On Wednesday 13 February 2008 06:43:21 David B Teague wrote:
> Secunia PCI classed the version of OO.o I have installed, 2.3.1, as
> "insecure" and connected me to the OO.o downloads page.
>
> (Secunia PCI monitors a number of programs for security status and ranks
> them as "insecure", "patched", or "end of life", i.e., no longer
> supported by vendor. )
>
> I fetched this version of OO.o from the downloads page
>
> OOo_2.3.1_Win32Intel_install_en-US.exe
>
> This does not appear to be different from that I have installed, so I
> ask you about this.
>
> (From time to time the updated version of a program is not yet available
> on the main vendor download site that Secunia shows.)
>
> Questions:
>
> How severe is the security problem with 2.3.1?
> Is there a more secure OO.o yet stable version out there?
> If you recommend a later version, where do I find it?
>
> Warmest Regards
> David Teague
> Double Bass in Fifths Tuning
Maybe the first thing you should do is to contact Secunia PCI to find out
why they consider OpenOffice.org "insecure". As far as I know, there have
been very few security problems found in OOo, and they have been fixed fairly
quickly. One of these problems concerned something that was discovered "in
the lab", and it was fixed before it got out into the wild.
Dan
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
