Well no

we are talking here about a second security issue taht has come up days after the one you refer to, which is the bug in libwpd, a library for handling WordPerfect documents that is included in OpenOffice.org, that has indeed benn patched.

As far as I know, there is still no patch for the security issue affecting calc documents

It seems that the more people use OpenOffice the more 'pirates' try and find vulnerabilities. So, I wonder whether Ooo will become a bit like MSoffice, where vulnerabilities are discovered almost every day, and some of them stay unpatched for ...weeks!!!! Though, I guess, since Ooo is open source it must be eaier to discover security vulnerabilities, because any malicious person can read the code and find holes


NoOp wrote:
On 03/25/2007 03:26 PM, Dan Lewis wrote:

As new as this is (March 22, 2007), it will take a little time before much is said. At least that is my guess. If the problem in Calc is a macro, then there is certain level of security already built into Calc. Every Calc containing a macro that is opened begins with a warning that the file contains a macro. The person then has a choice as to whether to allow the macro(s) to run or to disable the macro(s). This problem is perhaps a very good reason why this warning should never be disabled.

Dan

Perhaps if the 'reporters' of this security issue would follow through &
monitor the status they will find that this issue has been corrected &
patched already:

http://www.debian.org/security/2007/dsa-1270
http://secunia.com/product/13657/?task=advisories_2007

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to