2 ms·
The Register posted about this mystery 4.1.4 security fix mentioned in the board minutes back in April. After the article was published, the meeting record appe
by 0x0 9y ago
The Register posted about this mystery 4.1.4 security fix mentioned in the board minutes back in April. After the article was published, the meeting record appeared to have been edited and any mention of security fixes removed (with time stamps in the apache directory list revealing as much) - https://www.theregister.co.uk/2017/04/28/apache_openoffice_not_dead_yet/ https://www.theregister.co.uk/2017/04/28/apache_openoffice_n...
It was also quite telling that when a security vulnerability in 4.1.1 was discovered, at least when checking the wayback machine the earliest security announcement was posted at April 29th 2015 ( http://web.archive.org/web/20150429084734/https://www.openoffice.org/security/cves/CVE-2015-1774.html http://web.archive.org/web/20150429084734/https://www.openof... ) and while multiple snapshots have been captured since ( http://web.archive.org/web/20150501000000*/https://www.openoffice.org/security/cves/CVE-2015-1774.html http://web.archive.org/web/20150501000000*/https://www.openo... ) it took until November 1st 2015 for the recommendation to change from "delete the .dll" to "upgrade to 4.1.2" ( http://web.archive.org/web/20151101015732/https://www.openoffice.org/security/cves/CVE-2015-1774.html http://web.archive.org/web/20151101015732/https://www.openof... ). At least until September 24th 2015, version 4.1.1 was still the latest version and the recommendation to delete the .dll was still present ( http://web.archive.org/web/20150924061922/https://www.openoffice.org/security/cves/CVE-2015-1774.html http://web.archive.org/web/20150924061922/https://www.openof... )