3eU71k1ArUm8VVY1ya3ZpmYb3_1gUoOHoDgbvwESkyDthjkS-8dHajK4ZorUBmpRGKx0oEUf6Ftfj_g9Z-UhiU4Py0tb6KGcmNph2FlgzHaOLFQ7hZ3BgoZ7uo0ODg8FZB7WyibOZI-WyGgUbw=7-QtXG3m90-Oaoy6_PWDGaCE1E1u5NsY-Fn3nfrrhSCSBunng7HTPUcBFNC7FtDRT93s9v7fJqI.=outlook.office.com=20231103003.14=true]



 

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information: CVE-2023-4863 (libwebp)

[Caolán McNamara]

tl;dr: upgrade to LibreOffice >= 7.5.7 or >= 7.6.2

LibreOffice typically (unless provided by a Linux distribution)
contains a bundled copy of the 3rd party library, libwebp

CVE-2023-4863 was reported for libwebp < 1.3.2 so correspondingly
libweb was upgraded to 1.3.2 in the 7.5.7 and 7.6.2 releases.

https://nvd.nist.gov/vuln/detail/CVE-2023-4863

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Cool! LibreOffice is free, open source and very good office suite!

[Turritopsis Dohrnii Teo En Ming]

Subject: Cool! LibreOffice is free, open source and very good office suite!

Good day from Singapore,

I have problems with both of my Microsoft Office Home and Business
2019 licenses. So I had installed a trial version of Microsoft Office
on my refurbished Aftershock gaming laptop but it expired on 11 Aug
2023. I couldn't use it any more.

I needed an office suite but I do not want to spend SGD$300++
purchasing Microsoft Office licenses. Then I thought of LibreOffice. I
quickly downloaded and installed LibreOffice 7.5.5.2.

With LibreOffice installed, I used LibreOffice Calc to edit and save
my Excel worksheet. When I opened the edited Excel worksheet using
Microsoft Excel on my Samsung Galaxy A32 5G Android phone, the Excel
worksheet didn't look significantly different. In fact, the Excel
worksheet edited by LibreOffice Calc looks the same as if it had been
edited by Microsoft Excel.

I have decided to uninstall the trial version of Microsoft Office Home
and Business 2019 (as it doesn't work anymore) and use LibreOffice
permanently!

By the way, does LibreOffice have the equivalent of Microsoft Outlook?

Thank you LibreOffice development team!

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
GIMP also stands for Government-Induced Medical Problems.

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] More Attacks On Employees And Inappropriate Behavior Of The Chair (was: [VOTE] Technical Budgeting Procedure)

[Andreas Mantke]

Hi Community,

Unfortunately, it seems posts get frequently flagged in the
board-discuss forum, where currently also the behavior of some board
members is criticized and discussed. I hate this form of limiting
discussions and censorship. It's not appropriate to a free software project.


Hi Thorsten, hi all,

Am 11.07.23 um 16:00 schrieb Thorsten Behrens via The Document
Foundation Community:

   \ 45x45 thb 
   July 11

   Hi Paolo,

   PaoloVecchi:

   Is the decision to send out that vote with those issues your own
   or it has been taken by the “shadow board”?

   It is ok to disagree with the policy (although a lot of effort went
   into drafting it). But “shadow board”, really? Next thing will be
   you accusing staff of being the “deep state”?


the last sentence is offensive towards Paolo and all members of staff.

I personally (with some experience in people’s management) wouldn’t even
have thought about such a labeling of members of staff.

The above sentence seemed to show the real view of the author on the
members of staff. And it shows that he expects a bad person behind every
corner. That is no ground for building a winning team.

Your repeated bad (and not only inappropriate) behavior towards people
with other opinions, including the members of TDF staff, is already
sufficient and broad documented and confirmed by many community members.

No community could and should tolerate such behavior. In any company or
institution, you would have been released of your management duties
immediately, to protect people’s mental (and physical) health and
well-being.

It is a shame and not in any case tolerable, that the majority of the
board, except Paolo and Emiliano (who are not members of the ‘shadow
board’) are not taking actions immediately.

If some of the members of the ‘shadow board’ own a spark of integrity,
they could prove that now and take the necessary actions immediately.

Regards,
Andreas

--
## Free Software Advocate
## Plone add-on developer
## My blog:http://www.amantke.de/blog

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information: CVE-2023-1183

[Caolán McNamara]

tl;dr: upgrade to LibreOffice >= 7.4.6 or >= 7.5.1

CVE-2023-1183 Arbitrary File Write in hsqldb 1.8.0

Fixed in: LibreOffice 7.4.6/7.5.1

Description:

LibreOffice supports embedded databases in its odb file format. The
most common format is hsqldb. LibreOffice typically contains a copy of
hsqldb version 1.8.0 to load this format. Each odb file contains a
"database/script" file which hsqldb parses to setup the database.
Hsqldb supports a "SCRIPT" keyword which is normally used to record the
commands input by the database admin to output such a script. In
affected versions of LibreOffice, an attacker could craft an odb
containing a "database/script" file which itself contained a SCRIPT
command where the contents of the file could be writen to a new file
whose location was determined by the attacker.

Users are recommended to upgrade to 7.4.6 or 7.5.1 to avoid this flaw
when using the packages provided from www.libreoffice.org which include
a bundled copy of hsqldb 1.8.0.

Credits:

* Thanks to Gregor Kopf of Secfault Security GmbH for finding and
reporting this issue.
* Thanks to Fred Toussi for kindly providing a solution to this issue
within hsqldb.

https://www.libreoffice.org/about-us/security/advisories/CVE-2023-1183

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Request for an interview: expert opinion on the Cyber Resilience Act

[Daniel Stoni]

Hello Lorenzo

as cybersecurity is a daily concern I'm looking forward to exchange thoughts. 

Any time next Saturday would fit.

Kind regards. Dani

Am 30. Mai 2023 09:29:33 MESZ schrieb Lorenzo Lupoli 
:
>Good morning,
>
>My name is Lorenzo Lupoli, and I am a second-year student at LUISS Guido 
>Carli's "Policy and Governance in Europe" master's program. Currently, I am 
>working on my thesis, which focuses on the field of cybersecurity. As part of 
>my research, I have been conducting interviews with industry experts to gain 
>valuable insights.
>
>The specific topic I am exploring is how the implementation of the Cyber 
>Resilience Act could potentially impact open source software. Given your 
>extensive knowledge and knowhow in the field, I would greatly appreciate the 
>opportunity to have a brief online interview with you for approximately 15 
>minutes. Your insights would provide valuable perspectives that would greatly 
>contribute to the depth and quality of my research.
>
>As an authority in the field, your thoughts, and suggestions regarding open 
>source software in the context of cybersecurity would be incredibly valuable. 
>I am particularly interested in understanding the potential challenges and 
>opportunities that may arise as a result of the Cyber Resilience Act, and any 
>recommendations you may have for researchers investigating this subject matter.
>
>I am flexible and available to meet online at a time that is most convenient 
>for you. Please let me know your availability, and I will ensure to adjust my 
>schedule accordingly. Your time and expertise are highly valued, and I 
>genuinely look forward to the opportunity to discuss these crucial matters 
>with you.
>
>You can reach me at 
>lorenzo.lup...@studenti.luiss.it or 
>by replying directly to this email. Please feel free to suggest a suitable 
>date and time for the interview, and I will make the necessary arrangements.
>
>Thank you very much for considering my request. I appreciate your time and 
>willingness to contribute to my research. I eagerly await your response and 
>the opportunity to engage in a meaningful discussion with you.
>
>Kind regards,
>
>Lorenzo Lupoli
>
>
>-- 
>To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
>Problems? 
>https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
>Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
>List archive: https://listarchives.documentfoundation.org/www/discuss/
>Privacy Policy: https://www.documentfoundation.org/privacy
>

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Request for an interview: expert opinion on the Cyber Resilience Act

[Lorenzo Lupoli]

Good morning,

My name is Lorenzo Lupoli, and I am a second-year student at LUISS Guido 
Carli's "Policy and Governance in Europe" master's program. Currently, I am 
working on my thesis, which focuses on the field of cybersecurity. As part of 
my research, I have been conducting interviews with industry experts to gain 
valuable insights.

The specific topic I am exploring is how the implementation of the Cyber 
Resilience Act could potentially impact open source software. Given your 
extensive knowledge and knowhow in the field, I would greatly appreciate the 
opportunity to have a brief online interview with you for approximately 15 
minutes. Your insights would provide valuable perspectives that would greatly 
contribute to the depth and quality of my research.

As an authority in the field, your thoughts, and suggestions regarding open 
source software in the context of cybersecurity would be incredibly valuable. I 
am particularly interested in understanding the potential challenges and 
opportunities that may arise as a result of the Cyber Resilience Act, and any 
recommendations you may have for researchers investigating this subject matter.

I am flexible and available to meet online at a time that is most convenient 
for you. Please let me know your availability, and I will ensure to adjust my 
schedule accordingly. Your time and expertise are highly valued, and I 
genuinely look forward to the opportunity to discuss these crucial matters with 
you.

You can reach me at 
lorenzo.lup...@studenti.luiss.it or by 
replying directly to this email. Please feel free to suggest a suitable date 
and time for the interview, and I will make the necessary arrangements.

Thank you very much for considering my request. I appreciate your time and 
willingness to contribute to my research. I eagerly await your response and the 
opportunity to engage in a meaningful discussion with you.

Kind regards,

Lorenzo Lupoli


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss]

[pierre-yves . samyn]

Hi
I'm worried about how the BoD works. Paolo Vicchi seems to me to have raised 
important questions, apparently going in the direction of legal advice. As a 
showcase for free software It is vital for the foundation to be exemplary. The 
whole community wants the resolution of conflicts without ostracism, in 
compliance with procedures. It is necessary and, I have no doubt, possible.

ATB
Pierre-Yves Samyn

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Deletion of vote from TDF's Board Discuss forum

[Paolo Vecchi]

Hi all,

it seems like unfortunately misleading information are being sent out by 
a fellow member of the board.



On 26/05/2023 15:05, Cor Nouws wrote:

Hi all,

Paolo Vecchi wrote on 26/05/2023 11:07:

I'm writing here to discuss the actions of members of the Board 
against another Director (myself).


Fact: five directors and a deputy were shocked by the behavior of one 
director


I doubt that's the case as five directors and a deputy should be fully 
aware of the situation and that the vote in question must be revoked as 
it has been commented here by several members of the community:


https://community.documentfoundation.org/t/decision-rules-of-procedure-change/9288


who, in his inability to accept board procedures


The procedures that are written here and you refused to follow?

https://wiki.documentfoundation.org/TDF/BoD_rules

"Decisions regarding the rules of procedure are made according to § 9 of 
the statutes. Drafts of amended rules, or the intent to cancel them in 
entirety, need to be made available at least one week in advance."


Even our chairman pretended to have the simple change adding the line 
for the Conflict of Interests Policy published as the community should 
check and comment in case "something weird was going on".


I tried in all possible ways to make the board realise of the mistake 
they were making and the issues they were creating.



and his inability to accept that his opinion is not always right,


I form my opinions by looking at data and facts to try being wrong fewer 
times than others.



decided to (again) disclose legal correspondence in the open.


What I reported was not legal correspondence.

The quotes reported simply confirm what has been reported in public 
before receiving an answer from our lawyer.


There is no privileged or sensitive information reported in the vote and 
reporting that the our lawyer confirms the conclusions reached by board 
members, which were already public or will be made public shortly (eg. 
the vote in which CoIs have been ignored), does not amount to disclosing 
legal correspondence.




Paolo is making things up.


That's a gratuitous insult which I suppose should be evaluated in 
relation to our Code of Conduct Policy.


He never stops pushing his way, up to disclosing legal stuff (again) 
and more.


You could call it "pushing his way" but it is my duty to try to stop 
other board members to make mistakes.


Mistakes were clear but you and Thorsten decided to "push your way" 
regardless.


Our lawyer just confirmed the obvious mistakes you were making that you 
were refusing to acknowledge.


Once again, the "legal stuff" isn't much else than a confirmation of 
what is already in the public domain.



There is no way to discuss legal matters in the open


We extensively discussed legal matters in public in the past, Eg: you 
presented your idea that even while in conflict of interests you should 
be able to influence discussions and decision and then vote abstain. 
Many others, including myself, disagree and presented many examples 
where what you stated does not fit with the general understanding of how 
CoIs should be dealt with.


Now if you want to selectively avoid talking about mistakes you made 
labelling them "legal stuff" then you could have looked objectively at 
the issue you were creating accept that your proposal should have been 
looked at by our legal counsel as I asked. We would have saved a lot of 
time and would have avoided to go public with a vote which creates 
embarrassment for the board and unnecessary discussions.



. As such the measure was needed (due to past form), and rather 
low/proportionate as he can still post answers.


The measure wasn't needed as the vote doesn't mention anything that 
isn't already known. It just reports confirmations from our lawyer.




He did sent exactly the same text as here to the tdf-internal@ list 
where members can subscribe and discuss*. I have replied more in 
detail there.


But the replies just go around in circles trying to distract people from 
the simple facts that the vote I sent out, which contain no privileged 
legal information, while performing my duty as a member of the board has 
been deleted. The way things have been done and the continuous rejection 
of evidence just make it look like a retaliatory action for having 
pointed out that the vote is wrong and for having pretended to have it 
checked by our lawyer.





...
Please also consider to ask the Board of Directors to revert the 
changes they made to the Board Discuss forum. They limit the right of 
expression not only to a specific board member, but also to the rest 
of the community, because nobody can send messages there anymore 
without moderation.


Only creating of topics on Board-Discuss is limited.


And I'm barred from creating a new topic to reinstate the legitimate 
vote that has been deleted.


On Discourse, that was the mildest way to achieve the necessary 
results, in 

Re: [tdf-discuss] Deletion of vote from TDF's Board Discuss forum

[Cor Nouws]

Hi all,

Paolo Vecchi wrote on 26/05/2023 11:07:

I'm writing here to discuss the actions of members of the Board against 
another Director (myself).


Fact: five directors and a deputy were shocked by the behavior of one 
director who, in his inability to accept board procedures and his 
inability to accept that his opinion is not always right, decided to 
(again) disclose legal correspondence in the open.


Paolo is making things up. He never stops pushing his way, up to 
disclosing legal stuff (again) and more. There is no way to discuss 
legal matters in the open. As such the measure was needed (due to past 
form), and rather low/proportionate as he can still post answers.


He did sent exactly the same text as here to the tdf-internal@ list 
where members can subscribe and discuss*. I have replied more in detail 
there.



...
Please also consider to ask the Board of Directors to revert the changes 
they made to the Board Discuss forum. They limit the right of expression 
not only to a specific board member, but also to the rest of the 
community, because nobody can send messages there anymore without 
moderation.


Only creating of topics on Board-Discuss is limited. On Discourse, that 
was the mildest way to achieve the necessary results, in combination 
with revoking moderator rights. We didn't want to silence/remove Paolo. 
That would be the only other way to control this in Discourse, AFAIK.


Greetings,
Cor

*) new members are always invited to subscribe to this mailing list at
  https://lists.documentfoundation.org/mailman/listinfo/tdf-internal

--
Cor Nouws, member Board of Directors
The Document Foundation, Winterfeldtstraße 52, 10781 Berlin, DE
Gemeinnützige rechtsfähige Stiftung des bürgerlichen Rechts
Legal details: http://www.documentfoundation.org/imprint

GPD key ID: 0xB13480A6 - 591A 30A7 36A0 CE3C 3D28  A038 E49D 7365 B134 80A6
mobile  : +31 (0)6 25 20 7001
skype   : cornouws
blog: cor4office-nl.blogspot.com
jabber  : cor4off...@jabber.org


--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Deletion of vote from TDF's Board Discuss forum

[Paolo Vecchi]

Hi all,

I'm writing here to discuss the actions of members of the Board against 
another Director (myself).


Wednesday afternoon (24/05/2023 at approximately 15:10 CET), I started a 
vote on Board Discuss, the forum setup to discuss board matters 
publicly. The vote was intended to revert a previous decision which 
completely changes the Rules of Procedure by removing well defined areas 
of responsibility for board members. The vote included the rationale and 
references explaining why the vote is urgent and mandatory.


About 3 hours later I noticed that the vote post disappeared. I thought 
it was a problem with the platform so I tried to post it again and 
that's when I discovered that my posting rights have been reduced to the 
lowest level and I have been removed from the directors moderation group.


30 minutes later I received an email informing me that some members of 
the board voted to delete my vote.


The deputy chairperson, Emiliano Vavassori, was not informed and 
involved in the vote to delete my vote and it seems also Florian was not 
copied on the vote either, as would be standard practice for votes to 
keep the ED informed.


 A subsequent email by the chairman, Thorsten Behrens, stated that it 
was due to an emergency procedure which is obviously an absurd excuse. 
Any director and selected members of staff could have moderated the 
post, notified me of eventual issues with the post and republished it a 
few minutes later.


The board members who decided to delete my vote are not willing to even 
consider that they made a mistake. This gives the impression of being a 
retaliatory action as I "dared" to challenge a decision they want to 
push despite having been made aware of the clear issues. The original 
decision was challenged by many private and public comments.


The decision to change the Rules of Procedure, as the board did, was 
confirmed to be wrong by our lawyer, confirming also the issues 
previously reported. The lawyer recommended to revoke the vote and 
revert the changes. Most board members refused to act, so I've been left 
with no choice but to send the vote in public where, as directed by the 
Rules of Procedure themselves, must be discussed.


If you subscribed to Board Discuss on our Discourse instance, you should 
have received a copy of my vote allowing you to evaluate the matter 
about which I'd like to have your opinion.


Please also consider to ask the Board of Directors to revert the changes 
they made to the Board Discuss forum. They limit the right of expression 
not only to a specific board member, but also to the rest of the 
community, because nobody can send messages there anymore without 
moderation.


Ciao

Paolo

--
Paolo Vecchi - Member of the Board of Directors
The Document Foundation, Winterfeldtstraße 52, 10781 Berlin, DE
Gemeinnützige rechtsfähige Stiftung des bürgerlichen Rechts
Legal details: https://www.documentfoundation.org/imprint


--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information: CVE-2023-0950, CVE-2023-2255

[Caolán McNamara]

tl;dr: upgrade to LibreOffice >= 7.4.7 or >= 7.5.3

CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing

Fixed in: LibreOffice 7.4.6/7.5.1

Description:

In the affected versions of LibreOffice certain malformed spreadsheet
formulas, such as AGGREGATE, could be created with less parameters
passed to the formula interpreter than it expected, leading to an array
index underflow, in which case there is a risk that arbitrary code
could be executed.

In versions >= 7.4.6 (and >= 7.5.2) the count of parameters is
validated

Credits:
 * Secusmart GmbH for discovering and reporting the issue
 * Eike Rathke of Red Hat, Inc. for a solution

https://www.libreoffice.org/about-us/security/advisories/CVE-2023-0950

CVE-2023-2255: Remote documents loaded without prompt via IFrame

Fixed in: LibreOffice 7.4.7/7.5.3

Description:

LibreOffice supports "Floating Frames", similar to a html IFrame. The
frames display their linked document in a floating frame inside the
host document.

In affected versions of LibreOffice these floating frames fetch and
display their linked document without prompt on loading the host
document. This was inconsistent with the behavior of other linked
document content such as OLE objects, Writer linked sections or Calc
WEBSERVICE formulas which warn the user that there are linked documents
and prompts if they should be allowed to update.

In versions >= 7.4.7 (and >= 7.5.3) the existing "update link" manager
has been expanded to additionally control the update of the content of
IFrames, so such IFrames will not automatically refresh their content
unless the user agrees via the prompts.

Thanks to Amel Bouziane-Leblond for discovering this flaw.

https://www.libreoffice.org/about-us/security/advisories/CVE-2023-2255

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: [libreoffice-users] How to get the height of the text context

[Andrew Pitonyak]

I'm pretty sure I have an example that does something about it either in OOME 
or in andrewmacro.odt on my website, but I'm not in a position that I can 
verify that right now.

Try www.pitonyak.org I think the link on the page is something like macros.

⁣Get BlueMail for Android ​

On Apr 27, 2023, 4:09 PM, at 4:09 PM, Johnny Rosenberg  
wrote:
>Den tors 27 apr. 2023 kl 10:55 skrev Rose Gale
>:
>
>> Hello:
>>I don't know if anyone has encountered this problem, but I
>haven't
>> been able to find the right solution. I hope I can get some helpful
>> suggestions here.
>>I'd like to start by stating that I can only do this in c# for
>a
>> variety of reasons
>>I need to get the height of the content on the last page of
>the
>> document. I have drawn a sketch below for your understanding.
>>
>
>Only text is accepted in this mailing list, so everything else is
>stripped
>away. Upload it somewhere and give us the link instead.
>
>
>>
>>I have found some classes on the official website, but I do
>not know
>> whether they are useful or how to use them.
>> [image: image.png]
>>
>>  Actually, to achieve functions similar to Word : var height =
>>
>objrage.get_Information(WdInformation.wdVerticalPositionRelativeToPage);
>>
>>
>> Best Regards
>>
>> --
>> To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
>> Problems?
>>
>https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
>> Posting guidelines + more:
>https://wiki.documentfoundation.org/Netiquette
>> List archive: https://listarchives.libreoffice.org/global/users/
>> Privacy Policy: https://www.documentfoundation.org/privacy
>>
>
>-- 
>To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
>Problems?
>https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
>Posting guidelines + more:
>https://wiki.documentfoundation.org/Netiquette
>List archive: https://listarchives.libreoffice.org/global/users/
>Privacy Policy: https://www.documentfoundation.org/privacy

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: [libreoffice-users] How to get the height of the text context

[Johnny Rosenberg]

Den tors 27 apr. 2023 kl 10:55 skrev Rose Gale :

> Hello:
>I don't know if anyone has encountered this problem, but I haven't
> been able to find the right solution. I hope I can get some helpful
> suggestions here.
>I'd like to start by stating that I can only do this in c# for a
> variety of reasons
>I need to get the height of the content on the last page of the
> document. I have drawn a sketch below for your understanding.
>

Only text is accepted in this mailing list, so everything else is stripped
away. Upload it somewhere and give us the link instead.


>
>I have found some classes on the official website, but I do not know
> whether they are useful or how to use them.
> [image: image.png]
>
>  Actually, to achieve functions similar to Word : var height =
> objrage.get_Information(WdInformation.wdVerticalPositionRelativeToPage);
>
>
> Best Regards
>
> --
> To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
> Problems?
> https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
> List archive: https://listarchives.libreoffice.org/global/users/
> Privacy Policy: https://www.documentfoundation.org/privacy
>

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information: CVE-2022-38745

[Caolán McNamara]

tl;dr: upgrade to LibreOffice >= 7.2.6 or >= 7.3.1, (which was already
recommended)

https://www.libreoffice.org/about-us/security/advisories/CVE-2022-38745

CVE-2022-38745: Empty entry in Java class path risks arbitrary code
execution

Fixed in: LibreOffice 7.2.6/7.3.1

Description:

Most versions of LibreOffice support and contain components written in
Java. LibreOffice extends the existing Java class path with its own
internal classes.

In the affected versions of LibreOffice if the existing class path was
empty, then when Java class files are loaded, the current working
directory is searched for valid classes before using the embedded
versions. If an attacker sends a zip file containing a class file
alongside a document then depending on the file manager or other tool
used to open the zip file, navigate to the document and launch
LibreOffice to open it, then the current working directory of
LibreOffice may be the directory in which the class file exists, in
which case there is a risk that the arbitrary code of the class file
could be executed.

In versions >= 7.2.6 (and >= 7.3.1) such unwanted empty paths are not
appended to the classpath


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Official supported and still maintained Python package

[Regina Henschel]

Hi Christian,

c.bu...@posteo.jp schrieb am 28.11.2022 um 11:42:

Hello,

I'm not sure if this is the correct list for my question.


It is in regard to TDF.

 But don't you

represent the OpenDocument format?


No. TDF does not "represent" the OpenDocument format, but it provides 
LibreOffice which is an application that uses the OpenDocument format as 
main format.




Looking around in the web I can find a lot of Python packages for 
reading and writing files in OpenDocument format. Based on the last 
commit date and the count of Issues and RPs, all of them seem 
unmaintained and out-dated.


TDF is not responsible for those packages nor is it OASIS.

Are you willing to help in development? Then you should get in contact 
with the developers of those packages. 
https://opendocumentformat.org/developers/ lists four packages. Perhaps 
those are suitable for you?




Are you aware of an active project offering a Python package to write 
and read OpenDocument format files?


Why do you need a Python package instead of using LibreOffice? The API 
of LibreOffice can be used from Python.


In case Java is OK for you and you need something independent from 
LibreOffice, you might have a look at ODF Toolkit 
https://tdf.github.io/odftoolkit/



Do you officially support such a project?


As far as I know, currently no such project exists under the umbrella of 
TDF.


Kind regards,
Regina



--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Official supported and still maintained Python package

[Thorsten Behrens]

Hi Christian,

c.bu...@posteo.jp wrote:
> Looking around in the web I can find a lot of Python packages for reading
> and writing files in OpenDocument format. Based on the last commit date and
> the count of Issues and RPs, all of them seem unmaintained and out-dated.
> 
If you are a developer, and looking for ODF library support, I think a
better place to ask is the LibreOffice developer list (large
audience), or the odftoolkit list (much smaller, nominally about the
Java ODF toolkit, but you'll find many ODF standard afficionados
there).

* libreoff...@lists.freedesktop.org for the former
* d...@odftoolkit.org (might need subscription before posting) for the
  latter

HTH,

-- Thorsten

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Official supported and still maintained Python package

[c . buhtz]

Dear Italo,

thanks for the reply.

Am 28.11.2022 12:54 schrieb Italo Vignoli:
The Python packages you mention have not been developed within the ODF 
main

project, and as such are not supported by OASIS.


I know this isn't an easy job but maybe the foundation and/or OASIS 
should think about supporting and announcing an official supported 
package.


While I agree about the noise created by those packages, issues should 
be directed to

their respective owners (developers).


This will have nearly no effect because they are orphaned. That is the 
point.
And a new fork won't help here. A fork is only a good choice if it would 
result in an official supported project. That is my point.


--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Official supported and still maintained Python package

[Italo Vignoli]

The Document Foundation is one of the main sponsors of the ODF (Open 
Document Format), and LibreOffice is the main implementation of ODF. We 
do not officially represent ODF, which is owned and maintained by OASIS, 
although we are probably the main ODF advocates. The Python packages you 
mention have not been developed within the ODF main project, and as such 
are not supported by OASIS. While I agree about the noise created by 
those packages, issues should be directed to their respective owners 
(developers).


On 11/28/22 11:42, c.bu...@posteo.jp wrote:

Hello,

I'm not sure if this is the correct list for my question. But don't 
you represent the OpenDocument format?


Looking around in the web I can find a lot of Python packages for 
reading and writing files in OpenDocument format. Based on the last 
commit date and the count of Issues and RPs, all of them seem 
unmaintained and out-dated.


Are you aware of an active project offering a Python package to write 
and read OpenDocument format files?

Do you officially support such a project?

Are you aware of the problem with lot of orphaned Python packages? 
IMHO this violates the intention of OpenDocument. The packages are 
outdated buggy etc. It is better to have none of that packages instead 
of having buggy ones. All the projects should be "collected" and 
validated by the foundation.


Kind
Christian


--
Italo Vignoli - LibreOffice Marketing & PR
mobile/signal +39.348.5653829 - emailit...@libreoffice.org
GPG Key ID - 0xAAB8D5C0
DB75 1534 3FD0 EA5F 56B5 FDA6 DE82 934C AAB8 D5C0

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2022-26305, CVE-2022-26306 and CVE-2022-26307

[Caolán McNamara]

tl:dr  upgrade LibreOffice 7-2 to 7.2.7,
and/or upgrade LibreOffice 7-3 to 7.3.3

CVE-2022-26305 Execution of Untrusted Macros Due to Improper
Certificate Validation

Due to a poor mechanism for comparing the authors of certificates it
was possible to make a digitally signed document containing macros
incorrectly appear as if it was signed by a trusted author (if the user
had configured trusted certificates).

Fixed in 7.2.7 and 7.3.2
https://www.libreoffice.org/about-us/security/advisories/cve-2022-26305

---

LibreOffice supports the storage of passwords for web connections in
the user’s configuration database. The stored passwords are encrypted
with a single master key provided by the user. There were two problems
here:

CVE-2022-26306 Static Initialization Vector Allows to Recover Passwords
for Web Connections Without Knowing the Master Password

The same initial vector for the encryption process was used for all
encryption, leaving the password potentially vulnerable to recovery if
an attacker gained access to the users config data.

Fixed in 7.2.7 and 7.3.3
https://www.libreoffice.org/about-us/security/advisories/cve-2022-26306

and

CVE-2022-26307 Weak Master Keys

A flaw in LibreOffice existed where master key was poorly encoded
resulting in weakening its entropy from 128 to 43 bits making the
stored passwords vulnerable to a brute force attack if an attacker has
access to the users stored config.

Fixed in 7.2.7 and 7.3.3
https://www.libreoffice.org/about-us/security/advisories/cve-2022-26307

For CVE-2022-26306 and CVE-2022-26307 newly saved password information
is saved using a more secure mechanism. In order to deal with old
preexisting vulnerable data, if the old format is detected in the
user's config during application startup then an infobar prompts the
user to reenter your password in order to trigger replacing that old
data with the new format.


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Next steps for the Discourse Community instance

[sophi]

Hi all,

As you are aware, we are conducting a test on Discourse to move on some 
mailing lists. It is not possible to bridge mailing lists and have a 
Nabble like gateway.


Here are the options:

- have a Discourse category only hosting a project (like Documentation, 
UX/Design). Contributors can post directly in the forum or follow the 
discussion and participate via notifications (received by mail). 
Subscribers to the mailing list can be mass subscribed to Discourse and 
the mailing list will be closed


- for Native Language Projects: we could have the same as above with sub 
categories per sub projects, see for example pt-BR who has Docs - 
Qualidade - Geral as sub categories


- have both mailing list and the corresponding Discourse category with 
no cross communication channel between the two.


- have Discourse read-only category mirroring a mailing list for example 
the Announce lists.


- have only a mailing list and nothing on Discourse.

- for users@mailing lists, we won't create a user category on Discourse 
Community because it will be redundant with the Discourse Ask instance. 
So either you keep the mailing lists or if your language is not yet 
there, we create a corresponding category on Ask.


This decision shall be taken by project and by each native language 
community. For example the Brazilian and the Spanish communities have 
already decided to go to the first option (Discourse only). It seems 
that Documentation will have both for the moment.


Discourse Community test instance is here:
https://communitytest.documentfoundation.org/
Please have a look at the archives we imported and let us know if you 
see issues or if you want to see how it works for your project.


Redmine ticket with all the details:
https://redmine.documentfoundation.org/issues/3567
(and a *big thanks* to Guilhem for all his great work on this)
Please read https://redmine.documentfoundation.org/issues/3567#note-15
and further on archives migration.

How to proceed next?
Discuss with your project or your native language community and let us 
know what you decided among the above options. I've set the reply to 
this mail to go on the website list.


When you let us know your decision, I'll send you another mail 
containing several questions about the migration type we need to proceed 
(mass subscribing list subscribers to the forum, import archive or not, 
retain addresses, etc.)


We would like to launch the instance at the beginning of June (as some 
communities are really impatient after the test ;) but of course if you 
are not decided at that moment, it's still possible to create new 
categories once the instance is in production.


Don't hesitate to come back to me if you have questions.

Cheers
Sophie

--
Sophie Gautier so...@libreoffice.org
GSM: +33683901545
IRC: soph
Foundation coordinator
The Document Foundation

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: Discourse instance to test bridges to mailing lists

[sophi]

Hi all,

That's a gentle reminder calling for your help to test the Discourse 
instance we have deployed. Please give it a try and send your feedback, 
thoughts, wishes on the instance, on Redmine or directly to me.

Thanks a lot in advance!
Cheers,
Sophie
Le 11/03/2022 à 13:23, sophi a écrit :

Hi all,

Bridging mailing lists to Discourse is something requested by the 
community since Nabble is no more working for us. The goal is to be able 
to post from the mailing lists and from Discourse, it is *not* to 
replace mailing lists.


Guilhem (thanks a lot!) has deployed a test instance that you can find 
here:

https://communitytest.documentfoundation.org/
Note: this is a test instance only, if we go in production, all what has 
been posted in this test instance will be deleted.


The ticket describing how it works:
https://redmine.documentfoundation.org/issues/3567
Category1 and Category2 have corresponding mailing lists where you can 
post from Discourse.
Category3 is the only one bridged and is a read-only mirror of the list 
archives. The intention with the two previous categories is to test 
different bridging methods.


Please help us to test the instance and give your feedback on Discourse 
site feedback category or in the ticket.


Cheers
Sophie




--
Sophie Gautier so...@libreoffice.org
GSM: +33683901545
IRC: soph
Foundation coordinator
The Document Foundation

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Discourse instance to test bridges to mailing lists

[sophi]

Hi all,

Bridging mailing lists to Discourse is something requested by the 
community since Nabble is no more working for us. The goal is to be able 
to post from the mailing lists and from Discourse, it is *not* to 
replace mailing lists.


Guilhem (thanks a lot!) has deployed a test instance that you can find here:
https://communitytest.documentfoundation.org/
Note: this is a test instance only, if we go in production, all what has 
been posted in this test instance will be deleted.


The ticket describing how it works:
https://redmine.documentfoundation.org/issues/3567
Category1 and Category2 have corresponding mailing lists where you can 
post from Discourse.
Category3 is the only one bridged and is a read-only mirror of the list 
archives. The intention with the two previous categories is to test 
different bridging methods.


Please help us to test the instance and give your feedback on Discourse 
site feedback category or in the ticket.


Cheers
Sophie

--
Sophie Gautier so...@libreoffice.org
GSM: +33683901545
IRC: soph
Foundation coordinator
The Document Foundation

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2021-25636

[Caolán McNamara]

tl:dr upgrade to LibreOffice 7-2 to 7.2.5
(or libreoffice 7.3.0)

LibreOffice supports digital signatures of ODF documents and macros
within documents, presenting visual aids that no alteration of the
document occurred since the last signing and that the signature is
valid.

The Network and Data Security group at Ruhr University Bochum
reported a flaw with the implementation of this.

CVE-2021-25636 Incorrect trust validation of signature with ambiguous
KeyInfo children

An Improper Certificate Validation vulnerability in LibreOffice allowed
an attacker to create a digitally signed ODF document, by manipulating
the documentsignatures.xml or macrosignatures.xml stream within the
document to contain both "X509Data" and "KeyValue" children of the
"KeyInfo" tag[1], which when opened caused LibreOffice to verify using
the "KeyValue" but to report verification with the unrelated "X509Data"
value.

In versions >= 7.2.5 (and >= 7.3.0) certificate validation is now
configured to only consider X509Data children to limit validation to
X509 certificates only.

[1] https://www.w3.org/TR/xmldsig-core1/#sec-KeyInfo


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2021-43527

[Caolán McNamara]

tl;dr: upgrade to 7.1.8 or 7.2.4

The install sets of LibreOffice as provided by TDF include a bundled
copy of Mozilla's NSS library. Before 7.1.8/7.2.4 the bundled NSS is
affected by:

CVE-2021-43527 Memory corruption via DER-encoded DSA and RSA-PSS
signatures

https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/#CVE-2021-43527
https://googleprojectzero.blogspot.com/2021/12/this-shouldnt-have-happened.html


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2021-25633, CVE-2021-25634, CVE-2021-25635

[Caolán McNamara]

tl:dr upgrade to LibreOffice 7-0 to 7.0.6, libreoffice 7-1 to 7.1.2
(or libreoffice 7.2.0)

LibreOffice supports digital signatures of ODF documents and macros
within documents, presenting visual aids that no alteration of the
document occurred since the last signing and that the signature is
valid.

The Network and Data Security group at Ruhr University Bochum
reported a number of flaws with the implementation of this.

CVE-2021-25633
Content Manipulation with Double Certificate Attack
https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25633
Fixed in 7.0.6 and 7.1.2

CVE-2021-25634
Timestamp Manipulation with Signature Wrapping
https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25634
Fixed in 7.0.6 and 7.1.2

CVE-2021-25635
Content Manipulation with Certificate Validation Attack
https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25635
Fixed in 7.0.5 and 7.1.1


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: Reach out for ad space

[Italo Vignoli]

Hi, we are not accepting any kind of advertising on our web properties, 
independently from the topic. Best regards.


On 6/2/21 3:03 PM, jason...@elorbita.com wrote:

"Hello,

  We are interested in advertising. We want to advertise guest article 
on your site planet.documentfoundation.org. Our article will be written 
according to your site theme and will include a link to a betting site.


  What is the rate for this?

  IMPORTANT: If you are not accepting links to gambling site we might be 
still interested, Please mention the rate for regular links as well


  Skype: shanker2020
  Telegram 9966160005
  WhatsApp number: 9966160005

  Thank you"




--
Italo Vignoli - LibreOffice Marketing & PR
mobile/signal +39.348.5653829 - email it...@libreoffice.org
GPG Key ID - 0xAAB8D5C0
DB75 1534 3FD0 EA5F 56B5 FDA6 DE82 934C AAB8 D5C0


--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: Mirror Review Magazine Invites LibreOffice as one of "The 10 Renowned Document Management Companies, 2021."

[Italo Vignoli]

Hi Jacob,

LibreOffice main focus is personal productivity, or document creation 
and sharing, which is quite different from document management. Also, we 
are supported by donations, which are focused on the development of the 
software and the community. We do not have any marketing budget for 
advertising. So, we are not interested.


Thanks and best regards, Italo

On 5/25/21 6:49 PM, Jacob Eddy wrote:

Hi Italo,

I am Jacob From *Mirror Review Magazine* 
and I would like to invite 
*LibreOffice *toget featured in our latest magazine issue, */“The 10 
/Renowned /Document Management Companies, 2021.”/*


As industrialization is picking its pace, we can observe that the 
intensity of competition in the market has spiked. Today, every other 
company relies on data as its main source of information. The 
involvement of data can’t be ignored in today’s time, especially when 
everything is digital. Management of data is an art and requires years 
of experience and skill to master it. This is the reason why companies 
like yours have been so successful in assisting clients. We as a leading 
business magazine understand the importance and relevance of data in 
today’s time. This has motivated us to work towards our latest issue, 
*/“/**/The 10 /**Renowned **/Document Management Companies, 2021.”/*


**

In this magazine issue, we will focus on various unique 
solutions/services offered by the company to its clientele. Alongside, 
we will emphasize the entrepreneurial journey of the featured leader. 
This will help several other aspiring entrepreneurs to derive motivation 
from the inspiring journey. Moreover, our unique business storytelling 
style has received constant praise from the featured companies and 
leaders. Our well-established platform will help you to increase your 
reach to a wide range of clientele.


To increase your visibility among the peers, we will be providing you 
the following benefits with this opportunity:


 1. A 2 full-page *Article*, unfolding your company’s story,
highlighting the services you provide and achievements of your company.
 2. A 2 full-pages *CXO Article* (an article on any industry topic by
the concerned person) that can be used in any of our upcoming magazines.
 3. A full-page *Advertisement *of your company (upcoming product line,
events etc.) which can be placed in any of our upcoming magazine (of
the same year).
 4. A print-ready *HD PDF* of your article with reprint rights.
 5. *Press Releases* that you can post on various media channels.
 6. The *Logo of Listing* and online company profile links that can be
used on your website, media, press release, etc.
 7. A *soft copy of the certificate* by Mirror Review, attributing you
as one of/*“*/*/The 10 /**Renowned **/Document Management Companies,
2021/**/.”/*
 8. A* backlink* to your company’s website which remains on our archives
permanently.

Please note that this suite of branding and marketing practices comes 
with a sponsorship cost of *USD 500.*


**

*Process *: Once you confirm your participation, we will send you a 
contract form for your signature. Following that, we will send you an 
interview questionnaire, which will be referred to write your magazine 
profile. Our editorial team will pen down a creative story, which will 
be sent to you for your approval.


If you have any queries or need any information regarding this 
opportunity, please let us know.


Looking forward to have a word with you soon.

Thanks and Regards,

Description: Description: Description: Description: Description: 
cid:image001.jpg@01D6EF6C.C834FAB0




*Jacob Eddy*

*Business Development Manager *| *Mirror Review*

Tel: +1(740) 521-9306

Mail: ja...@mirrorreview.com 

Web: www.mirrorreview.com 

Description: cid:image002.png@01D73517.F5793400 
Description: 
cid:image003.png@01D73517.F5793400 
Description: 
cid:image004.png@01D73517.F5793400 
Description: 
cid:image005.png@01D73517.F5793400 


//


--
Italo Vignoli - LibreOffice Marketing & PR
mobile/signal +39.348.5653829 - email it...@libreoffice.org
GPG Key ID - 0xAAB8D5C0
DB75 1534 3FD0 EA5F 56B5 FDA6 DE82 934C AAB8 D5C0


--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information: CVE-2021-25632

[Caolán McNamara]

tl;dr: macOS users should upgrade to 7.0.6 or 7.1.3

CVE-2021-25632: fileloc extension added to macOS executable denylist

https://www.libreoffice.org/about-us/security/advisories/cve-2021-25632


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] security related information, CVE-2021-25631

[Caolán McNamara]

On Fri, 2021-04-16 at 12:04 +0200, William Gathoye (LibreOffice) wrote:
> On 15/04/2021 21:55, Caolán McNamara wrote:
> > [...]
> > In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the
> > 7-
> > 0 series in versions prior to 7.0.5
> > [...]
> 
> have received a CVE warning from a security analyst saying that the 
> LibreOffice 7.0 branch is still vulnerable to CVE-2021-25631.
> 
> The 7.0.5 version seems not to be fixing the issue. He recommends me to
> tweak the Chocolatey libreoffice-still package and upgrade all the
> users to the 7.1 branch.

Can you forward the details of that claim to
secur...@documentfoundation.org for investigation. I certainly see the
expected commit in 7.0.5


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] security related information, CVE-2021-25631

[William Gathoye (LibreOffice)]

On 15/04/2021 21:55, Caolán McNamara wrote:

[...]
In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-
0 series in versions prior to 7.0.5
[...]


Being the maintainer of chocolatey packages related to LibreOffice, I 
have received a CVE warning from a security analyst saying that the 
LibreOffice 7.0 branch is still vulnerable to CVE-2021-25631.


The 7.0.5 version seems not to be fixing the issue. He recommends me to 
tweak the Chocolatey libreoffice-still package and upgrade all the users 
to the 7.1 branch.


Do you have a link to the fix being backported to the 7.0 branch so I 
can prove it wrong, or do you know whether a 7.0.6 version will be out 
to correct the issue?



--
William Gathoye
Hypertive volunteer for LibreOffice
Proud member of The Document Foundation
CM of LaMouette - French based association promoting ODF and LibreOffice
Consultant Technical Marketer at Collabora
DevOps Engineer at Arawa
Core Committer at Mattermost

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2021-25631

[Caolán McNamara]

tl;dr: Windows users should upgrade to 7.0.5 or 7.1.2

LibreOffice has a feature where hyperlinks in a document can be
activated by CTRL+click. Under Windows the link can be passed to the
system ShellExecute function for handling. LibreOffice contains a
denylist of extensions that it blocks from passing to ShellExecute to
avoid attempting to launch executables.

In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-
0 series in versions prior to 7.0.5, the denylist can be circumvented
by manipulating the link so it doesn't match the denylist but results
in ShellExecute attempting to launch an executable type.

In the fixed versions this circumvention has been blocked.

Thanks to Lukas Euler of Positive Security for discovering and
reporting this issue


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Calc setting on new release

[Robert Peirce]

> On Feb 7, 2021, at 5:30 AM, Mike Saunders 
>  wrote:
> 
> This discuss@documentfoundation.org mailing list is for discussions
> about The Document Foundation, the non-profit entity behind LibreOffice.
> 

Thanks.  I wondered why there seemed to be so little traffic.  I didn’t even 
know it was a mailing list.  I access it via usenet!  It just look like another 
group from my end.
-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Calc setting on new release

[Mike Saunders]

Hi Robert,

On 06.02.21 14:50, Robert Peirce wrote:
>
> I posted about this a while back and then never saw it.  After each new
> release of LibreOffice the spacing on my Calc cells changes slightly.
> Sometimes I have extra space below the bottom cell.  Sometimes less.  In
> the later case, scrolling to that cell causes the sheet to move down a
> line.  I'm wondering if there is some way to prevent this.

This discuss@documentfoundation.org mailing list is for discussions
about The Document Foundation, the non-profit entity behind LibreOffice.
You might get some help here, but it'd better to ask on a list dedicated
to the software itself, or Ask LibreOffice:

https://www.libreoffice.org/get-help/feedback/

When posting a question there, please also provide some details about
your setup (exact LibreOffice and operating system versions, for
instance) so that someone can help you.

Cheers,
Mike

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Calc setting on new release

[Robert Peirce]

I posted about this a while back and then never saw it.  After each new 
release of LibreOffice the spacing on my Calc cells changes slightly. 
Sometimes I have extra space below the bottom cell.  Sometimes less.  In 
the later case, scrolling to that cell causes the sheet to move down a 
line.  I'm wondering if there is some way to prevent this.



--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Updates and spreadsheets

[Steve Edmonds]

Hi.
I have had this also, and in writer and tables.
The changes are small but can add up with long documents.
I don't know the cause, if it is a slight change in kerning, or the 
rendering of the type or the base style changes slightly.

Sometimes I can adjust the style slightly to compensate.
Steve

On 04/01/2021 22:20, sophi wrote:

Hi Robert,
Le 02/01/2021 à 15:05, Robert Peirce a écrit :

Does this happen to anybody else?  A new version of LibreOffice messes
up the formatting in my spreadsheets.

I have them arranged with cell height set so a complete number of full
cells is on the sheet.  Most upgrades shift this a bit.  Sometimes it
contracts a bit, which is not a big problem.  Sometimes it expands so
going to the bottom cell in the sheet causes the next row to appear.

So far I have just re-adjusted everything but I wonder if there is a
better solution.  I don't think this should happen but I don't know what
to do about it.

Sorry that you meet a problem with your spreadsheets. You should post
your request on the QA list to sort out if this is a bug or maybe a
reset of your profile is needed. The discuss list is dedicated to
discussions among members.

Cheers
Sophie




--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Behavior of shape, when switching spreadsheet to right-to-left

[Regina Henschel]

Hi all,

this is a question for those, who use Calc with RTL (right-to-left) sheets.

If someone has entered a shape into a left-to-right sheet, and then 
decides to switch to right-to-left (that is in menu Sheet), should the 
geometry of the shape be mirrored?
Example: I insert an arrow, which points to right in a left-to-right 
sheet. Then I switch the sheet to right-to-left. Should the arrow now 
point to left?


Currently the behavior depends on whether the shape is anchored to page 
or to cell. If the arrow is anchored to cell, it keeps it geometry and 
still points right. If the arrow is anchored to page, then it will point 
left after switching to RTL.


I consider it a bug, that the behavior depends on anchor, and would fix 
it. But what is the desired behavior?


Kind regards
Regina

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Updates and spreadsheets

[sophi]

Hi Robert,
Le 02/01/2021 à 15:05, Robert Peirce a écrit :
> Does this happen to anybody else?  A new version of LibreOffice messes
> up the formatting in my spreadsheets.
> 
> I have them arranged with cell height set so a complete number of full
> cells is on the sheet.  Most upgrades shift this a bit.  Sometimes it
> contracts a bit, which is not a big problem.  Sometimes it expands so
> going to the bottom cell in the sheet causes the next row to appear.
> 
> So far I have just re-adjusted everything but I wonder if there is a
> better solution.  I don't think this should happen but I don't know what
> to do about it.

Sorry that you meet a problem with your spreadsheets. You should post
your request on the QA list to sort out if this is a bug or maybe a
reset of your profile is needed. The discuss list is dedicated to
discussions among members.

Cheers
Sophie

-- 
Sophie Gautier so...@libreoffice.org
GSM: +33683901545
IRC: sophi
Foundation coordinator
The Document Foundation

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Updates and spreadsheets

[Robert Peirce]

Does this happen to anybody else?  A new version of LibreOffice messes 
up the formatting in my spreadsheets.


I have them arranged with cell height set so a complete number of full 
cells is on the sheet.  Most upgrades shift this a bit.  Sometimes it 
contracts a bit, which is not a big problem.  Sometimes it expands so 
going to the bottom cell in the sheet causes the next row to appear.


So far I have just re-adjusted everything but I wonder if there is a 
better solution.  I don't think this should happen but I don't know what 
to do about it.



--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] 2 suggestions for new features of LibreOffice Draw

[Mike Saunders]

Hi Jakob,

Thanks for your email and feedback! Please note that this tdf-tiscuss@
list is for discussions about The Document Foundation, the non-profit
entity behind LibreOffice. The software itself is developed by a
worldwide community, so if you want to propose new features to them, you
can submit an enhancement request here:

https://bugs.documentfoundation.org

Of course, that doesn't guarantee that the features will be added. The
best way to get new features is to get involved and help the community
to implement them:

https://www.libreoffice.org/community/get-involved/

Or fund a developer to work on them:

https://www.documentfoundation.org/gethelp/developers/

In that way, you get the new features you want, developers can put food
on the table, and LibreOffice keeps getting better for everyone!

Dein Deutsch ist übrigens ganz in Ordnung :-) Mehr darüber auf Deutsch
findet man hier:

https://de.libreoffice.org/discover/frequently-asked-questions/#Antwort_Fehlende_Funktion

Cheers,
Mike



On 10/11/2020 14:23, Jakob Krueger wrote:
> Dear LibreOffice-Community and developer, The last few days I worked
> with LibreOffice Draw and I have thought of two new features, that would
> make the work with Draw easier. When you put a picture in the background
> it was helpful to be able to turn it around if it is upside-down. I
> would suppose the following classification: right-click on the
> background-picture and choose properties(page
> setup)/background/picture/options Besides that, I would like to ask you
> to make it possible to keep the aspect ratio of a background-picture
> just like with "normal" pictures and graphics. This was very useful when
> working with pictures or graphics, which don't have the same aspect
> ratio as the page/slide. I would classify this setting here: right-click
> on the background-picture and choose properties(page
> setup)/background/picture/options. Best greetings from Germany Jakob
> Krueger PS: I'm sorry for my English - it's horrible and I hope, you
> understand it anyway.
> 

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] 2 suggestions for new features of LibreOffice Draw

[Jakob Krueger]

Dear LibreOffice-Community and developer, The last few days I worked
with LibreOffice Draw and I have thought of two new features, that would
make the work with Draw easier. When you put a picture in the background
it was helpful to be able to turn it around if it is upside-down. I
would suppose the following classification: right-click on the
background-picture and choose properties(page
setup)/background/picture/options Besides that, I would like to ask you
to make it possible to keep the aspect ratio of a background-picture
just like with "normal" pictures and graphics. This was very useful when
working with pictures or graphics, which don't have the same aspect
ratio as the page/slide. I would classify this setting here: right-click
on the background-picture and choose properties(page
setup)/background/picture/options. Best greetings from Germany Jakob
Krueger PS: I'm sorry for my English - it's horrible and I hope, you
understand it anyway.

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2020-12802, CVE-2020-12803

[Caolán McNamara]

CVE-2020-12802 remote graphics contained in docx format retrieved in
'stealth mode'

If you are using the (off by default) setting to only allow documents
in "trusted location" to download remote resources then 6.4.4 fixes a
case in the .docx import path where that protection didn't apply.

CVE-2020-12803 XForms submissions could overwrite local files

ODF documents can contain forms similar to HTML forms where a user
typically clicks on a submit button to submit the data to a web server.
Prior to 6.4.4 the destination could be a local file, raising the
possibility that a malicious document could be constructed to maximize
the likelihood that the user could inadvertently overwrite a local
file. In 6.4.4 this feature is limited to http[s] URLs.


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] hola

[Mike Saunders]

Hello,

This mailing list is in English, and for discussions about The Document
Foundation, the non-profit entity behind LibreOffice. We do not offer
any technical support here. For all help in Spanish, please see:

https://ask.libreoffice.org/es/questions/

Regagrds,
Mike


On 25/05/2020 12:24, Romeo Septimiu wrote:
> Hola me llamo Romeo podriais decirme como hacer que los datos de un
> formulario de html con un editor de codigo se guarden en una base de datos
> de libreoffice

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] hola

[Romeo Septimiu]

Hola me llamo Romeo podriais decirme como hacer que los datos de un
formulario de html con un editor de codigo se guarden en una base de datos
de libreoffice.Muchas gracias

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2020-12801

[Caolán McNamara]

CVE-2020-12801 Crash-recovered MSOffice encrypted documents defaulted
to not to using encryption on next save

If LibreOffice has an encrypted document open and crashes, that
document is auto-saved encrypted. On restart, LibreOffice offers to
restore the document and prompts for the password to decrypt it. If the
recovery is successful, and if the file format of the recovered
document was not LibreOffice's default ODF file format, then affected
versions of LibreOffice default that subsequent saves of the document
are unencrypted.
 
This may lead to a user accidentally saving a MSOffice file format
document unencrypted while believing it to be encrypted.

This is fixed, in the 6-3 series with 6.3.6 and in the 6-4 series with
6.4.3


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Libreoffice Errors on Accessing Help

[Marc Paré]

Le 20-05-13 à 05 h 59, Peter Hillier-Brook a écrit :
> On 12/05/2020 19:30, RobertX wrote:
>> I am using Libreoffice 6.4.3.2, and the Linux Mint 19.3 operating system.
>>
>> Lately, when I open the help file for Libreoffice, any program in the
>> bundle, it tells me that I do not have permissions. Such error looks like
>> this:
>>
>> 
>>  
>>
>> Is this a bug that's inherent to Libreoffice 6.4.3.2? If so, please tell me
>> and I will file an error report.
> No, it's not. I have no problems here with 6.4.3.2 on Debian 10. However
> I did install from the original, not a distro-built version, so maybe
> there's a hint?
>
I also do not have any issues with the help file on my Mageia v.7.1
Linux distro, but I also installed the RPM version from the website,
LibreOffice v.6.4.3.2.

Marc

-- 
Marc Paré
m...@marcpare.com
https://www.parEntreprise.com
parEntreprise.com Supports OpenDocument Formats (ODF)
parEntreprise.com Supports http://www.LibreOffice.org


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: Impress & ODF ecosystem ideas (was: some ideas for public agenda for TDF board meeting on Friday, May 8th at 1300 Berlin time)

[Edmund Laugasson]

Hi,

> Edmund Laugasson wrote:
>> Hereby are my proposals to consider:
>>
>>   o *topic:  zooming feature in presentation* - e.g. famous
>> proprietary Prezi  and its FLOSS counterpart
>> Sozi  (together with Inkscape
>> ) but today also MS PowerPoint have
>>  these zooming
>> presentation features. *Would kindly ask TDF Board help to
>> engage developers to implement these zooming features seen in
>> Sozi, Prezi, MS PowerPoint also into LibreOffice Impress and
>> improve also ODF accordingly.* *
>>
> Would love to see that! That said, TDF as a charity cannot easily
> develop software, so it's more the 'try and motivate volunteers to
> help improving Impress' angle that might be successful here.
>
> Two suggestions to push this further:
>  - cut this down into more bite-sized pieces (which is more manageable
>and rewarding for volunteers)

Well - zooming presentation is the feature. How to cut this into pieces?
Possibly look what MS PowerPoint and Prezi allow to do. Certainly there
are details, different options - I guess we would like to do all this
and probably even more that those programs do not allow in order to more
engage users to use LibreOffice. Well - don't have MS PowerPoint (only
free account in MS OneDrive and there is web-based MS PowerPoint) - only
that referred video https://www.youtube.com/watch?v=2-E2o0H6_pg
(certainly from video portals can be searched more) and Prezi is usable
for everyone via web.

I guess it requires programmatical point of view to understand, what is
the chunk size suitable for developers. Probably one function per chunk,
e.g. scroll mouse up: one; scroll mouse down: second; etc.

Basically I see that I (probably are more interested users) need to
describe all functionality that MS PowerPoint and Prezi have related
with zooming presentation feature and every action that can be done is
one chunk suitable for developers.

>  - engage with the UX & design project to come up with ideas how to
>best integrate that with the existing GUI (their list ist
>des...@global.libreoffice.org)

Well - probably on way is to look how existing apps mentioned above have
done by integrating zooming presentation feature.

Haven't participated yet - don't know that community, hopefully can find
right words to engage.

> After that, e.g. adding a more fully fleshed-out proposal to the GSoC
> ideas list might find a motivated student next year
> (https://wiki.documentfoundation.org/Development/GSoC/Ideas).

That, I guess, needs to be polished already by developers, designers.

>   o *topic: zooming feature (and much more) in spreadsheet* -
> referring to TreeSheets  and its
> tutorial  and
> intro video .
> *Would kindly ask TDF Board help to engage developers to
> implement these features seen in TreeSheets also into
> LibreOffice Calc and improve also ODF **accordingly*.
>
> Same answer probably as above - just in this case, it feels a bit like
> a fringe feature, where perhaps people who _want_ to use it, could use
> the original (which is Free Software just as well)?

Well - TreeSheets (the original) is developed quite slowly, has unique
file format that is not usable in smart devices and still lacks some
features and has some disturbing issues. We can then say that why
zooming presentation while we have Sozi as free software? Somehow MS
PowerPoint decided also duplicate even proprietary Prezi has all it. I
just thought that LibreOffice developer community is more vibrant and
creative - therefore there is more probable to move on faster and
through it make LibreOffice more functional than ever before - this
applies in both zooming presentation and spreadsheets. Shall LibreOffice
have zooming presentation because MS PowerPoint has it? Probably. But
zooming spreadsheet is definitely something that MS Excel doesn't have
but even that could change in future as current mailing list archive
could be read also by Microsoft people...

>>  o **much better SVG
>>  support
>> (edit, save, open) in LibreOffice** - if not yet then would
>> propose to replace all graphics in LibreOffice with SVG
>>  images
>> (menus, clipart, etc). Also allow edit SVG
>>  and
>> save/open into/from that file format in LibreOffice. E.g. allow
>> save (initially also e.g. export) Writer, Draw, Impress
>> (possibly also others) documents into SVG and later also open,
>> edit seamlessly. As SVG
>> 

[tdf-discuss] Impress & ODF ecosystem ideas (was: some ideas for public agenda for TDF board meeting on Friday, May 8th at 1300 Berlin time)

[Thorsten Behrens]

Hi Edmund,

as discussed on the members list, let's continue in public - some
feedback below:

Edmund Laugasson wrote:
> Hereby are my proposals to consider:
> 
>   o *topic:  zooming feature in presentation* - e.g. famous
> proprietary Prezi  and its FLOSS counterpart
> Sozi  (together with Inkscape
> ) but today also MS PowerPoint have
>  these zooming
> presentation features. *Would kindly ask TDF Board help to
> engage developers to implement these zooming features seen in
> Sozi, Prezi, MS PowerPoint also into LibreOffice Impress and
> improve also ODF accordingly.* *
>
Would love to see that! That said, TDF as a charity cannot easily
develop software, so it's more the 'try and motivate volunteers to
help improving Impress' angle that might be successful here.

Two suggestions to push this further:
 - cut this down into more bite-sized pieces (which is more manageable
   and rewarding for volunteers)
 - engage with the UX & design project to come up with ideas how to
   best integrate that with the existing GUI (their list ist
   des...@global.libreoffice.org)

After that, e.g. adding a more fully fleshed-out proposal to the GSoC
ideas list might find a motivated student next year
(https://wiki.documentfoundation.org/Development/GSoC/Ideas).

>   o *topic: zooming feature (and much more) in spreadsheet* -
> referring to TreeSheets  and its
> tutorial  and
> intro video .
> *Would kindly ask TDF Board help to engage developers to
> implement these features seen in TreeSheets also into
> LibreOffice Calc and improve also ODF **accordingly*.
>
Same answer probably as above - just in this case, it feels a bit like
a fringe feature, where perhaps people who _want_ to use it, could use
the original (which is Free Software just as well)?

>   o **much better SVG
>  support
> (edit, save, open) in LibreOffice** - if not yet then would
> propose to replace all graphics in LibreOffice with SVG
>  images
> (menus, clipart, etc). Also allow edit SVG
>  and
> save/open into/from that file format in LibreOffice. E.g. allow
> save (initially also e.g. export) Writer, Draw, Impress
> (possibly also others) documents into SVG and later also open,
> edit seamlessly. As SVG
>  is also
> XML-based and FLOSS format then hopefully it is easy to add.
> Especially in the lights of upcoming SVG2 standard
> .
>
SVG support could certainly be even better in LibreOffice, I
agree. But there's a great FLOSS program for svg editing, Inkscape -
so I wonder, how much of that would make sense to duplicate?

There's also some subtle differences in ODF vs. SVG, that make it hard
to convert one into the other without data loss.

As such, beyond bugfixing & generally improving our filters (which is
kind of ongoing anyway), I also personally think this is less
important - since the FLOSS universe already has Inkscape for that
(and they're alive and kicking, just recently published their v1.0).

>   * *ODP export script for Sozi* - here is the recent developer post
> 
> where is asked easy-to-use node.js module for Sozi to allow easily
> export SVG presentation into OpenDocument Presentation. There
> already is similar node.js module for proprietary PPTX export.
> *Would kindly ask TDF Board help to engage developers to create such
> ODP-module**for Sozi*.
> 
Read the github issue, interesting conversation - my take from that
is, that perhaps better, overall ODF library support would be great to
have!

Historically, ODF had excellent library support for Java (that work
was funded by Sun, then later by IBM), and also for Perl and Python
(LPoD projecy, funded by the French government).

For newer languages like nodejs, ODF support is indeed somewhat patchy
- but there's projects like https://www.npmjs.com/package/simple-odf
or https://www.npmjs.com/package/odt where at least ODT support seems
present (simple presentations shouldn't be too hard to add I guess).

Extending language support there would clearly help with ODF adoption;
but again the same comment applies as for the first proposal - hard
for TDF to fund pure software development, initial step should be we
try & motivate volunteers (or find a student and a mentor for a 

[tdf-discuss] Libreoffice Errors on Accessing Help

[RobertX]

I am using Libreoffice 6.4.3.2, and the Linux Mint 19.3 operating system.

Lately, when I open the help file for Libreoffice, any program in the
bundle, it tells me that I do not have permissions. Such error looks like
this:


 

Is this a bug that's inherent to Libreoffice 6.4.3.2? If so, please tell me
and I will file an error report.

Thank you.



--
Sent from: 
http://document-foundation-mail-archive.969070.n3.nabble.com/Discuss-f1621725.html

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Libreoffice Errors on Accessing Help

[Peter Hillier-Brook]

On 12/05/2020 19:30, RobertX wrote:
> I am using Libreoffice 6.4.3.2, and the Linux Mint 19.3 operating system.
> 
> Lately, when I open the help file for Libreoffice, any program in the
> bundle, it tells me that I do not have permissions. Such error looks like
> this:
> 
> 
>  
> 
> Is this a bug that's inherent to Libreoffice 6.4.3.2? If so, please tell me
> and I will file an error report.

No, it's not. I have no problems here with 6.4.3.2 on Debian 10. However
I did install from the original, not a distro-built version, so maybe
there's a hint?

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] epic idea: SVG

[Thorsten Behrens]

Hi Edmund,

thx for sharing your ideas; some very interesting pointers in this
thread -

Edmund Laugasson wrote:
> At least SVG export seems to be missing for now, only PNG. Certainly PNG
> should remain but SVG should come.
> 
Impress has quite good SVG animation support since GSoC 2013, when
Marco Cecchetti gave the export filter some power-up.

It's even used in LibreOffice Online, to run the slideshow.

Cheers,

-- Thorsten

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: zooming feature in presentation

[Edmund Laugasson]

... continues ...

> But still - why LibreOffice Impress could not support as competitors
> already support?
Such zooming presentation feature could lift Impress onto
whole new level as nowadays big data practically requires. Also focusing
only to important part of presentation - well explained in videos
referred below. As Sozi is free and open-source software - it would be
possible to investigate its approach. It is known that it is based on
SVG (https://en.wikipedia.org/wiki/Scalable_Vector_Graphics). Hereby
also I propose to build whole graphics stack in LibreOffice solely onto
SVG. Also Inkscape is free and open-source software and possible to look
what and how they do.

References

  * Sozi tutorials
https://www.youtube.com/playlist?list=PLqazFFzUAPc4SvD1iLDgsnd5XaVuPI1N5
  * Sozi documentation with examples
https://sozi.baierouge.fr/pages/30-documentation.html
  * Sozi examples separately https://senshu.github.io/Sozi-demos/


Thank you,
Edmund Laugasson


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: zooming feature (and much more) in spreadsheet

[Edmund Laugasson]

... continues
> What do you think - is it feasible in LibreOffice Calc?
Even more - also at least an import feature from .cts file format that
TreeSheets is using. Certainly also export feature to .cts format would
be appreciated. It is free and open-source software - all necessary data
to create import-export filter should be accessible. Also the main
developer Wouter van Oortmerssen  is very
responsive - usually on same day will respond.
---
Thank you,
Edmund Laugasson

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] zooming feature (and much more) in spreadsheet

[Edmund Laugasson]

Dear all,

As there will be Adobe Flash abandoned in LibreOffice 7.x then here is
the proposal to implement Treesheets (free and open-source app) features
in LibreOffice Calc, -especially zooming feature (CTRL+mouse scroll),
writing between cells, wrapping cells (F9), inserting new cell into cell
(Insert, CTRL+Enter), nice formatting features, etc (see references
below). There are very nice and powerful features available in
TreeSheets that are missing in LibreOffice Calc but could lift Calc onto
whole new level as nowadays big data practically requires. Also focusing
only to important part of table - well explained in video referred below.

References:

  * main page http://strlen.com/treesheets/
  * tutorial http://strlen.com/treesheets/docs/tutorial.html
  * when opening the app, there will be opened written tutorial with
main features + in app folder there are more tutorials included
(./TS/examples/ folder) that are not covered in manual or video -
worth to look
  * intro video https://www.youtube.com/watch?v=UB-saQZfrsw
  * repository https://github.com/aardappel/treesheets


What do you think - is it feasible in LibreOffice Calc? Certainly it
won't happen overnight and probably not in 7.0 but still these features
are very powerful.

Once (already couple of years ago) I tried to file a feature request in
TDF Bugzilla but then got warning that I need to file a feature request
per feature separately and I just did not have enough time to do that. I
wanted to do a metaentry in Bugzilla and bind all other ideas together
but didn't know how to do that (haven't time to investigate and probably
also not enough rights). Creating bunch of new feature requests was too
overwhelming for me at that time.
---
Thank you,
Edmund Laugasson

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] epic idea: SVG

[Edmund Laugasson]

Dear all,

Got inspired from the conference video below here is the epic idea: what
about using SVG as new default format in LibreOffice? It might be not
feasible but who knows - just propose. SVG is itself XML-based already,
supports also well layers. SVG seems to be support embedding also audio,
video (at least Sozi has plugin for that, see also
https://www.w3.org/Graphics/SVG/About.html and main page
https://www.w3.org/Graphics/SVG/). I am not familiar with SVG so deeply
but just propose an idea. It might not feasible in all aspects (e.g.
databases in Base, spreadsheets in Calc) but at least some (e.g.
presentations in Impress, text documents in Writer, especially drawings
in Draw) - at least as an export option. But nowadays are very
impressive ideas based on SVG - some also talked in that conference
video in below. SVG could be more easily compatible also in web browsers
and not to mention that directly usable in Sozi to quickly create
impressive presentations (especially powerful when using layers). When
such zooming presentation features come to Impress, it would be possibly
easier to achieve it based on SVG. Certainly I do not underestimate ODF
family.

At least SVG export seems to be missing for now, only PNG. Certainly PNG
should remain but SVG should come.

/Interactive web animation with SVG (DevFest 2019)//
//https://www.youtube.com/watch?v=ZKrjsux7C38/

Thank you,
Edmund Laugasson

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] zooming feature in presentation

[Edmund Laugasson]

Dear all,

Does anybody have any information about potential zooming feature
arriving into LibreOffice Impress? It is currently available in
well-known Prezi (https://prezi.com/) and now also in MS PowerPoint
(https://www.youtube.com/watch?v=2-E2o0H6_pg). Certainly there is also
free and open-source software available for prezi-like presentation:
Inkscape (https://inkscape.org/) + Sozi (https://sozi.baierouge.fr/).
But still - why LibreOffice Impress could not support as competitors
already support?

As there will be Adobe Flash abandoned in LibreOffice 7.x then here is
the proposal to adopt prezi/sozi-like presentation style also in
LibreOffice Impress. As far as I read from
https://wiki.documentfoundation.org/ReleaseNotes/7.0 I do not see such
feature planned.

What you think? Is it worth to add such feature to LibreOffice Impress?

Thank you,
Edmund Laugasson

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Change email address

[Dave Barton]

Thanks Mike,
I expected that there would be a facility where I could log-in with
single sign on to make the change myself, but I am happy to pester the
infra guys :)

Dave

 Original Message 
From: Mike Saunders [mailto:mike.saund...@documentfoundation.org]
Sent: Thursday, March 26, 2020, 14:53 UTC
To: Dave Barton; discuss@documentfoundation.org
Subject: [tdf-discuss] Change email address

> Hi Dave,
> 
> Try emailing hostmas...@documentfoundation.org -- that gets through to
> the infra team.
> 
> Mike
> 
> 
> 
> On 26/03/2020 15:33, Dave Barton wrote:
>>
>>
>> I need to change the th email
>> address associated with my @libreoffice.org email account.
>>
>>
>> Would someone please point me to the
>> information about how to do this.
>>
>>
>> ThanksDave
>>
>>
>>
>>
> 


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Change email address

[Dave Barton]

I need to change the th email
address associated with my @libreoffice.org email account.


Would someone please point me to the
information about how to do this.


ThanksDave




-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information: CVE-2019-9853

[Caolán McNamara]

tl;dr: Ensure you are upgraded to at least 6.2.7 and 6.3.1



CVE-2019-9853: Insufficient URL decoding flaw in categorizing macro
location

LibreOffice documents can contain macros. The execution of those macros
is controlled by the document security settings, typically execution of
macros are blocked by default.

A URL decoding flaw existed in how the urls to the macros within the
document were processed and categorized, resulting in the possibility
to construct a document where macro execution bypassed the security
settings.

The documents were correctly detected as containing macros, and
prompted the user to their existence within the documents, but macros
within the document were subsequently not controlled by the security
settings allowing arbitrary macro execution

This issue affects:
LibreOffice 6.2 series versions prior to 6.2.6;
LibreOffice 6.3 series versions prior to 6.3.1.

Because CVE-2019-9854 and CVE-2019-9855 exist in 6.2.6, 6-2 series
users are recommended to upgrade to 6.2.7

Thanks to Nils Emmerich of ERNW Research GmbH for discovering and
reporting this issue.


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2019-9854, CVE-2019-9855

[Caolán McNamara]

td;dr: Upgrade to 6.2.7 or 6.3.1

CVE-2019-9854 Unsafe URL assembly flaw in allowed script location check

Protection was added to address CVE-2019-9852, to avoid a directory
traversal attack where scripts in arbitrary locations on the file
system could be executed by employing a URL encoding attack to defeat
the path verification step.

However this protection could be bypassed by taking advantage of a flaw
in how LibreOffice assembled the final script URL location directly
from components of the passed in path as opposed to solely from the
sanitized output of the path verification step.

This flaw is fixed in 6.2.7 and 6.3.1

https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9854

---

CVE-2019-9855 Windows 8.3 path equivalence handling flaw allows
LibreLogo script execution

When the execution of LibreLogo from scripts was blocked we didn't take
into account that, under Windows, file names longer than eight
characters can be addressed via a compatibility 8.3 filename which
wasn't blocked.

Such paths are now rejected in 6.2.7 and 6.3.1

https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9855

---

Another change in 6.2.7 and 6.3.1 is that now documents that contain a
call to a script are treated similarly to those that contain macros.

So documents that call a built in shared script in some way will
present the same warning dialog as documents that contain macros.

Shared built-in scripts are demoted from their trusted position and
their execution is controlled under the standard macro execution rules.


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Impress Remote App

[Marc Paré]

Has anyone used Impress Remote App with the latest LibreOffice
v.6.3.0.4? It does not seem to work for me and I had hoped to use it for
a presentation yesterday, but it could not connect via Bluetooth.

My cellphone and laptop were able to connect via Bluetooth to each other.

Marc

Mageia Linux v.7.1; LibreOffice v.6.3.0.4 (Flatpak version)

-- 
Marc Paré
m...@marcpare.com
https://www.parEntreprise.com
parEntreprise.com Supports OpenDocument Formats (ODF)
parEntreprise.com Supports http://www.LibreOffice.org



-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] security related information, CVE-2019-9850, CVE-2019-9851, CVE-2019-9852

[Caolán McNamara]

On Thu, 2019-08-15 at 21:28 +0200, Jean-Baptiste Faure wrote:
> Le 15/08/2019 à 12:52, Caolán McNamara a écrit :
> > tl;dr; Upgrade to >= 6.2.6 or >= 6.0.0.
> 
> I guess you mean ... or >= 6.3.0

Yes, indeed, oops, 6.3.0. Advisory texts are correct, email here was
not.


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] security related information, CVE-2019-9850, CVE-2019-9851, CVE-2019-9852

[Steve Edmonds]

Had me confused.


https://www.libreoffice.org/about-us/security/advisories/


Addressed in LibreOffice 6.2.6/6.3.0


CVE-2019-9850

Insufficient url validation allowing LibreLogo script execution

CVE-2019-9851

LibreLogo global-event script execution

CVE-2019-9852

Insufficient URL encoding flaw in allowed script location check



On 15/08/2019 22:52, Caolán McNamara wrote:
> tl;dr; Upgrade to >= 6.2.6 or >= 6.0.0.
>
> There is a cluster of issues here.
>
> 
>
> CVE-2019-9850 Insufficient url validation allowing LibreLogo script
> execution
>
> There was a way to encode the script url that could bypass the fix of
> CVE-2019-9848
> https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9850
>
> 
>
> CVE-2019-9851 LibreLogo global-event script execution
>
> The fix of CVE-2019-9848 blocked execution of LibreLogo from document
> script events, e.g. mouse-over, but there is another separate feature
> of global script events, e.g. document-open which are also affected
> https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9851
>
> 
>
> CVE-2019-9852 Insufficient URL encoding flaw in allowed script location
> check
>
> There was a way to encode the script url to bypasses the fix of CVE-
> 2018-16858 to again allow scripts in arbitrary locations on the file
> system to be executed 
>
> https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9852
>
>


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2019-9850, CVE-2019-9851, CVE-2019-9852

[Caolán McNamara]

tl;dr; Upgrade to >= 6.2.6 or >= 6.0.0.

There is a cluster of issues here.



CVE-2019-9850 Insufficient url validation allowing LibreLogo script
execution

There was a way to encode the script url that could bypass the fix of
CVE-2019-9848
https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9850



CVE-2019-9851 LibreLogo global-event script execution

The fix of CVE-2019-9848 blocked execution of LibreLogo from document
script events, e.g. mouse-over, but there is another separate feature
of global script events, e.g. document-open which are also affected
https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9851



CVE-2019-9852 Insufficient URL encoding flaw in allowed script location
check

There was a way to encode the script url to bypasses the fix of CVE-
2018-16858 to again allow scripts in arbitrary locations on the file
system to be executed 

https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9852


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Re: security related information, CVE-2019-9848, CVE-2019-9849

[Caolán McNamara]

On Fri, 2019-08-09 at 21:38 -0700, Derek Currie wrote:
> A further patch was supposed to be applied in version
> 6.3.4 this week.
> And yet there is no record in the release notes of that patch.
> Instead, there is an incorrect listing that CVE-2019-9848 was patched
> in v6.2.5.2, which has been published to not be the case.

It is not incorrect to state that CVE-2019-9848 was patched in 6.2.5.2,
but it is fair to state that it turns out the solution is not totally
sufficient and there is an additional problem with the solution.

A new advisory will be issued with a new CVE number for the follow-up
issue when the solution is ready. We're working on making it available.


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Re: security related information, CVE-2019-9848, CVE-2019-9849

[Charles-H. Schulz]

Hello Derek,

Le 10 août 2019 06:38:34 GMT+02:00, Derek Currie  a écrit :
>I've been following this situation closely and advising users about the
>workaround for *CVE-2019-9848*.
>
>*Problem:* The Document Foundation has stated that the patch for
>CVE-2019-9848 was not entirely effective. I can provide documentation.
>A
>further patch was supposed to be applied in version 6.3.4 this week.
>And yet
>there is no record in the release notes of that patch. Instead, there
>is an
>incorrect listing that CVE-2019-9848 was patched in v6.2.5.2, which has
>been
>published to not be the case.


So both MITRE and the Document Foundation are wrong according to you?

Also, 6.3.0/was just released, not 6.3.4, and in my understanding has also the 
proper patch(es). This is of course a rather dynamic situation that our 
security team is actively working on.

>
>https://www.libreoffice.org/about-us/security/advisories/cve-2019-9848/
>
> 
>
>This situation is thoroughly confusing users.
>

I am not sure it is...

>I'm continuing to advise users to apply the workaround for
>CVE-2019-9848.


What workaround? Are you in charge of users in a professional environment?

Thanks,

Charles.

>
>Please sort this out ASAP.
>
>Thank you.
>
>Derek Currie
>
>
>
>--
>Sent from:
>http://document-foundation-mail-archive.969070.n3.nabble.com/Discuss-f1621725.html

-- 
Envoyé de mon appareil Android avec Courriel K-9 Mail. Veuillez excuser ma 
brièveté.

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] Re: security related information, CVE-2019-9848, CVE-2019-9849

[Derek Currie]

I've been following this situation closely and advising users about the
workaround for *CVE-2019-9848*.

*Problem:* The Document Foundation has stated that the patch for
CVE-2019-9848 was not entirely effective. I can provide documentation. A
further patch was supposed to be applied in version 6.3.4 this week. And yet
there is no record in the release notes of that patch. Instead, there is an
incorrect listing that CVE-2019-9848 was patched in v6.2.5.2, which has been
published to not be the case.

https://www.libreoffice.org/about-us/security/advisories/cve-2019-9848/
  

This situation is thoroughly confusing users.

I'm continuing to advise users to apply the workaround for CVE-2019-9848.

Please sort this out ASAP.

Thank you.

Derek Currie



--
Sent from: 
http://document-foundation-mail-archive.969070.n3.nabble.com/Discuss-f1621725.html

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2019-9848, CVE-2019-9849

[Caolán McNamara]

tl;dr: Upgrade to 6.2.5

CVE-2019-9848: LibreLogo arbitrary script execution

Prior to 6.2.5 it is possible to construct malicious documents which
can execute arbitrary python silently if the LibreLogo script is
installed. LibreLogo is installed by default in the binary builds of
LibreOffice provided by The Document Foundation.

https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9848


CVE-2019-9849 remote bullet graphics retrieved in 'stealth mode'

LibreOffice has a 'stealth mode' in which only documents from locations
deemed 'trusted' are allowed to retrieve remote resources. This mode is
not the default mode, but can be enabled by users who want to disable
LibreOffice's ability to include remote resources within a document. A
flaw existed where bullet graphics were omitted from this protection
prior to version 6.2.5. Users of this feature should upgrade to 6.2.5

https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9849


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] CVE-2019-9847

[Caolán McNamara]

tl;dr: Upgrade to 6.1.6 or 6.2.3

CVE-2019-9847 Executable hyperlink targets executed unconditionally on
activation

Before 6.1.6/6.2.3 under Windows and macOS when processing a hyperlink
target explicitly activated by the user, as in you explicitly click on
a hyperlink in some LibreOffice application, there was no judgment made
on whether the target was an executable file, so such executable
targets were launched unconditionally.

In the fixed versions, such executables are not executed on hyperlink
activation.




-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Edmund Laugasson]

...forgot to add...
>> Portable windows version is still maintained by John Haller from
>> portableapps - he made 6.2.2 available to TDF last week and it has
>> since been added to the download pages.
>
> Well - if to compare dates of portable and installable versions then
> we see huge delay and some stable versions will not even be released
> as portable.

There is yet another issue - the
https://www.libreoffice.org/download/portable-versions/ website update
is also delayed and there should be checked directly the download folder
instead of website in order to get information of latest version - most
people do not know that and for them there is still no new version.

Would also bring out that portable MS Windows version is an easy and
quick way to introduce/use LibreOffice without installing it and we even
do not have enough permissions for that.
---
Thank you,
Edmund

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Christian Lohmaier]

Hi Edmund, *,

On Mon, Mar 25, 2019 at 10:36 AM Edmund Laugasson
 wrote:
>
> Sounds like MS Windows version of LibreOffice Portable is not maintained
> (or very slowly...)?   […]

Portable windows version is still maintained by John Haller from
portableapps - he made 6.2.2 available to TDF last week and it has
since been added to the download pages.

ciao
Christian

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Charles-H. Schulz]

Hello Andreas,

Andreas Mantke @ 2019-04-06 12:36 CEST:

> Hello,
>
> Am 25.03.19 um 16:28 schrieb Andreas Mantke:
>> Hello,
>>
>> Am 25.03.19 um 14:48 schrieb Italo Vignoli:
>>> When in the past it was suggested by several people to get in touch with
>>> them to explore a closer collaboration, this was always refused because
>>> it would have "offended" John Haller (and they were linked only by the
>>> Italian community).
>>>
>>> So, I do not see why they should link to our infrastructure when they
>>> have been ignored (if not considered as second class citizens because of
>>> their geographical origins). In fact, they are doing a better job than
>> to sum up and make it short and clear:
>>
>> a) the accusation goes into the direction of TDF's board of directors in
>> this case;
>>
>> b) it incorporates the accusation of a discrimination because of
>> someones geological origin (national origin).
>> (https://en.wikipedia.org/wiki/Discrimination)
>>
>> It's surprising to read such text and belief from the main contact
>> person of TDF and staff member for marketing and PR.
>
> seemed the current board has no issue with this statement and
> accusation, because there is no reply from any of its members yet.
>
> If the board accepts the statement, that could have some impact on the
> status of the foundation.

I had not followed this thread actively since its beginning, as I don't have
the use for a portable version of LibreOffice and never really had one in the 
past.

I will say however that you seem to be asking the questions and making the
answers yourself. Your a) does not make sense. Italo is alluding to issues I
myself heard many years ago concerning the different portable LibreOffice
projects, one of them who seemed to have a problem with TDF. I'm not sure
what this meant or what this means today.
But it does not go into the direction of TDF's board, it's a thread on
@discuss. As to your point b): are you even serious?

So there's no accusation coming from anyone but you in this case. I note your 
last
statement however, and I'm a bit concerned about what you meant: how does
this discussion have an impact on the status of the foundation? Why do you
want to involve the board on such matter? What's your turf?


-- 
Charles-H. Schulz Co-founder, The Document Foundation, Kurfürstendamm 188, 
10707 Berlin Gemeinnützige rechtsfähige Stiftung des bürgerlichen Rechts Legal 
details: http://www.documentfoundation.org/imprint Mobile Number: +33 (0)6 98 
65 54 24.

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Andreas Mantke]

Hello,

Am 25.03.19 um 16:28 schrieb Andreas Mantke:
> Hello,
>
> Am 25.03.19 um 14:48 schrieb Italo Vignoli:
>> When in the past it was suggested by several people to get in touch with
>> them to explore a closer collaboration, this was always refused because
>> it would have "offended" John Haller (and they were linked only by the
>> Italian community).
>>
>> So, I do not see why they should link to our infrastructure when they
>> have been ignored (if not considered as second class citizens because of
>> their geographical origins). In fact, they are doing a better job than
> to sum up and make it short and clear:
>
> a) the accusation goes into the direction of TDF's board of directors in
> this case;
>
> b) it incorporates the accusation of a discrimination because of
> someones geological origin (national origin).
> (https://en.wikipedia.org/wiki/Discrimination)
>
> It's surprising to read such text and belief from the main contact
> person of TDF and staff member for marketing and PR.

seemed the current board has no issue with this statement and
accusation, because there is no reply from any of its members yet.

If the board accepts the statement, that could have some impact on the
status of the foundation.

Kind regards,
Andreas


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Andreas Mantke]

Hello,

Am 25.03.19 um 14:48 schrieb Italo Vignoli:
> When in the past it was suggested by several people to get in touch with
> them to explore a closer collaboration, this was always refused because
> it would have "offended" John Haller (and they were linked only by the
> Italian community).
>
> So, I do not see why they should link to our infrastructure when they
> have been ignored (if not considered as second class citizens because of
> their geographical origins). In fact, they are doing a better job than

to sum up and make it short and clear:

a) the accusation goes into the direction of TDF's board of directors in
this case;

b) it incorporates the accusation of a discrimination because of
someones geological origin (national origin).
(https://en.wikipedia.org/wiki/Discrimination)

It's surprising to read such text and belief from the main contact
person of TDF and staff member for marketing and PR.

Regards,
Andreas



-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Italo Vignoli]

When in the past it was suggested by several people to get in touch with
them to explore a closer collaboration, this was always refused because
it would have "offended" John Haller (and they were linked only by the
Italian community).

So, I do not see why they should link to our infrastructure when they
have been ignored (if not considered as second class citizens because of
their geographical origins). In fact, they are doing a better job than
John Haller, who is clearly not able of keeping up with our release
schedule, and they do this without our help.

I think that people can judge by themselves who is doing a better job of
supporting LibreOffice with the regular availability of the last version
of the software, and download what is more useful for their needs.

On 25/03/2019 14:30, Andreas Mantke wrote:
> Hello,
> 
> I had a further and closer look onto the portableapps website and had to
> amend: both download links go to the TDF infrastructure.
> 
> And the webpage contains a prominent link to the TDF donation page.
> 
> I don't see something similar on the winpenpack website.
> 
> Regards,
> Andreas
> 
> Am 25.03.19 um 12:11 schrieb Andreas Mantke:
>> Hello,
>>
>> instead of the winpenpack project the portableapps project has links to
>> the TDF infrastructure. They have a download link to:
>> http://download.documentfoundation.org/libreoffice/portable/
>>
>> I think the downloads from that URL will be counted in the TDF stats. I
>> don't know, if TDF got also the stats from the other download URL of
>> portableapps. Maybe the TDF admin team could ask John T. Haller about
>> such stats, if they are not already in TDF's hands.
>>
>> And for the question about current versions: it needs always voluteers
>> that do the work and get some positive feedback and support in return.
>>
>> Kind regards,
>> Andreas
>>
>> Am 25.03.19 um 11:21 schrieb Italo Vignoli:
>>> On 25/03/2019 07:08, Edmund Laugasson wrote:
>>>
 What can we do to improve this situation?
>>> There is an alternative developed in Italy:
>>>
>>> http://www.winpenpack.com/en/index.php
>>>
>>> They provide both LibreOffice 6.2.1:
>>>
>>> http://www.winpenpack.com/en/download.php?view.1384
>>>
>>> And LibreOffice 6.1.5:
>>>
>>> http://www.winpenpack.com/en/download.php?view.1354
>>>
>>> They usually release just a few days after TDF.
>>>
>>> They have many positive reviews.
>>>
>>
> 
> 


-- 
Italo Vignoli - Marketing & PR
email italo.vign...@documentfoundation.org
mobile/signal +39.348.5653829 - skype italovignoli
hangout/jabber italo.vign...@gmail.com
The Document Foundation, Kurfürstendamm 188, 10707 Berlin, DE
Gemeinnützige rechtsfähige Stiftung des bürgerlichen Rechts
Legal details: http://www.documentfoundation.org/imprint
GPG Key ID - 0xAAB8D5C0
DB75 1534 3FD0 EA5F 56B5 FDA6 DE82 934C AAB8 D5C0

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Andreas Mantke]

Hello,

I had a further and closer look onto the portableapps website and had to
amend: both download links go to the TDF infrastructure.

And the webpage contains a prominent link to the TDF donation page.

I don't see something similar on the winpenpack website.

Regards,
Andreas

Am 25.03.19 um 12:11 schrieb Andreas Mantke:
> Hello,
>
> instead of the winpenpack project the portableapps project has links to
> the TDF infrastructure. They have a download link to:
> http://download.documentfoundation.org/libreoffice/portable/
>
> I think the downloads from that URL will be counted in the TDF stats. I
> don't know, if TDF got also the stats from the other download URL of
> portableapps. Maybe the TDF admin team could ask John T. Haller about
> such stats, if they are not already in TDF's hands.
>
> And for the question about current versions: it needs always voluteers
> that do the work and get some positive feedback and support in return.
>
> Kind regards,
> Andreas
>
> Am 25.03.19 um 11:21 schrieb Italo Vignoli:
>> On 25/03/2019 07:08, Edmund Laugasson wrote:
>>
>>> What can we do to improve this situation?
>> There is an alternative developed in Italy:
>>
>> http://www.winpenpack.com/en/index.php
>>
>> They provide both LibreOffice 6.2.1:
>>
>> http://www.winpenpack.com/en/download.php?view.1384
>>
>> And LibreOffice 6.1.5:
>>
>> http://www.winpenpack.com/en/download.php?view.1354
>>
>> They usually release just a few days after TDF.
>>
>> They have many positive reviews.
>>
>


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Andreas Mantke]

Hello,

Am 25.03.19 um 13:44 schrieb Andreas Mantke:
> Hello,
>
> and if you look for the source code of their portable LibreOffice
> version (6.2.1), you are directed to
> https://sourceforge.net/projects/winpenpack/files/X-LibreOffice/program_sources/.
> And the latest source code published there is: 5.3.3. And nothing about
> LibreOffice 5.4, 6.0, 6.1 and 6.2.
>
> And if you download the release file in an obscure zip-file-format, you
> are not able with the usual tools to extract it and look into it.

Seemed this is caused by an issue with the download. The 6.1.4 release
could be opened with the usual tools.

Kind regards,

Andreas



-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Andreas Mantke]

Hello,

and if you look for the source code of their portable LibreOffice
version (6.2.1), you are directed to
https://sourceforge.net/projects/winpenpack/files/X-LibreOffice/program_sources/.
And the latest source code published there is: 5.3.3. And nothing about
LibreOffice 5.4, 6.0, 6.1 and 6.2.

And if you download the release file in an obscure zip-file-format, you
are not able with the usual tools to extract it and look into it.
Maybe there is an issue with the license regulations.

Regards,
Andreas

Am 25.03.19 um 12:47 schrieb Italo Vignoli:
> WinPenPack is open source, and - according to many users - is better
> than Portable Apps. It is also maintained by volunteers, who seem to be
> more active and more caring about LibreOffice than John Haller as they
> have not missed a single release since we launched in 2011. I do not
> think that it would be a problem to host it on LibreOffice servers to be
> included in the stats. I would be happy to get in touch with them, and I
> suppose they would be happy to be considered by TDF (something which has
> not happened in the past).
>
> On 25/03/2019 12:11, Andreas Mantke wrote:
>> Hello,
>>
>> instead of the winpenpack project the portableapps project has links to
>> the TDF infrastructure. They have a download link to:
>> http://download.documentfoundation.org/libreoffice/portable/
>>
>> I think the downloads from that URL will be counted in the TDF stats. I
>> don't know, if TDF got also the stats from the other download URL of
>> portableapps. Maybe the TDF admin team could ask John T. Haller about
>> such stats, if they are not already in TDF's hands.
>>
>> And for the question about current versions: it needs always voluteers
>> that do the work and get some positive feedback and support in return.
>>
>> Kind regards,
>> Andreas
>>
>> Am 25.03.19 um 11:21 schrieb Italo Vignoli:
>>> On 25/03/2019 07:08, Edmund Laugasson wrote:
>>>
 What can we do to improve this situation?
>>> There is an alternative developed in Italy:
>>>
>>> http://www.winpenpack.com/en/index.php
>>>
>>> They provide both LibreOffice 6.2.1:
>>>
>>> http://www.winpenpack.com/en/download.php?view.1384
>>>
>>> And LibreOffice 6.1.5:
>>>
>>> http://www.winpenpack.com/en/download.php?view.1354
>>>
>>> They usually release just a few days after TDF.
>>>
>>> They have many positive reviews.
>>>
>>
>


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Italo Vignoli]

WinPenPack is open source, and - according to many users - is better
than Portable Apps. It is also maintained by volunteers, who seem to be
more active and more caring about LibreOffice than John Haller as they
have not missed a single release since we launched in 2011. I do not
think that it would be a problem to host it on LibreOffice servers to be
included in the stats. I would be happy to get in touch with them, and I
suppose they would be happy to be considered by TDF (something which has
not happened in the past).

On 25/03/2019 12:11, Andreas Mantke wrote:
> Hello,
> 
> instead of the winpenpack project the portableapps project has links to
> the TDF infrastructure. They have a download link to:
> http://download.documentfoundation.org/libreoffice/portable/
> 
> I think the downloads from that URL will be counted in the TDF stats. I
> don't know, if TDF got also the stats from the other download URL of
> portableapps. Maybe the TDF admin team could ask John T. Haller about
> such stats, if they are not already in TDF's hands.
> 
> And for the question about current versions: it needs always voluteers
> that do the work and get some positive feedback and support in return.
> 
> Kind regards,
> Andreas
> 
> Am 25.03.19 um 11:21 schrieb Italo Vignoli:
>> On 25/03/2019 07:08, Edmund Laugasson wrote:
>>
>>> What can we do to improve this situation?
>> There is an alternative developed in Italy:
>>
>> http://www.winpenpack.com/en/index.php
>>
>> They provide both LibreOffice 6.2.1:
>>
>> http://www.winpenpack.com/en/download.php?view.1384
>>
>> And LibreOffice 6.1.5:
>>
>> http://www.winpenpack.com/en/download.php?view.1354
>>
>> They usually release just a few days after TDF.
>>
>> They have many positive reviews.
>>
> 
> 


-- 
Italo Vignoli - Marketing & PR
email italo.vign...@documentfoundation.org
mobile/signal +39.348.5653829 - skype italovignoli
hangout/jabber italo.vign...@gmail.com
The Document Foundation, Kurfürstendamm 188, 10707 Berlin, DE
Gemeinnützige rechtsfähige Stiftung des bürgerlichen Rechts
Legal details: http://www.documentfoundation.org/imprint
GPG Key ID - 0xAAB8D5C0
DB75 1534 3FD0 EA5F 56B5 FDA6 DE82 934C AAB8 D5C0

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Andreas Mantke]

Hello,

instead of the winpenpack project the portableapps project has links to
the TDF infrastructure. They have a download link to:
http://download.documentfoundation.org/libreoffice/portable/

I think the downloads from that URL will be counted in the TDF stats. I
don't know, if TDF got also the stats from the other download URL of
portableapps. Maybe the TDF admin team could ask John T. Haller about
such stats, if they are not already in TDF's hands.

And for the question about current versions: it needs always voluteers
that do the work and get some positive feedback and support in return.

Kind regards,
Andreas

Am 25.03.19 um 11:21 schrieb Italo Vignoli:
> On 25/03/2019 07:08, Edmund Laugasson wrote:
>
>> What can we do to improve this situation?
> There is an alternative developed in Italy:
>
> http://www.winpenpack.com/en/index.php
>
> They provide both LibreOffice 6.2.1:
>
> http://www.winpenpack.com/en/download.php?view.1384
>
> And LibreOffice 6.1.5:
>
> http://www.winpenpack.com/en/download.php?view.1354
>
> They usually release just a few days after TDF.
>
> They have many positive reviews.
>


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Italo Vignoli]

On 25/03/2019 07:08, Edmund Laugasson wrote:

> What can we do to improve this situation?

There is an alternative developed in Italy:

http://www.winpenpack.com/en/index.php

They provide both LibreOffice 6.2.1:

http://www.winpenpack.com/en/download.php?view.1384

And LibreOffice 6.1.5:

http://www.winpenpack.com/en/download.php?view.1354

They usually release just a few days after TDF.

They have many positive reviews.

-- 
Italo Vignoli - Marketing & PR
email italo.vign...@documentfoundation.org
mobile/signal +39.348.5653829 - skype italovignoli
hangout/jabber italo.vign...@gmail.com

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Edmund Laugasson]

Dear all,

Sounds like MS Windows version of LibreOffice Portable is not maintained
(or very slowly...)? Currently seems to be 6.1.4 but 6.1.5 is almost 2
months out from 6.1 series and from 6.2 series already second 6.2.2 is
out. In case of Linux AppImage at least during couple of days after
original release comes out next version but not for MS Windows. It's sad
as many of users do not have installation permission under MS Windows
(e.g. computers in companies, lecturers in visiting organizations) and
would like to use the portable version. As we know - the MS Windows is
widely used - so spreading LibreOffice would mean especially spreading
it under MS Windows and especially in the situation where there is no
administrative rights to install software.
What can we do to improve this situation?
---
Kind Regards,
Edmund

15.11.18 22:28 Edmund Laugasson:
> Great, what about 6.1.3? Linux version of portable (AppImage) is
> already out.
> ---
> Edmund
>
> 18.10.18 16:32 Christian Lohmaier:
>> Hi *,
>> On Thu, Oct 18, 2018 at 10:02 AM Florian Effenberger
>>  wrote:
>>> Edmund Laugasson  wrote on Wed, 17 Oct 2018
>>> 18:12:02 +0300:
>>> […]
>>> thanks for pointing out! John from PortableApps has created 6.1.2 and it
>>> will be available on our mirrors soon. :-)
>> And now is :-)
>> Skipping 6.1.1 should have been a one-time thing, I think you can
>> assume to have portable versions for all versions - not having one is
>> exception.
>>
>> ciao
>> Christian
>>
>


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2018-16858

[Caolán McNamara]

CVE-2018-16858: Directory traversal flaw in script execution

tl;dr: Fixed in 6.0.7 and 6.1.3

LibreOffice has a feature where documents can specify that pre-
installed macros can be executed on various document events such as
mouse-over, etc.

Prior to 6.0.7/6.1.3 LibreOffice was vulnerable to a directory
traversal attack where it was possible to craft a document which when
opened by LibreOffice would, when such common document events occur,
execute a python method from a script in any arbitrary file system
location, specified relative to the LibreOffice install location.

Typically LibreOffice is bundled with python, so an attacker has a set
of known scripts at a known relative file system location to work with.

In the 6.1 series, the problem was compounded by an additional feature
which enables specifying in the document arguments to pass to the
python method (Earlier series only allow a method to be called with no
argument). The bundled python happens to include a method which
executes via os.system one of its arguments, providing a simple route
in 6.1 to execute arbitrary commands via such a crafted document.

In the fixed versions, the relative directory flaw is fixed, and access
is restricted to scripts under the share/Scripts/python,
user/Scripts/python sub-directories of the LibreOffice install

Thanks to Alex Inführ for reporting this issue


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Edmund Laugasson]

Great, what about 6.1.3? Linux version of portable (AppImage) is already
out.
---
Edmund

18.10.18 16:32 Christian Lohmaier:
> Hi *,
> On Thu, Oct 18, 2018 at 10:02 AM Florian Effenberger
>  wrote:
>> Edmund Laugasson  wrote on Wed, 17 Oct 2018
>> 18:12:02 +0300:
>> […]
>> thanks for pointing out! John from PortableApps has created 6.1.2 and it
>> will be available on our mirrors soon. :-)
> And now is :-)
> Skipping 6.1.1 should have been a one-time thing, I think you can
> assume to have portable versions for all versions - not having one is
> exception.
>
> ciao
> Christian
>


-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Why a school not migrate to libreoffice

[Jérôme Bardot]

Le mer. 14 nov. 2018 à 23:49, Michael Meeks
 a écrit :
>
> Hi Jérôme,
>
> On 14/11/2018 22:10, Jérôme Bardot wrote:
> > The fact is they do research and like every research there is math and
> > math need 2 things number (int, float, etc) and formula.
> > And when they migrate all already used formula were broken. And if i
> > understand well some of results become false.
>
> Anecdotes like this are extraordinarily frustrating for developers,
> unless they are accompanied by verifiable facts - such ass version,
> platform, OS, formulae and ideally a test file. With those we can fix
> things and unit test them to make sure they don't come back again.

I know that but most of people are too lazy for do real feedback when
this kind of issue occurs.
That for why you have anecdotes instead of real bug report.
But i prefer write an anecdote instead of nothing.

>
> > This story happened several years ago i don’t know what is the state
> > of formula in calc today.
>
> We improve our function & test coverage significantly over time - so
> hopefully much improved =) but it would be nice to be sure by having had
> a good, contemporary bug report.
>

I have to deploy a collabora with nextcloud soon, i hope i can
retrieve some formula to do some tests.

> ATB,
>
> Michael.
>
> --
> michael.me...@collabora.com <><, GM Collabora Productivity
> Hangout: mejme...@gmail.com, Skype: mmeeks
> (M) +44 7795 666 147 - timezone usually UK / Europe

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] Why a school not migrate to libreoffice

[Michael Meeks]

Hi Jérôme,

On 14/11/2018 22:10, Jérôme Bardot wrote:
> The fact is they do research and like every research there is math and
> math need 2 things number (int, float, etc) and formula.
> And when they migrate all already used formula were broken. And if i
> understand well some of results become false.

Anecdotes like this are extraordinarily frustrating for developers,
unless they are accompanied by verifiable facts - such ass version,
platform, OS, formulae and ideally a test file. With those we can fix
things and unit test them to make sure they don't come back again.

> This story happened several years ago i don’t know what is the state
> of formula in calc today.

We improve our function & test coverage significantly over time - so
hopefully much improved =) but it would be nice to be sure by having had
a good, contemporary bug report.

ATB,

Michael.

-- 
michael.me...@collabora.com <><, GM Collabora Productivity
Hangout: mejme...@gmail.com, Skype: mmeeks
(M) +44 7795 666 147 - timezone usually UK / Europe

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Christian Lohmaier]

Hi *,
On Thu, Oct 18, 2018 at 10:02 AM Florian Effenberger
 wrote:
> Edmund Laugasson  wrote on Wed, 17 Oct 2018
> 18:12:02 +0300:
> […]
> thanks for pointing out! John from PortableApps has created 6.1.2 and it
> will be available on our mirrors soon. :-)

And now is :-)
Skipping 6.1.1 should have been a one-time thing, I think you can
assume to have portable versions for all versions - not having one is
exception.

ciao
Christian

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

Re: [tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Florian Effenberger]

Hello,

Edmund Laugasson  wrote on Wed, 17 Oct 2018 
18:12:02 +0300:



Would like to mention that by going to
https://www.libreoffice.org/download/portable-versions/  there is still
v6.1.0 but already second version 6.1.2 is out. Does anyone have an
information - will be there newer versions for portable MS Windows version?
At the same time I would like to say big thanks of allowing us to use
up-to-date AppImage version in Linux.


thanks for pointing out! John from PortableApps has created 6.1.2 and it 
will be available on our mirrors soon. :-)


Florian

--
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] outdated LibreOffice Portable (MS Windows)

[Edmund Laugasson]

Dear all,

Would like to mention that by going to
https://www.libreoffice.org/download/portable-versions/ there is still
v6.1.0 but already second version 6.1.2 is out. Does anyone have an
information - will be there newer versions for portable MS Windows version?
At the same time I would like to say big thanks of allowing us to use
up-to-date AppImage version in Linux.

Thank you,
Edmund Laugasson

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss]

[Romulo Francisco de Souza]

-- 
www.romulosouza.com.br
www.eiipib.org

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy

[tdf-discuss] security related information, CVE-2018-14939, no action required

[Caolán McNamara]

A CVE VE-2018-14939 was logged about a buffer overrun in our realpath
usage in function get_app_path. We contend there is no bug in
LibreOffice and no action is required

https://www.libreoffice.org/about-us/security/advisories/CVE-2018-14939

-- 
To unsubscribe e-mail to: discuss+unsubscr...@documentfoundation.org
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.documentfoundation.org/www/discuss/
Privacy Policy: https://www.documentfoundation.org/privacy