Re: [libreoffice-users] libreoffice developers please answer my question about security!

2016-10-18 Thread Rob Jasper
OK, I now succesfully installed the 32 bit vwrsion-
Thanks for the suggestion.

On 18 okt. 2016, at 20:37, V Stuart Foote wrote:

> Rob wrote
>> I am still using LibreOffice  4.3.6.1 since LO makes it impossible for me
>> to upgrade in my OS (Mac OS X Lion 10.7.5).
>> My iMac 24", although old, functions very well, but Apple thinks that my
>> HW is to old to update the OS to a newer version. Since LO decided to go
>> with new libraries I am stuck with LO 4.3.6.1
> 
> Sure, at 4.4 we dropped support for OS X 10.7  (Lion) and earlier and also
> of 32-bit builds for OS X,  but you should probably update to the final
> 4.3.7.2 build:
> 
> http://downloadarchive.documentfoundation.org/libreoffice/old/4.3.7.2/mac/
> 
> 
> 
> 
> 
> --
> View this message in context: 
> http://nabble.documentfoundation.org/libreoffice-developers-please-answer-my-question-about-security-tp4197466p4197515.html
> Sent from the Users mailing list archive at Nabble.com.
> 
> -- 
> To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
> Problems? 
> http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://listarchives.libreoffice.org/global/users/
> All messages sent to this list will be publicly archived and cannot be deleted
> 


-- 
To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted



Re: [libreoffice-users] libreoffice developers please answer my question about security!

2016-10-18 Thread Rob Jasper
Well, it installs, but when I try to start it it comes back with:



You can't use this version ofthe application LibreOffice.aoo with this version 
of Mac OS X.
You have Mac OS X 10.7.5. The application requires Mac OS X 10.8 or later.

Although it is a nice message, I woyld prefer to get it BEFORE installation, 
not after!

Rob.


On 18 okt. 2016, at 20:37, V Stuart Foote wrote:

> Rob wrote
>> I am still using LibreOffice  4.3.6.1 since LO makes it impossible for me
>> to upgrade in my OS (Mac OS X Lion 10.7.5).
>> My iMac 24", although old, functions very well, but Apple thinks that my
>> HW is to old to update the OS to a newer version. Since LO decided to go
>> with new libraries I am stuck with LO 4.3.6.1
> 
> Sure, at 4.4 we dropped support for OS X 10.7  (Lion) and earlier and also
> of 32-bit builds for OS X,  but you should probably update to the final
> 4.3.7.2 build:
> 
> http://downloadarchive.documentfoundation.org/libreoffice/old/4.3.7.2/mac/
> 
> 
> 
> 
> 
> --
> View this message in context: 
> http://nabble.documentfoundation.org/libreoffice-developers-please-answer-my-question-about-security-tp4197466p4197515.html
> Sent from the Users mailing list archive at Nabble.com.
> 
> -- 
> To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
> Problems? 
> http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://listarchives.libreoffice.org/global/users/
> All messages sent to this list will be publicly archived and cannot be deleted
> 


-- 
To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted



Re: [libreoffice-users] libreoffice developers please answer my question about security!

2016-10-18 Thread Rob Jasper

On 18 okt. 2016, at 17:14, Italo Vignoli wrote:

> On 18/10/2016 15:38, nasrin khaksar wrote:
> 
>> does it mean that libreoffice which is one branch of openoffice, is
>> extremely secure and it does not have any security Vulnerability to
>> fix in the every new release version?
> 
> LibreOffice is a fork of OpenOffice.org, not a branch, and as such has
> independent development and security management.
> 
>> all versions are the same in security and its no different which
>> version i desire to use. is it true?
> 
> Absolutely not. You should use one of the two versions currently
> available for download.
> 
>> i use and wish to use 4.4.6, is it completely secure like the oldest
>> and newer versions?
> 
> No, you should use either 5.1.x or 5.2.x. LibreOffice 4.4.6 is over two
> years old, and has not been updated security wise for over one year.

I am still using LibreOffice  4.3.6.1 since LO makes it impossible for me to 
upgrade in my OS (Mac OS X Lion 10.7.5).
My iMac 24", although old, functions very well, but Apple thinks that my HW is 
to old to update the OS to a newer version. Since LO decided to go with new 
libraries I am stuck with LO 4.3.6.1

> 
> -- 
> Italo Vignoli - LibreOffice Marketing & PR
> mobile/signal +39.348.5653829 - email it...@libreoffice.org
> hangout/jabber italo.vign...@gmail.com - skype italovignoli
> GPG Key ID - 0xAAB8D5C0
> DB75 1534 3FD0 EA5F 56B5 FDA6 DE82 934C AAB8 D5C0
> 
> -- 
> To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
> Problems? 
> http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://listarchives.libreoffice.org/global/users/
> All messages sent to this list will be publicly archived and cannot be deleted


-- 
To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted



Re: [libreoffice-users] libreoffice developers please answer my question about security!

2016-10-18 Thread Cley Faye
2016-10-18 15:38 GMT+02:00 nasrin khaksar :

> does it mean that libreoffice which is one branch of openoffice, is
> extremely secure and it does not have any security Vulnerability to
> fix in the every new release version?
>

​No. As stated by others, LibreOffice and OpenOffice are two different
project, even if they share the same origin, and as such do things
differently.
Regarding vulnerabilities, they exist and get fixed, but these fixes are
just part of the regular development of the project. No need to highlight
them, except for some rare cases (I might be wrong, but some times ago such
issue was raised and discussed, I believe).



> all versions are the same in security and its no different which
> version i desire to use. is it true?
>

​Absolutely not. In fact, It is false for a lot of project. Security fixes
are part of a project, and are integrated in each new versions. Except for
projects that maintain a LTS version (or similar), backporting security
fixes​ to older releases is resource intensive. Some linux distributions
that maintain LTS versions of their releases might work on backporting
security fixes to older LibreOffice version, but it is dependent on them.


> i use and wish to use 4.4.6, is it completely secure like the oldest
> and newer versions?
>

Nope. Since older versions are not maintained, if a vulnerability is found
in a newer version it might affect older versions. It is recommended to use
either the latest version, or a long-term support one, as they are the only
one that are sure to get all security updates.

In general, there is little to no incentive to use older versions: newer
versions should not go back in term of functionalities, and get a lot of
bug fixed (not only security ones). If you have a specific issue with newer
version, it might be interesting to get it fixed instead of using an old,
insecure version.

-- 
To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted


Re: [libreoffice-users] libreoffice developers please answer my question about security!

2016-10-18 Thread Robert Großkopf
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Nasrin,

we had the same discussion on German mailinglist.

The special fix, which has been published for AOO now, has been
included in version LO 4.2. It's a little bit ago - about 2 years and
10 months. So no problems to take the last LO 4.4-version. But better
would be, to take a version, where new fixes will be made. If you
wan't to have a secure version of LO you better take LO 5.1 or LO 5.2
instead.

Regards

Robert
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=fJCQ
-END PGP SIGNATURE-

-- 
To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted


Re: [libreoffice-users] libreoffice developers please answer my question about security!

2016-10-18 Thread Italo Vignoli
On 18/10/2016 15:38, nasrin khaksar wrote:

> does it mean that libreoffice which is one branch of openoffice, is
> extremely secure and it does not have any security Vulnerability to
> fix in the every new release version?

LibreOffice is a fork of OpenOffice.org, not a branch, and as such has
independent development and security management.

> all versions are the same in security and its no different which
> version i desire to use. is it true?

Absolutely not. You should use one of the two versions currently
available for download.

> i use and wish to use 4.4.6, is it completely secure like the oldest
> and newer versions?

No, you should use either 5.1.x or 5.2.x. LibreOffice 4.4.6 is over two
years old, and has not been updated security wise for over one year.

-- 
Italo Vignoli - LibreOffice Marketing & PR
mobile/signal +39.348.5653829 - email it...@libreoffice.org
hangout/jabber italo.vign...@gmail.com - skype italovignoli
GPG Key ID - 0xAAB8D5C0
DB75 1534 3FD0 EA5F 56B5 FDA6 DE82 934C AAB8 D5C0

-- 
To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted


[libreoffice-users] libreoffice developers please answer my question about security!

2016-10-18 Thread nasrin khaksar
hello.
i use libreoffice for two years as you know.
today i recieved an email about security Vulnerability which are
solved in different versions of openoffice.
but fortunately i did not see such emails about libreoffice!
does it mean that libreoffice which is one branch of openoffice, is
extremely secure and it does not have any security Vulnerability to
fix in the every new release version?
all versions are the same in security and its no different which
version i desire to use. is it true?
i use and wish to use 4.4.6, is it completely secure like the oldest
and newer versions?
finally, if its impossible or difficult to answer my questions in the
list, please send me the answer via my personal email address!
nasrinkhaks...@gmail.com
thanks so much for your great job and God bless you all!


-- 
we have not sent you but as a mercy to the creation.
holy quran, chapter 21, verse 107.
in the very authentic narration is:
imam hosein is the beacon of light and the ark of salvation.
best website for studying islamic book in different languages
al-islam.org

-- 
To unsubscribe e-mail to: users+unsubscr...@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted