content/security/index.html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  <title>Apache OpenOffice Security Team</title>
  <style>
  /*<![CDATA[*/
  hr { display: block }
  /*]]>*/
  </style>
</head>

<body>

<h2>Apache OpenOffice Security Team</h2>

  <p>
    For general information about Apache OpenOffice security, please see our
    <a href="/security/faq.html">Frequently Asked Questions page</a>.
  </p>

  <p>
    For details of our security alerts by email service, please see our
    <a href="alerts.html">Security Alerts page</a>.
  </p>

  <p>
    OpenOffice is a complex piece of software developed by various teams. As such, it can contain security
    relevant bugs. If you are a software developer and you believe you have found a vulnerability in our
    source code, please contact our <a href="mailto:security@openoffice.apache.org">security team</a> so
    we can evaluate the problem and work on proper solution for our users and for future versions of our
    product.
  </p>

  <p>
    We appreciate early confidential disclosure to give vendors of products and solutions based on
    OpenOffice time to react. We will coordinate the disclosure of your report with you.
  </p>

  <p>
    In your report, please include the following informations.
  </p>

  <ul>
    <li>
      In which version of OpenOffice did you identify the problem?
    </li>

    <li>
      Do you have an official version of OpenOffice or e.g. a build from your GNU/Linux distribution
      (include the URL of the build if possible)?
    </li>

    <li>
      What is the impact of the problem (data loss, denial of service, executing commands, etc.)?
    </li>

    <li>
      How can the problem be reproduced?
    </li>

    <li>
      Is there an existing exploit?
    </li>

    <li>
      Has the problem already been published?
    </li>
  </ul>

  <p>
    After we receive your report, we will work on the evaluation and we will reply to you (typically in the
    next business days).
  </p>

  <p>
    Vulnerabilities which have been resolved are listed in our <a href="bulletin.html">Bulletin</a>.
  </p>

  <hr />

  <p>
    <a href="/security/">Security Home</a>
  </p>

</body>
</html>