Open Source Code
Friday 5th January, 2007 12:13 Comments: 0
One of the good things about Open Source is you know exactly what's in the code you're using and you can often compile it for your specific processor so it runs much faster. One of the down sides is you can't guarantee that everyone is using the same - i.e. your - code, as seen in this email about OpenOffice:
Pete Connolly (pete connolly btinternet com)
On Thursday 04 January 2007 21:00, David Litchfield wrote:
> Hi Florian,
>
> >* NGSSoftware Insight Security Research:
> >> The vulnerabilities, three heap overflows, affect OpenOffice 2.1.0 and
> >>
> >> http://download.openoffice.org/2.1.0/index.html
> >
> > As far as I can tell, there is no version newer than 2.1.0 available
> > at the web site. According to uncorroborated, version 2.1.0 is not
> > affected.
> >
> > Would anyone please clarify the situation? Thanks.
>
> It's version's prior to 2.1.0. Thanks for pointing this out. I'll send a
> follow up note.
> Cheers,
> David Litchfield
>
According to Marcus Meissner from SuSE security, opensuse 10.2 contains an OOo
2.0.4 with the security fix backported from 2.1.
Just to add to the fun.
Cheers
Pete
You'd never get a mix-and-match version of Microsoft Office ;)
Pete Connolly (pete connolly btinternet com)
On Thursday 04 January 2007 21:00, David Litchfield wrote:
> Hi Florian,
>
> >* NGSSoftware Insight Security Research:
> >> The vulnerabilities, three heap overflows, affect OpenOffice 2.1.0 and
> >>
> >> http://download.openoffice.org/2.1.0/index.html
> >
> > As far as I can tell, there is no version newer than 2.1.0 available
> > at the web site. According to uncorroborated, version 2.1.0 is not
> > affected.
> >
> > Would anyone please clarify the situation? Thanks.
>
> It's version's prior to 2.1.0. Thanks for pointing this out. I'll send a
> follow up note.
> Cheers,
> David Litchfield
>
According to Marcus Meissner from SuSE security, opensuse 10.2 contains an OOo
2.0.4 with the security fix backported from 2.1.
Just to add to the fun.
Cheers
Pete
You'd never get a mix-and-match version of Microsoft Office ;)