Flutterby™! : Abandonware

Next unread comment / Catchup all unread comments User Account Info | Logout | XML/Pilot/etc versions | Long version (with comments) | Weblog archives | Site Map | | Browse Topics


2015-09-11 23:07:17.726179+00 by Dan Lyke 3 comments

URGENT: get the hell off Apache OpenOffice, it’s insecure and not worked on any more. LibreOffice is better in literally every way. HWP files can be used for an exploit, and you can rename an HWP file to .doc and the recipient will be none the wiser:

they’ve known about this since april 2015 and haven’t fixed it. they have distributed over 50 million known-vulnerable copies of AOO since 27 april.

the fix is, literally, remove one file from the installer. they haven’t got it together to do this in five months.

[ related topics: Free Software Open Source ]

comments in ascending chronological order (reverse):

#Comment Re: Abandonware made: 2015-09-12 20:04:26.000156+00 by: Andy Lyke [edit history]

Dan, do you have thoughts or comments on this?

I deleted the dll file, but what about the "in every way"? Is there benefit to switching to libre office?

#Comment Re: Abandonware made: 2015-09-13 15:55:41.089946+00 by: Dan Lyke

I switched to LibreOffice because Ubuntu did. I haven't been tracking the politics of it, but my impression is that LibreOffice is still under active development, where OpenOffice has essentially been abandoned...

#Comment Re: Abandonware made: 2015-09-14 01:29:48.508951+00 by: Andy Lyke