Well no
we are talking here about a second security issue taht has come up days
after the one you refer to, which is the bug in libwpd, a library for
handling WordPerfect documents that is included in OpenOffice.org, that
has indeed benn patched.
As far as I know, there is still no patch for the security issue
affecting calc documents
It seems that the more people use OpenOffice the more 'pirates' try and
find vulnerabilities. So, I wonder whether Ooo will become a bit like
MSoffice, where vulnerabilities are discovered almost every day, and
some of them stay unpatched for ...weeks!!!!
Though, I guess, since Ooo is open source it must be eaier to discover
security vulnerabilities, because any malicious person can read the code
and find holes
NoOp wrote:
On 03/25/2007 03:26 PM, Dan Lewis wrote:
As new as this is (March 22, 2007), it will take a little time
before much is said. At least that is my guess.
If the problem in Calc is a macro, then there is certain level
of security already built into Calc. Every Calc containing a macro
that is opened begins with a warning that the file contains a macro.
The person then has a choice as to whether to allow the macro(s) to
run or to disable the macro(s).
This problem is perhaps a very good reason why this warning
should never be disabled.
Dan
Perhaps if the 'reporters' of this security issue would follow through &
monitor the status they will find that this issue has been corrected &
patched already:
http://www.debian.org/security/2007/dsa-1270
http://secunia.com/product/13657/?task=advisories_2007
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]