3 ms·
Better isn't just one dimension but I've repeatedly heard that OO is a damn dumpster fire for loading untrusted content: https://www.openoffice.org/security/bul
by mdaniel 2y ago
Better isn't just one dimension but I've repeatedly heard that OO is a damn dumpster fire for loading untrusted content: https://www.openoffice.org/security/bulletin.html https://www.openoffice.org/security/bulletin.html vs https://www.libreoffice.org/about-us/security/advisories/ https://www.libreoffice.org/about-us/security/advisories/
Them both being written in a memory unsafe language[1][2] isn't helping matters
Also, while digging up those links I noticed the last release of OO was in Dec 2023 which is a lot of time for all the components they bundle to acquire vulns. But at least they're consistent about it since the release before that was in Feb 2023
1: https://github.com/apache/openoffice/tree/AOO4115-GA/main/basic/source/runtime https://github.com/apache/openoffice/tree/AOO4115-GA/main/ba...
2: https://cgit.freedesktop.org/libreoffice/core/tree/basic/source/runtime?h=libreoffice-24.8.3.2 https://cgit.freedesktop.org/libreoffice/core/tree/basic/sou...
- raverbashing 2y agoYes, you are correct Also OO was (in)famous for vendoring almost all dependencies (optionally - to make matters even worse), not sure how that works with LO