Please refer to the witty Larry I. Gusaas. Hi, Maybe this will clear it up. I received the following message:
Subject: CVE-2015-1774: OpenOffice HWP Filter Remote Execution and DoS Vulnerability CVE-2015-1774 OpenOffice HWP Filter Remote Code Execution and Denial of Service Vulnerability A vulnerability in OpenOffice's HWP filter allows attackers to cause a denial of service (memory corruption and application crash) or possibly execution of arbitrary code by preparing specially crafted documents in the HWP document format. Severity: Important Vendor: The Apache Software Foundation Versions Affected: All Apache OpenOffice versions 4.1.1 and older are affected. Mitigation: Apache OpenOffice users are advised to remove the problematic library in the "program" folder of their OpenOffice installation. On Windows it is named "hwp.dll", on Mac it is named "libhwp.dylib" and on Linux it is named "libhwp.so". Alternatively the library can be renamed to anything else e.g. "hwp_renamed.dll". This mitigation will drop AOO's support for documents created in "Hangul Word Processor" versions from 1997 or older. Users of such documents are advised to convert their documents to other document formats such as OpenDocument before doing so. Apache OpenOffice aims to fix the vulnerability in version 4.1.2. Credits: Thanks to an anonymous contributor working with VeriSign iDefense Labs. On 26 Apr 2015, at 1:26 AM, Larry Gusaas <larry.gus...@gmail.com> wrote: > > On 2015-04-25, 1:55 PM Pieter Zwanepoel wrote concerning "Library error": >> Hi, I have 4.1.1 on my Mac, but where is the library? > Which library are you referring to? There are three on a Mac. > >> Some of us are just users and not so technical. Tell us how and where to >> find library to make the correction. > What correction? Give more details on what you want to do. > Just users? Do you know how to operate a car? Operating a computer also > requires skills. > > -- > > As a courtesy I have sent a copy of this reply to you as well as to the > mailing list. Do Not reply to me personally but just to the list at > <users@openoffice.apache.org> <mailto:users@openoffice.apache.org> - replies > to my personal email address will be ignored. > > Since you are not subscribed to this list you may not see all the replies to > your query.To subscribe Apache OpenOffice mailing lists go to > http://openoffice.apache.org/mailing-lists.html > <http://openoffice.apache.org/mailing-lists.html> > > For user support you can also use The OpenOffice.org Community Forum > http://user.services.openoffice.org/en/forum/ > <http://user.services.openoffice.org/en/forum/> > > _________________________________ > > Larry I. Gusaas > Moose Jaw, Saskatchewan Canada > Website: http://larry-gusaas.com <http://larry-gusaas.com/> > "An artist is never ahead of his time but most people are far behind theirs." > - Edgard Varese I can’t find any file called “Library” or “libhwp.dylib” on my Mac. Kind regards, Pieter Zwanepoel.
